Hi, we've a jira server app and its .jar file. It has a dependency on log4j 1.2.6 indirectly i.e. we dont have the ref in pom.xml but one of the dependencies has it. Can someone advise on how to make this transitive dependency to latest log4j?
Hi @Ramakrishna Grandhi ,
If the official security advisory does not answer your question (and it may - I am not a developer and cannot say for certain), then I would suggest these next-steps:
Daniel | Atlassian Support
Community Leaders are just members like yourself that are active here and may or may not have additional information on certain topics. Personally I have no knowledge on this topic and unsure if Daniel does either. I would just recommend keeping that in mind before pinging individuals.
If you need support from Atlassian directly then you would want to use their support website.
In regards to this vulnerability all I know is was revealed last week and it affects some versions.
Wish I could be more help! Good Luck!
Hi everyone 👋, I really like the format of the webinar opportunities summary that @Jimmy Seddon posts monthly on the Welcome Centre group. It's a great place to go to check that you didn...
Connect with like-minded Atlassian users at free events near you!Find an event
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no Community Events near you at the moment.Host an event
You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events