CVE-2021-44228

Advisory

Aws-analytics-reference-architecture 1.8.8 updates its dependency 'log4j' and its references to v2.17.0 to fix critical security vulnerabilities.
https://github.com/aws-samples/aws-analytics-reference-architecture/commit/c2c18615602c48f19be5a34dde6a8569f2fdfe0d

Affected package

Affected versions

Fixed versions

Vulnerability changelog

[1.8.7](https://github.com/aws-samples/aws-analytics-reference-architecture/compare/v1.8.6...v1.8.7) (2022-01-03)


Bug Fixes

* bump to log4j 2.17 to avoid vulnerability ([220](https://github.com/aws-samples/aws-analytics-reference-architecture/issues/220)) ([efdfb74](https://github.com/aws-samples/aws-analytics-reference-architecture/commit/efdfb7430ac004f4ece45cbdc122b9d672b7ab65))
* upgrade license year ([230](https://github.com/aws-samples/aws-analytics-reference-architecture/issues/230)) ([c8ce6a3](https://github.com/aws-samples/aws-analytics-reference-architecture/commit/c8ce6a3110e88a868a8c750b8b13d1d96438df98))

Resources

• https://pypi.org/project/aws-analytics-reference-architecture
• https://pyup.io/changelogs/aws-analytics-reference-architecture/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44228