New CVE-2021-45105 for log4j

[doom71]

On december 19th a new vulnerability was found in log4j 2.16.0 Are there any plans to upgrade to log4j 2.17.0 as suggested by Apache? As long as this upgrrade is not implemented, I am not allowed to use SOAP UI which makes my test work much more difficult

[sonya_m · Accepted solution]

Hi @doom71, there's a fresh update on that on the SmartBear site, please refer to this page: https://smartbear.com/security/cve-2021-44228/  

[doom71]

Ah yes. Didn't know that page was available. Thanks for your quick reply 👍

[HKosova · Accepted solution]

@doom71 we've released SoapUI 5.7.0 which uses Log4j 2.17.1

https://github.com/SmartBear/soapui/releases

[doom71]

Thank you for your reply. Very happy to be able to use SOAP UI again.