Question
Prime Therapeutics
US
Last activity: 8 Apr 2022 16:16 EDT
Apache Log4j 2.17.1 Vulnerability Hotfixes
As per the pega documentation to receive Apache Log4j 2.17.1 Vulnerability Hotfix we need to be on 8.4.6 version.
Currently we are on 8.4.0 and already applied Log4j 2.17 hotfix. Can we get hotfix for Log4j 2.17.1 without upgrading to 8.4.6 version ?
Accepted Solution
Updated: 8 Apr 2022 16:16 EDT
Pegasystems Inc.
GB
@srinivasur6711 yes you need to be on the latest version,
"... Pega’s Log4j 2.17.1 hotfixes will only be available for the latest patch release of each Pega Platform version, and clients must evaluate whether they require this fix. Clients who are on prior patch versions must upgrade to the latest patch version in order to receive and apply this hotfix, or they must apply a 2.17 hotfix from the Apache Log4j 2.17 Vulnerability Hotfixes Advisory. "
This is as per the article:
Updated: 31 Jan 2022 12:49 EST
Prime Therapeutics
US