RE: CVE-2021-44228, Log4J 2 / Log4Shell Security Advisory for Notes, Domino, Verse, and Traveler

Other helpful links/info:

Here is information I have been able to find related to this security
vulnerability. The net is at this point they are still checking on Notes,
Domino, Sametime. Traveler is confirmed to not be impacted. Connections is
known to be impacted.

The following are known to NOT be impacted (this list will grow as they
complete testing of Notes/Domino/Sametime):

Verse, iNotes, SafeLinx, Domino Volt, Traveler, HCL Traveler for
Microsoft Outlook (HTMO), Nomad web, Verse Mobile iOS and Android,
Sametime Mobile iOS and Android, Nomad Mobile iOS and Android, Companion
iOS, ToDo iOS

Question posed in the HCL Software Community to follow to determine what
other updates are provided generally:
https://support.hcltechsw.com/community?id=community_question&sys_id=6845401f1b588510534c4159cc4bcbfb

Apache Tika used by Domino indexing attachments:
https://support.hcltechsw.com/community?id=community_question&sys_id=a48372d2871449d85440c9d8cebb35ba

Christoph Stoettner says to stop the Help application until a fix
has been issued since log4j-2.3 is included in the Help.ear file.




Security Advisory from HCL:
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0095490

Security Advisory for Notes, Domino, Verse and Traveler:
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0095516

Impact to Connections: https://stoeps.de/posts/2021/log4j_how_to_find_out/



----------------------------------------------------------------------------------------------
Kim Greene
Kim Greene Consulting, Inc.
President
HCL Collaboration Solutions & MongoDB
Office: 507-216-5632 Mobile: 507-254-9353
Email: kim@xxxxxxxxxxxxx Web: www.kimgreene.com
Blog: DominoDiva LinkedIn: kimgreeneconsulting Twitter:
iSeriesDomino




From: "Rob Berendt" <rob@xxxxxxxxx>
To: "Lotus Domino on the IBM i (AS/400 and iSeries)"
<domino400@xxxxxxxxxxxxxxxxxx>
Date: 12/13/2021 01:48 PM
Subject: RE: CVE-2021-44228, Log4J 2 / Log4Shell Security Advisory
for Notes, Domino, Verse, and Traveler
Sent by: "Domino400" <domino400-bounces@xxxxxxxxxxxxxxxxxx>



Lots of comments about related products at
https://support.hcltechsw.com/community?id=community_question&sys_id=a48372d2871449d85440c9d8cebb35ba



Rob Berendt