Andrea Aime's "NO RCE" version of Log4j v1.2.17, see patch at: aaime@98bb3b7
- Upstream from upstream is Apache Software Foundation Log4j Git repository - see v1.2.17 release tag commit at https://github.com/apache/log4j/tree/de9f0ea504db9d1178db2cf45323d8e182a5df0a
- Upstream is Andrea Aime of GeoServer/GeoTools Log4j fork - see secured branch v1.2.17.x at aaime@98bb3b7
Checksums (check with e.g. PowerShell "Get-FileHash log4j-1.2.17-sweco-norce.jar -Algorithm SHA1"):
- log4j-1.2.17-sweco-norce.jar
- MD5: DDA1780C0321B6835092BCD94184B73B
- SHA1: 847AB5C0F70FCB2096FBF078C8CBC36B99E9B41D
- log4j-1.2.17-sweco-norce.jar
- MD5: 666E8E0048D681EC82B31767F5635581
- SHA1: 4D0EA517629F98D866569901A68BD3F0B207E127
- NTEventLogAppender.dll
- MD5: 46CB1B1A59081BB3A9B4A628F7426F6F
- SHA1: 553D4E18A0EA9E05E91172A1EF250A00D1CC13E1