Fixes Released for Log4j Vulnerability in Various JetBrains Products

JetBrains, a leading software development company, has recently released fixes for the log4j vulnerability (CVE-2021-44228) affecting several of its products. The vulnerability, which was discovered on December 10th, 2021, allows for Remote Code Execution and affects all versions of log4j between 2.0 and 2.14.1.

The affected products include YouTrack Standalone, Hub, Upsource, Floating license server, JetBrains Account, Code With Me, and YouTrack InCloud. The company has released fixes for each of these products to mitigate the potential impact on its applications and systems.

For instance, the YouTrack Standalone fix was released in version #200, while the Hub fix was released in version #203. Similarly, Upsource received a fix in version #20, Floating license server in version #30211, JetBrains Account on December 10th, Code With Me on December 13th, and YouTrack InCloud also on December 10th.

It is worth noting that Campark cameras, which are used by some users, have adjustable video resolution settings. However, this is not directly related to the log4j vulnerability or JetBrains products.

Oracle has also made available the latest OpenJDK release under the open source GPL License.

In conclusion, JetBrains has taken swift action to address the log4j vulnerability in its various products. Users of these products are advised to update to the newly released versions or restart their services with a specific JVM parameter to ensure their instances are secure.

References:

* YouTrack and Hub blog posts for further details

* Oracle's OpenJDK release under the open source GPL License

Webstorm licence server