Vendor Resources

Resource	Link
Apache Log4j2 Security Bulletin (CVE-2021-44228) (amazon.com)	https://aws.amazon.com/security/security-bulletins/AWS-2021-006/

Community Resources

Resource	Link
source	https://aws.amazon.com/security/security-bulletins/AWS-2021-006/
fix	https://alas.aws.amazon.com/cve/html/CVE-2021-44228.html

Community Notes

Source	Note
NCSC-NL	CVE-2021-4104: Not vuln ; CVE-2021-44228: Fix
NCSC-NL	Packages for Amazon Linux 1 and 2 not affected, package for Amazon Linux 2022 is
CISAGov	Last Update: 12/15/2021

Sources

Date	Attribution	Description
2021-12-27 15:29:04	NCSC-NL	Updated vendorPatchExists. Updated community note. Updated community link source. Updated community link fix. Updated community note.
2021-12-30 21:31:50	CISAGov	Updated communityNotVulnerable. Updated vendor link Apache Log4j2 Security Bulletin (CVE-2021-44228) (amazon.com). Updated community note.