Log4j

[BiosMaster0x000]

Hello all,

Does vmware have a fix for the Log4j?  i have patched up hz and vcenter server, and also removed html access from CS, is there a fix besides the patches?  we have multiple clients that rely on the HTML version and I am afraid of opening that back up.

if this is not the proper spot for this question I apologize.

Thanks!

[a_p_ · Accepted solution]

Please see https://www.vmware.com/security/advisories/VMSA-2021-0028.html for VMware's response.

André

[ptarnawski]

All supported vCenter versions have fixes already in place. There are new versions of log4j file. 

Hence I don't understand your concern, unless you are running an old version of vCenter, then please update to newer one. 

[BiosMaster0x000]

I am running the following infra.

Product: VMware Horizon 7 Administrator
Version:
7.10.0
build - 14584133

-----------------------

Product:
VMware vCenter Server Appliance
Version:
6.7.0.40000
Build number
14367737

sept 2022 -6.7.5

6.7.0.53000

[ptarnawski · Accepted solution]

cool, go to the link provided by @a_p_ and check the fixed version, once you upgrade, there is no need for more actions. 

[BiosMaster0x000]

love your channels by the way 😀 

[ptarnawski]

Thank you very much  🙂 

[BiosMaster0x000]

time to roll up sleeves and get to work on this.

thank you all!

[ptarnawski]

Good luck mate!