<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<div style="margin:0px;font-size:15px;font-family:"Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, "system-ui", Roboto, "Helvetica Neue", sans-serif;color:rgb(32, 31, 30);background-color:rgb(255, 255, 255)">
<p class="x_MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri, sans-serif">
<span style="font-family: Calibri, sans-serif; font-size: 12pt; color: black;">BigFix Complia</span><span style="font-family: Calibri, sans-serif; background-color: rgba(0, 0, 0, 0); font-size: 12pt; color: rgb(0, 0, 0);">nce versions</span><span style="font-family: Calibri, sans-serif; font-size: 12pt; color: black;"><span style="font-family: Calibri, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgba(0, 0, 0, 0);"> </span></span><span style="font-family: Calibri, sans-serif; background-color: rgba(0, 0, 0, 0); font-size: 12pt; color: rgb(0, 0, 0);">from</span><span style="font-family: Calibri, sans-serif; color: rgb(32, 31, 30); font-size: 12pt;"><span style="font-family: Calibri, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgba(0, 0, 0, 0);"> </span><span style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 12pt; background-color: rgba(0, 0, 0, 0);">2.0.1</span><span style="font-family: Calibri, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgba(0, 0, 0, 0);"> </span></span><span style="font-family: Calibri, sans-serif; background-color: rgba(0, 0, 0, 0); font-size: 12pt; color: rgb(0, 0, 0);">to</span><span style="font-family: Calibri, sans-serif; color: rgb(32, 31, 30); font-size: 12pt;"><span style="font-family: Calibri, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgba(0, 0, 0, 0);"> </span><span style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 12pt; background-color: rgba(0, 0, 0, 0);">2.0.4</span><span style="color: rgb(68, 114, 196);"><span style="font-family: Calibri, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgba(0, 0, 0, 0);"> </span></span><span style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 12pt; background-color: rgba(0, 0, 0, 0);">include
a version of the library Log4j which has a vulnerability. Internal testing has found so far that this vulnerability is not exploitable in the BigFix Compliance product, but still recommend immediate remediation of the library to be sure. Fixlets have been
released to update the version of the library as well as a mitigating configuration option. Both fixes can be applied to ensure remediation and is recommended to apply both. The Library update will work for all affected versions of BigFix Compliance, while
the configuration setting only is valid for 2.0.2 to 2.0.4.</span></span><br>
</p>
</div>
<div style="margin:0px;font-size:15px;font-family:"Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, "system-ui", Roboto, "Helvetica Neue", sans-serif;color:rgb(32, 31, 30);background-color:rgb(255, 255, 255)">
<p class="x_MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri, sans-serif">
<span style="margin: 0px; font-size: 12pt;"><span style="margin: 0px; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 12pt; background-color: rgba(0, 0, 0, 0);"></span></span></p>
</div>
<div style="margin:0px;font-size:15px;font-family:"Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, "system-ui", Roboto, "Helvetica Neue", sans-serif;color:rgb(32, 31, 30);background-color:rgb(255, 255, 255)">
<p class="x_MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri, sans-serif">
<span style="margin: 0px; font-size: 12pt; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; background-color: rgba(0, 0, 0, 0);"> </span></p>
</div>
<div style="margin:0px;font-size:15px;font-family:"Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, "system-ui", Roboto, "Helvetica Neue", sans-serif;color:rgb(32, 31, 30);background-color:rgb(255, 255, 255)">
<p class="x_MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri, sans-serif">
<span style="margin: 0px; font-size: 12pt; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; background-color: rgba(0, 0, 0, 0);">An updated version of BigFix Compliance will be released in the future removing Log4j from the product.</span></p>
</div>
<div style="margin:0px;font-size:15px;font-family:"Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, "system-ui", Roboto, "Helvetica Neue", sans-serif;color:rgb(32, 31, 30);background-color:rgb(255, 255, 255)">
<p class="x_MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri, sans-serif">
<span style="margin: 0px; font-size: 12pt; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; background-color: rgba(0, 0, 0, 0);"> </span></p>
</div>
<div style="margin:0px;font-size:15px;font-family:"Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, "system-ui", Roboto, "Helvetica Neue", sans-serif;color:rgb(32, 31, 30);background-color:rgb(255, 255, 255)">
<p class="x_MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri, sans-serif">
<span style="margin: 0px; font-size: 12pt; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; background-color: rgba(0, 0, 0, 0);">Published Site: SCM Reporting, version 143</span></p>
</div>
<div style="margin:0px;font-size:15px;font-family:"Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, "system-ui", Roboto, "Helvetica Neue", sans-serif;color:rgb(32, 31, 30);background-color:rgb(255, 255, 255)">
<p class="x_MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri, sans-serif">
<span style="margin: 0px; font-size: 12pt; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; background-color: rgba(0, 0, 0, 0);"> </span></p>
</div>
<div style="margin:0px;font-size:15px;font-family:"Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, "system-ui", Roboto, "Helvetica Neue", sans-serif;color:rgb(32, 31, 30);background-color:rgb(255, 255, 255)">
<p class="x_MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri, sans-serif">
<span style="margin: 0px; font-size: 12pt; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; background-color: rgba(0, 0, 0, 0);">Actions to take:</span></p>
</div>
<div style="margin:0px;font-size:15px;font-family:"Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, "system-ui", Roboto, "Helvetica Neue", sans-serif;color:rgb(32, 31, 30);background-color:rgb(255, 255, 255)">
<p class="x_MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri, sans-serif">
<span style="margin: 0px; font-size: 12pt; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; background-color: rgba(0, 0, 0, 0);"> </span></p>
</div>
<div style="margin:0px;font-size:15px;font-family:"Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, "system-ui", Roboto, "Helvetica Neue", sans-serif;color:rgb(32, 31, 30);background-color:rgb(255, 255, 255)">
<p class="x_MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri, sans-serif">
<span style="margin: 0px; font-size: 12pt; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; background-color: rgba(0, 0, 0, 0);">If running BigFix Compliance versions 2.0.1 or later, please run the two new Fixlets in the SCM Reporting site to remediate
and mitigate the vulnerability.</span></p>
</div>
<div style="margin:0px;font-size:15px;font-family:"Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, "system-ui", Roboto, "Helvetica Neue", sans-serif;color:rgb(32, 31, 30);background-color:rgb(255, 255, 255)">
<p class="x_MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri, sans-serif">
<span style="margin: 0px; font-size: 12pt; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; background-color: rgba(0, 0, 0, 0);"> </span></p>
</div>
<div style="margin:0px;font-size:15px;font-family:"Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, "system-ui", Roboto, "Helvetica Neue", sans-serif;color:rgb(32, 31, 30);background-color:rgb(255, 255, 255)">
<p class="x_MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri, sans-serif">
<span style="margin: 0px; font-size: 12pt; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; background-color: rgba(0, 0, 0, 0);">1008: CVE-2021-44228 Log4j - Disable Lookups for BigFix Compliance</span></p>
</div>
<div style="margin:0px;font-size:15px;font-family:"Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, "system-ui", Roboto, "Helvetica Neue", sans-serif;color:rgb(32, 31, 30);background-color:rgb(255, 255, 255)">
<p class="x_MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri, sans-serif">
<span style="margin: 0px; font-size: 12pt; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; background-color: rgba(0, 0, 0, 0);">1009: CVE-2021-44228 Log4j - Update log4j to 2.15.0 for BigFix Compliance</span></p>
<p class="x_MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri, sans-serif">
<span style="font-family: Calibri, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgba(0, 0, 0, 0);"> </span></p>
<p class="x_MsoNormal" style="margin:0in;font-size:11pt;font-family:Calibri, sans-serif">
<span style="margin: 0px; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 12pt; background-color: rgba(0, 0, 0, 0);">For more details about the actions that these Fixlet execute please see KB <a href="https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0095486" id="LPNoLPOWALinkPreview">https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0095486</a></span></p>
<div class="_Entity _EType_OWALinkPreview _EId_OWALinkPreview _EReadonly_1"></div>
<br>
</div>
<br>
</div>
</body>
</html>