An exploit for a critical zero-day vulnerability affecting Apache Log4j2 was disclosed on December 9, 2021. All versions of Log4j2 versions >= 2.0-beta9 and <= 2.14.1 are affected by this vulnerability. This is fixed in version 2.15.0.
You can check the version you have on your Nuxeo server with the following:
ls $NUXEO_SERVER/lib | grep log4j
for example:
mariana@OCPSE-MCEDICA nuxeo-server-tomcat-2021.1.19 $ ls lib/ | grep log4j log4j-api-2.13.3.jar log4j-core-2.13.3.jar log4j-jcl-2.13.3.jar log4j-slf4j-impl-2.13.3.jar
Keep reading
Let’s say you want to add some extra logic for the click event on a button. The first problem is that there are already some functions attached to the click event of the button. Adding a new event, does not guarantee it will run first.
Read articleWhy upgrade to LTS2021? While there are numerous benefits to upgrading to the latest version (performance improvements, bug fixing, new features, etc), according to https://www.nuxeo.com/legal/supported-versions/ the support for LTS 2019 (or 10.10) is ending on 04/04/2023. And this date is right around the corner!
Read articleAI workflows are only as good as the context you give them. Here’s how to add a description (or any) field to your Nuxeo vocabularies, with XSD, XML and UI examples.
Read articleTell us what you're struggling with, and we'll tell you how we can help you.
Talk to us
