RE: CVE-2021-44228, Log4J 2 / Log4Shell Security Advisory for Notes, Domino, Verse, and Traveler

Other helpful links/info:

Here is information I have been able to find related to this security 
vulnerability.  The net is at this point they are still checking on Notes, 
Domino, Sametime. Traveler is confirmed to not be impacted. Connections is 
known to be impacted.

The following are known to NOT be impacted (this list will grow as they 
complete testing of Notes/Domino/Sametime):

        Verse, iNotes, SafeLinx, Domino Volt, Traveler, HCL Traveler for 
Microsoft Outlook (HTMO), Nomad web, Verse Mobile iOS and Android, 
Sametime Mobile iOS and Android, Nomad Mobile iOS and Android, Companion 
iOS, ToDo iOS 

Question posed in the HCL Software Community to follow to determine what 
other updates are provided generally: 
https://support.hcltechsw.com/community?id=community_question&sys_id=6845401f1b588510534c4159cc4bcbfb

Apache Tika used by Domino indexing attachments: 
https://support.hcltechsw.com/community?id=community_question&sys_id=a48372d2871449d85440c9d8cebb35ba

        Christoph Stoettner says to stop the Help application until a fix 
has been issued since log4j-2.3 is included in the Help.ear file.

 


Security Advisory from HCL: 
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0095490 

Security Advisory for Notes, Domino, Verse and Traveler: 
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0095516

Impact to Connections: https://stoeps.de/posts/2021/log4j_how_to_find_out/ 
 


----------------------------------------------------------------------------------------------
Kim Greene
Kim Greene Consulting, Inc.
President
HCL Collaboration Solutions & MongoDB
Office: 507-216-5632    Mobile: 507-254-9353
Email: [email protected]     Web: www.kimgreene.com
Blog: DominoDiva     LinkedIn: kimgreeneconsulting     Twitter: 
iSeriesDomino




From:   "Rob Berendt" <[email protected]>
To:     "Lotus Domino on the IBM i (AS/400 and iSeries)" 
<[email protected]>
Date:   12/13/2021 01:48 PM
Subject:        RE: CVE-2021-44228, Log4J 2 / Log4Shell Security Advisory 
for Notes,  Domino, Verse, and Traveler
Sent by:        "Domino400" <domino400-bounces-+hD5IHI5Xscn3HwCXmMcX9BPR1lH4CV8@public.gmane.org>



Lots of comments about related products at
https://support.hcltechsw.com/community?id=community_question&sys_id=a48372d2871449d85440c9d8cebb35ba



Rob Berendt
-- 
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to:  7310 Innovation Blvd, Suite 104
          Ft. Wayne, IN 46818
Ship to:  7310 Innovation Blvd, Dock 9C
          Ft. Wayne, IN 46818
http://www.dekko.com


-----Original Message-----
From: Domino400 <domino400-bounces-+hD5IHI5Xscn3HwCXmMcX9BPR1lH4CV8@public.gmane.org> On Behalf Of Rob 
Berendt
Sent: Monday, December 13, 2021 7:38 AM
To: domino400 domino400 domino400 <[email protected]>
Subject: CVE-2021-44228, Log4J 2 / Log4Shell Security Advisory for Notes, 
Domino, Verse, and Traveler

https://support.hcltechsw.com/csm?id=kb_article&sys_id=8b41bc5f1b504910a2f48661cd4bcb80


Basically this is:

*        An easy hack to employ

*        High impact

*        Widespread



Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to:  7310 Innovation Blvd, Suite 104
          Ft. Wayne, IN 46818
Ship to:  7310 Innovation Blvd, Dock 9C
          Ft. Wayne, IN 46818
http://www.dekko.com

-- 
This is the Lotus Domino on the IBM i (AS/400 and iSeries) (Domino400) 
mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/domino400
or email: Domino400-request-+hD5IHI5Xscn3HwCXmMcX9BPR1lH4CV8@public.gmane.org
Before posting, please take a moment to review the archives
at https://archive.midrange.com/domino400.
-- 
This is the Lotus Domino on the IBM i (AS/400 and iSeries) (Domino400) 
mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/domino400
or email: Domino400-request-+hD5IHI5Xscn3HwCXmMcX9BPR1lH4CV8@public.gmane.org
Before posting, please take a moment to review the archives
at https://archive.midrange.com/domino400.



-- 
This is the Lotus Domino on the IBM i (AS/400 and iSeries) (Domino400) mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/domino400
or email: Domino400-request-+hD5IHI5Xscn3HwCXmMcX9BPR1lH4CV8@public.gmane.org
Before posting, please take a moment to review the archives
at https://archive.midrange.com/domino400.