L-Soft Advisories: Information about Log4j Vulnerabilities

Information about LISTSERV and LISTSERV Maestro with regards to the Log4j vulnerabilities CVE-2021-44228 (Log4Shell) and CVE-2021-45046:

* LISTSERV does not use Log4j and is not affected by these vulnerabilities.

* LISTSERV Maestro 9.0 and older does not use Log4j and is not affected by these vulnerabilities.

* LISTSERV Maestro 10.0-1 to 10.0-3 use Log4j 2.12.1 and may therefore be vulnerable. We strongly recommend applying build 10.0-5 or later.

* LISTSERV Maestro 10.0-4 uses Log4j 2.15.0 and is therefore not vulnerable to CVE-2021-44228 (Log4Shell) but may still be vulnerable to CVE-2021-45046. We strongly recommend applying build 10.0-5 or later.

* LISTSERV Maestro 10.0-5 and later uses Log4j 2.16.0 and is not affected by these vulnerabilities.


########################################################################

L-Soft international, Inc. | 7550 Wisconsin Avenue, Suite 400 | Bethesda, MD 20814 | USA
L-Soft Sweden AB | Fatbursgatan 15 | 118 28 Stockholm | Sweden

L-Soft's Opt-In Center: https://www.lsoft.com/news/optin.asp
LISTSERV on Facebook: https://www.facebook.com/LISTSERV
L-Soft on Twitter: https://twitter.com/LSoftLISTSERV
L-Soft's YouTube Channel: https://www.youtube.com/LSoftLISTSERV
L-Soft on LinkedIn: https://www.linkedin.com/company/l-soft
L-Soft on Instagram: https://instagram.com/lsoftlistserv

Please note that you were sent this announcement because you are subscribed to the L-Soft Product Updates List.

To unsubscribe, click here:
https://maestro.lsoft.com/list/leave.html?lui=ov8ia944&mContainer=277&mOwner=G1d1f1g&mListId=HL%23718&address=LSOFT-UPDATES%40COMMUNITY.EMAILOGY.COM&val=d0vkkyir&d=211215Z%2C938%2C2