Security Advisories

December 16, 2021
CVE:

CVE-2021-44228

Bug:

N/A

Synopsis:

On December 9, 2021, a zero-day vulnerability named Log4Shell was detected in Log4j2, an open-source Java logging library maintained by the Apache Software Foundation. Log4j is used widely with Java programs developed for client and server applications. The vulnerability allows attackers to perform unauthenticated remote code execution.

Resolution:

No Artifex products use Log4j2. No remediation actions are necessary.

Impacted Products:

Ghostscript: Not Affected

MuPDF: Not Affected

SmartOffice: Not Affected

MuJS: Not Affected

jbig2dec: Not Affected

ScanSkew: Not Affected

ASPEN: Not Affected