When is Log4j 2.17 availability for Splunk Enterprise 8.1?

[FrancoiseMathy]

Hello, 

As found on "Splunk Security Advisory for Apache Log4j", I could read that "Unless CVE-2021-45105 or CVE-2021-44832 increase in severity, Splunk will address these vulnerabilities as part of the next regular maintenance release of each affected product. Customers also have the option to remove Log4j Version 2 from Splunk Enterprise out of an abundance of caution. "

CVE-2021-44832 concerns a vulnerability found in version 2.17.
Thus as far as I understand, the vulnerability of Log4j 2.17 will be solved in next maintenance release.

I am running Splunk Enterprise 8.1.7.2 and the version of Log4j in it is 2.16.  This version of Log4j has been deleted.  But my management is asking when the version 2.17 will be available. I believe in next maintenance release.

Thus can you please tell me when the next maintenance release will be released for Splunk Enterprise 8.1? Thanks

[FrancoiseMathy]

Thanks for your answer Stefanie.
But there is no plan to include version 2.17 of Log4j in version 8.1?

[isoutamo]

Hi
this has fixed also 8.1.8 as said here https://docs.splunk.com/Documentation/Splunk/8.1.9/ReleaseNotes/MeetSplunk#What.27s_New_in_8.1.8
r. Ismo

[Stefanie]

Splunk Version 8.2.5 has been released for some time now. It addresses the log4j issue.

What's New in 8.2.5
Splunk Enterprise 8.2.5 was released on February 16, 2022. This release includes version 2.17.1 of Apache Log4j. It also resolves the issues described in Fixed issues.

https://docs.splunk.com/Documentation/Splunk/8.2.5/ReleaseNotes/MeetSplunk