Log4j Vulnerability in Looker Stand-Alone Instances?

Is there a concern for the recent log4j vulnerability with looker and if so is there a patch?

12 4 1,639
4 REPLIES 4

do we have the updated link ? 

Hi all,

Please check out the updates here about the log4j vulnerability: https://help.looker.com/hc/en-us/articles/4412928350867

Hi

This doc https://help.looker.com/hc/en-us/articles/4412928350867 says

All Looker hosted instances have been updated to a Looker version with Log4j 2 v2.16. Customers on customer hosted instances should update to a version listed below as soon as possible.

But apache https://logging.apache.org/log4j/2.x/security.html doc says

CVE-2021-45105 is fixed in Log4j 2.17.0

Please see the help center article for the latest updates from Looker on CVE-2021-45105.