CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade parfaitUpgrade parfait-javadocUpgrade uom-systems-javadocUpgrade uom-seUpgrade uom-lib-javadocUpgrade si-units-javadocUpgrade pcp-parfait-agentUpgrade unit-apiUpgrade uom-libUpgrade parfait-examplesUpgrade si-unitsUpgrade uom-parentUpgrade uom-se-javadocUpgrade unit-api-javadocUpgrade uom-systems | May 4, 2022 | Jan 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade log4j-manualUpgrade log4j-javadocUpgrade log4j | Jul 4, 2022 | Jan 18, 2022 |
| Amazon_linux | — | Upgrade log4j | Apr 6, 2023 | Jan 18, 2022 |
| Centos_linux | — | Upgrade si-units-javadocUpgrade uom-seUpgrade log4j-manualUpgrade uom-lib-javadocUpgrade si-unitsUpgrade uom-systems-javadocUpgrade parfaitUpgrade parfait-examplesUpgrade parfait-javadocUpgrade uom-systemsUpgrade unit-apiUpgrade log4j-debuginfoUpgrade log4jUpgrade uom-libUpgrade pcp-parfait-agentUpgrade unit-api-javadocUpgrade uom-parentUpgrade log4j-javadocUpgrade uom-se-javadoc | Feb 17, 2022 | Jan 18, 2022 |
| Debian | — | Upgrade apache-log4j1.2 | Feb 2, 2022 | Jan 18, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade log4j | May 25, 2022 | Jan 18, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade log4j | Mar 22, 2022 | Jan 18, 2022 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Aug 26, 2022 | Feb 17, 2022 |
| Oracle_linux | — | Upgrade si-units-javadocUpgrade parfaitUpgrade si-unitsUpgrade parfait-examplesUpgrade log4jUpgrade log4j-manualUpgrade pcp-parfait-agentUpgrade uom-systemsUpgrade log4j-javadocUpgrade uom-se-javadocUpgrade uom-systems-javadocUpgrade uom-seUpgrade uom-parentUpgrade unit-apiUpgrade uom-lib-javadocUpgrade uom-libUpgrade parfait-javadocUpgrade unit-api-javadoc | Jan 28, 2022 | Jan 18, 2022 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Jan 18, 2022 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Jan 18, 2022 |
| Redhat_linux | — | Upgrade log4j-manualUpgrade uom-seUpgrade unit-apiUpgrade parfait-javadocUpgrade si-units-javadocUpgrade uom-systems-javadocUpgrade uom-libUpgrade uom-parentUpgrade parfaitUpgrade si-unitsUpgrade parfait-examplesUpgrade pcp-parfait-agentUpgrade uom-lib-javadocUpgrade uom-se-javadocUpgrade unit-api-javadocUpgrade log4jUpgrade uom-systemsUpgrade log4j-javadocUpgrade log4j-debuginfo | Jan 27, 2022 | Jan 18, 2022 |
| Rocky_linux | — | — | Aug 15, 2024 | Jan 18, 2022 |
| Suse | — | Upgrade log4jUpgrade log4j12-manualUpgrade log4j12-javadocUpgrade log4j12Upgrade log4j-manualUpgrade kafka-sourceUpgrade kafka-kit | Jan 27, 2022 | Jan 18, 2022 |
| Ubuntu | — | Upgrade liblog4j1.2-java (Ubuntu Pro)Upgrade liblog4j1.2-java | Apr 10, 2023 | Jan 18, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub