Log4j Security in Neo4j docker image

[cynthia6]

I would like to confirm whether the updated docker image,version 4.4.1 solves the security vulnerabilities of CVE-2021-44228 and CVE-2021-45046

Thanks and regards

[david_allen]

here's the page where Neo4j is tracking all Log4J mitigation related issues. As of the writing of this comment (if you come back later make sure to hit the link because all of this is an evolving situation) the docker container particularly is under investigation.

Neo4j Graph Database Platform

Apache Log4j Security Vulnerability(CVE-2021-44228) and Neo4j

This page will be kept up to date with the latest updates. Last updated 2021-12-15 21:00 (UTC+1) What Is CVE-2021-44228? CVE-2021-44228 is a high-severity vulnerability, affecting Apache Log4j. Log4j is a standard, third-party, open source logging...