UnratedFix available
Release notes from logging-log4j2 2.25.3
Log4j 2.25.3 includes a fix for incorrect host name verification in SSL/TLS configuration used by Socket Appender when SSL/TLS is enabled.
Announced Source revision 1
Original source ↗github-apache-logging-log4j2
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
Fix incorrect handling of the host name verification in SSL/TLS configuration, which is used by Socket Appender when SSL/TLS is enabled (#4002)
logging-log4j2
Release notes from logging-log4j2
- Affected versions
- Not stated in this extraction
- Fixed versions
- 2.25.3
2.25.3
- Prerequisites
- when SSL/TLS is enabled
Fix incorrect handling of the host name verification in SSL/TLS configuration, which is used by Socket Appender when SSL/TLS is enabled (#4002)
Publisher severity
No explicit severity was extracted.
- Event
- #77067 · Revision 1
- Added to Heist Feed
- Publisher date