Upgrade SoapUI 5.6.1 from log4j 2.16.0 to 2.17.0

[Eric83]

Hey,

is it possible that i upgrade SoapUI 5.6.1 from log4j 2.16.0 to 2.17.0?

I replaced this files in "C:\Program Files\SmartBear\SoapUI-5.6.1\lib":

• log4j-api-2.16.0.jar -> log4j-api-2.17.0.jar
• log4j-core-2.16.0.jar -> log4j-core-2.17.0.jar
• log4j-slf4j-impl-2.16.0.jar -> log4j-slf4j-impl-2.17.0.jar

Is that enough or do i need to compile and/or replace more files?

Eric

[sonya_m · Accepted solution]

Hi @Eric83 ! Please check out the official up-to-date SmartBear page regarding the vulnerability and how it is handled for different tools: 

https://smartbear.com/security/cve-2021-44228/ 

[HKosova · Accepted solution]

We've released SoapUI 5.7.0 that includes Log4j 2.17.1.

https://github.com/SmartBear/soapui/releases