Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

For modeling tools (Magic Software Architect, Magic Cyber Systems Engineer, Magic Systems of Systems Architect , MagicDraw, Cameo Systems Modeler, Cameo Enterprise Architecture)

  1. Make sure application is not running
  2. Download log4j v2Download log4j 2.16.0 (or   2.17.0)   from here.
  3. Replace all log4j 2.x jar files with their respective equivalents from the downloaded version zip file while keeping the original file name.

You need to replace these files

...

  1. from apache website (link)
  2. Search now for these jar files in installation base
    • log4j-core-2.*.jar
    • log4j-1.2-api-2.

...

    • *.jar
    • log4j-

...

    • api-2.*

...

    • .jar
    • log4j-slf4j-impl-2.*

...

    • .jar

Example:

...

  1. Replace any match by the 2.16.0 (or 2.17.0) version. Make sure the original filename is unchanged. See example below.
  2. The replacing and renaming operations must be performed for all jar files found from the list

Example - if you find log4j-core-2.11.

...

2.jar:

...

  1. Remove log4j-core-2.11.

...

  1. 2.jar

...

  1. Copy log4j-core-2.16.0.jar

...

  1. to the same location
  2. Rename log4j-core-2.16.

...

  1. 0.jar

...

  1. to log4j-core-2.11.2.jar

See the detailed procedure to mitigate the risk concerning the CVE-2021-44228 vulnerability. 

...