Skip to content

Commit 908512b

Browse files
committed
Updated to v2.1.0
1 parent e2f88df commit 908512b

File tree

1 file changed

+6
-6
lines changed

1 file changed

+6
-6
lines changed

README.md

+6-6
Original file line numberDiff line numberDiff line change
@@ -3,12 +3,12 @@
33
log4j2-scan is a single binary command-line tool for CVE-2021-44228 vulnerability scanning and mitigation patch. It also supports nested JAR file scanning and patch. It also detects CVE-2021-45046 (log4j 2.15.0) and CVE-2021-4104 (log4j 1.x) vulnerabilities.
44

55
### Download
6-
* [log4j2-scan 2.0.0 (Windows x64)](https://github.com/logpresso/CVE-2021-44228-Scanner/releases/download/v2.0.0/logpresso-log4j2-scan-2.0.0-win64.7z)
6+
* [log4j2-scan 2.1.0 (Windows x64)](https://github.com/logpresso/CVE-2021-44228-Scanner/releases/download/v2.1.0/logpresso-log4j2-scan-2.1.0-win64.7z)
77
* If you get `VCRUNTIME140.dll not found` error, install [Visual C++ Redistributable](https://docs.microsoft.com/en-US/cpp/windows/latest-supported-vc-redist?view=msvc-170).
88
* If native executable doesn't work, use the JAR instead. 32bit is not supported.
9-
* [log4j2-scan 2.0.0 (Linux x64)](https://github.com/logpresso/CVE-2021-44228-Scanner/releases/download/v2.0.0/logpresso-log4j2-scan-2.0.0-linux.tar.gz)
9+
* [log4j2-scan 2.1.0 (Linux x64)](https://github.com/logpresso/CVE-2021-44228-Scanner/releases/download/v2.1.0/logpresso-log4j2-scan-2.1.0-linux.tar.gz)
1010
* If native executable doesn't work, use the JAR instead. 32bit is not supported.
11-
* [log4j2-scan 2.0.0 (Any OS, 10KB)](https://github.com/logpresso/CVE-2021-44228-Scanner/releases/download/v2.0.0/logpresso-log4j2-scan-2.0.0.jar)
11+
* [log4j2-scan 2.1.0 (Any OS, 10KB)](https://github.com/logpresso/CVE-2021-44228-Scanner/releases/download/v2.1.0/logpresso-log4j2-scan-2.1.0.jar)
1212

1313
### Build
1414
* [How to build Native Image](https://github.com/logpresso/CVE-2021-44228-Scanner/wiki/FAQ#how-to-build-native-image)
@@ -18,8 +18,8 @@ Just run log4j2-scan.exe or log4j2-scan with target directory path.
1818

1919
Usage
2020
```
21-
Logpresso CVE-2021-44228 Vulnerability Scanner 2.0.0 (2021-12-17)
22-
Usage: log4j2-scan [--fix] target_path
21+
Logpresso CVE-2021-44228 Vulnerability Scanner 2.1.0 (2021-12-17)
22+
Usage: log4j2-scan [--fix] target_path1, target_path2
2323
2424
--fix
2525
Backup original file and remove JndiLookup.class from JAR recursively.
@@ -68,7 +68,7 @@ On Linux
6868
```
6969
On UNIX (AIX, Solaris, and so on)
7070
```
71-
java -jar logpresso-log4j2-scan-2.0.0.jar [--fix] target_path
71+
java -jar logpresso-log4j2-scan-2.1.0.jar [--fix] target_path
7272
```
7373

7474
If you add `--fix` option, this program will copy vulnerable original JAR file to .bak file, and create new JAR file without `org/apache/logging/log4j/core/lookup/JndiLookup.class` entry. In most environments, JNDI lookup feature will not be used. However, you must use this option at your own risk. It is necessary to shutdown any running JVM process before applying patch. Start affected JVM process after fix.

0 commit comments

Comments
 (0)