Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

TimestampDescription
2022 03 07 18:00 GMT+1

2021x Refresh1 HF2 and 2021x Refresh2 HF2 (hot fixes) with log4j 2.17.1 version are released as Remediation option. Also, log4j 1.2 version removed from these hotfixes.

Added CVE-2021-44832 to vulnerability list.

2022 01 06 18:00 GMT+1

Updated log4j version from 2.17.0 to 2.17.1 for modeling and collaboration tools in Remediation. Added additional note for collaboration tools v19.0 SPx in Remediation.

2021 12 22 19:30 GMT+12021x Refresh1 and 2021x Refresh2 HF1 (hot fixes) with log4j 2.16.0 version are released as Remediation option.
2021 12 20 21:00 GMT+1UpdatedRemediation options for modeling and collaboration tools.
2021 12 20 16:30 GMT+1Added log4j version 2.17.0 for modeling and collaboration tools in Remediation.
2021 12 17 14:00 GMT+1UpdatedRemediation options for modeling and collaboration tools.
2021 12 17 13:00 GMT+1Updated log4j version from 2.15.0 to 2.16.0 for modeling and collaboration tools in Remediation.
2021 12 16 14:00 GMT+1Added Cameo DataHub plugin to the list in Apache Log4j2 version 2.0-2.14.1 is a part of the following products, however it is not used for logging. No action to perform.
2021 12 16 14:00 GMT+1
Added information about FlexNet Publisher in Apache Log4j2 version 2.0-2.14.1 is a part of the following products. Action to perform.

...

Download and install 2021x Refresh2 HF2 (hot fix). This is a new full 2021x Refresh2 version build with log4j 2.17.1.  

See Downloading installation files

Option 2

  1. Make sure application is not running
  2. Download log4j 2.17.1 from apache website (link)
  3. Search now for these jar files in installation base
    • log4j-core-2.*.jar
    • log4j-1.2-api-2.*.jar
    • log4j-api-2.*.jar
    • log4j-slf4j-impl-2.*.jar
  4. Replace any match by the 2.17.1 version. Make sure the original filename is unchanged. See example below.
  5. The replacing and renaming operations must be performed for all jar files found from the list

...

Download and install 2021x Refresh2 HF2 (hot fix). This is a new full 2021x Refresh2 version build with log4j 2.17.1.

See Downloading installation files

Option 2

In your installation base, please search for the following files: webapp.war, admin.war, collaborator.war, document-exporter.war, resource-usage-map.war, resources.war. If you do not find any result, you can stop the procedure here. Your installation does not contain web applications

...

Download same instructions CATIA_No_Magic_log4j_procedure_V4.pdf