Languages

Menu
Sites
Language
Log 4j vulnerability

Currently even the latest version of Tizen studio uses the obselete version of log 4j with high known vulnerability having version log4j-1.2.17.jar, when can we expect an update for this

List

Responses

3 Replies
Mills Willard

it's concerning that Tizen Studio is still relying on Log4j 1.2.17, which has well-documented security vulnerabilities. Given that Apache no longer supports Log4j 1.x and the risks associated with it, Samsung should prioritize updating to a more secure version, like Log4j 2.x