Someone please update on the log4j. I checked v8.2.5 and found org.apache.log4j_1.2.15.v201012070815.jar is there and it does not have there log4j 2.17.0 in the v8.2.5 version although it had it in version 8.2.3. Thinking why the latest version does not have the latest release of log4j 2.17.1 ? Plea…

@ami.das @Russ_Thomas The ETA of v8.3.0 is the end of March and the beta version will available this week.

Did you try searching? [image] Log4J Official Thread Katalon Studio Hi everyone If you want to get rid of the Log4j versions before 2.15.0, you can use 8.2.3.beta. This beta release upgraded log4j to version 2.17.0. Download it from our GitHub Repo at: https://github.co…

Sorry my bad, log4j 2.17.0 is there in Katalon v8.2.3. But I noticed its not there in the latest release 8.2.5. Rather it has log4j 1.2.15. May i know why ?

That must be a build issue ( @duyluong , @ThanhTo , @devalex88 ) because it was supposed to have been updated to v2.x. @duyluong the link you posted previously has been updated to include v1.x vulnerabilities. Comment by [remkop] …

@ami.das Katalon Studio v8.2.5 doesn’t include Log4J 2.17.0 upgrade in v8.2.3.beta. We planed to update Log4J v2.17.1 (the complete version to fix Log4Shell) in v8.3.0.

Thanks for the update. May i know when 8.3.0 will be coming ? This is urgent. Please respond ASAP. Thanks

@Russ_Thomas The following is from v8.2.3 (…\configuration\resources\lib) [image] And this is from 8.2.5: No log4j jar in …\configuration\resources\lib directory The following i found in \plugins: [image] Wondering why we dont have the 2.17.0 log4j in v8.2.5 ? Also please suggest when 8.3.0 …

As to what happened to leave log4j 2x out of Katalon 5.2.5, this is just an educated guess… There were a number of code branches in various states of development released prior to the release of 8.2.5, as evidenced by the number of alpha and beta releases leading up to its release. When the eventua…

Thanks @Russ_Thomas for the update. Yes i would request to release the next version as soon as possible. Our Security compliance management team won’t let us use the version having any vulnerability. btw, can you tell me what will be the impact if we use the 8.2.5 by removing the org.apache.log4j_1.…

[image] ami.das: what will be the impact if we use the 8.2.5 by removing the org.apache.log4j_1.2.15.v201012070815.jar from current version 8.2.5 ? It’s likely to cause exceptions and/or crash Katalon. Why not drop back to 8.2.3 beta?

Our company security compliance team informed to go with 2.17.1 of log4j thats why we didn’t install Katalon 8.2.3 beta. Would be great if you can give me an estimated date of the next Katalon release.

Seeking update on log4j

Web Testing

Russ_Thomas January 27, 2022, 2:08pm 16

@ami.das 8.3.0 beta has been released. See…

Topic		Replies	Views
Log4J Official Thread Miscellaneous start-page	1	1994	December 22, 2021
Katalon Response to the Log4J2 exploit (cve-2021-44228) Bug Report katalon-studio , bugs-report	6	3896	April 13, 2022
Katalon Studio was crashed after start up Desktop Testing linux , katalon-studio	8	1639	August 24, 2021
Can org.apache.httpcomponents.httpclient_4.5.1.jar be replaced with org.apache.httpcomponents.httpclient_4.5.13.jar and the .classpath be modified? Web Testing katalon-studio	35	4244	August 13, 2022
I am not able to open katalon . i am having error Bug Report linux , katalon-studio , bugs-report	6	1340	September 12, 2022

Seeking update on log4j

Related topics