<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">
Thank you so much! I followed your instructions and deleted the calabash folder. I am so grateful that you were able to help me!</div>
<div>
<div id="Signature">
<div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:10pt; color:rgb(0,0,0)">
<br>
</div>
</div>
</div>
</div>
<div>
<div id="appendonsend"></div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:10pt; color:rgb(0,0,0)">
<br>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> oXygen-user <oxygen-user-bounces@oxygenxml.com> on behalf of Oxygen XML Editor Support (Radu Coravu) <support@oxygenxml.com><br>
<b>Sent:</b> Friday, December 17, 2021 7:52 AM<br>
<b>To:</b> oxygen-user@oxygenxml.com <oxygen-user@oxygenxml.com><br>
<b>Subject:</b> Re: [oXygen-user] [ann] Security maintenance builds in response to the Log4j vulnerability</font>
<div> </div>
</div>
<div>
<p style="margin-top: 0px; margin-bottom: 0px;">Hi Lisa,</p>
<p style="margin-top: 0px; margin-bottom: 0px;"><br>
</p>
<p style="margin-top: 0px; margin-bottom: 0px;">Right now we have on our web site new installation kits fixing the security problem for Oxygen 24.0, 23.1 and we'll soon have the same for Oxygen 22.1.</p>
<p style="margin-top: 0px; margin-bottom: 0px;"><br>
</p>
<p style="margin-top: 0px; margin-bottom: 0px;">For older Oxygen versions there was only one component in Oxygen uses the Log4j 2.x libraries, the Calabash XProc engine located in "OXYGEN_INSTALL_DIR\lib\xproc\calabash". If you are not using Oxygen to edit
XProc files you can remove that "calabash" folder completely.</p>
<p style="margin-top: 0px; margin-bottom: 0px;"><br>
</p>
<p style="margin-top: 0px; margin-bottom: 0px;">Or you can try to use this small free utility we provide to update all Log4.j 2.x libraries in your Oxygen installation:</p>
<p style="margin-top: 0px; margin-bottom: 0px;"><a class="x_moz-txt-link-freetext" href="https://github.com/oxygenxml/oxygen-log4j-patcher">https://github.com/oxygenxml/oxygen-log4j-patcher</a><br>
</p>
<p style="margin-top: 0px; margin-bottom: 0px;"><br>
</p>
<p style="margin-top: 0px; margin-bottom: 0px;">Regards,</p>
<p style="margin-top: 0px; margin-bottom: 0px;">Radu</p>
<pre class="x_moz-signature" cols="72">Radu Coravu
Oxygen XML Editor</pre>
<p style="margin-top: 0px; margin-bottom: 0px;"><br>
</p>
<div class="x_moz-cite-prefix">On 12/17/21 16:14, McAulay, Lisa wrote:<br>
</div>
<blockquote type="cite">
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:10pt; color:rgb(0,0,0)">
Hi George and Oxygen Users,</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:10pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:10pt; color:rgb(0,0,0)">
I apologize for bothering you at this time, but I'm trying to determine my risk with Oxygen XML 21.1, build 2019120214. I see it lists log4j 1.2.17, which I think isn't affected by this log4j problem. I'm hoping so!</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:10pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:10pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:10pt; color:rgb(0,0,0)">
Best regards,</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:10pt; color:rgb(0,0,0)">
Elizabeth</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:10pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:10pt; color:rgb(0,0,0)">
<br>
</div>
<div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:10pt; color:rgb(0,0,0)">
<br>
</div>
<div id="x_Signature">
<div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:10pt; color:rgb(0,0,0)">
<p style="margin-top: 0px; margin-bottom: 0px;margin:10px 0px 0px; font-size:14px; text-align:start; background-color:rgb(255,255,255)">
<strong>Elizabeth McAulay<br>
Head of the Digital Library Program</strong><br>
emcaulay /at/ library.ucla.edu<br>
<a href="https://digital.library.ucla.edu/" title="https://digital.library.ucla.edu/" class="x_moz-txt-link-freetext">https://digital.library.ucla.edu/</a></p>
<p style="margin-top: 0px; margin-bottom: 0px;margin:10px 0px 0px; color:rgb(23,43,77); font-size:14px; text-align:start; background-color:rgb(255,255,255)">
<a href="https://www.library.ucla.edu/" style="color:rgb(59,115,175)"><img alt="UCLA Library Logo" style="margin:0px; width:140px; height:35px" src="https://www.library.ucla.edu/sites/default/files/static_images/Uxd_Mx_A_Library_140-borderless_1_white.png"></a></p>
<p style="margin-top: 0px; margin-bottom: 0px;margin:10px 0px 0px; font-size:14px; text-align:start; background-color:rgb(255,255,255)">
UCLA acknowledges the Gabrielino/Tongva peoples as the traditional land caretakers of Tovaangar (the Los Angeles basin and So. Channel Islands). As a land grant institution, we pay our respects to the Honuukvetam (Ancestors), ‘Ahiihirom (Elders) and ‘Eyoohiinkem
(our relatives/relations) past, present and emerging.</p>
<br>
</div>
</div>
</div>
</div>
<div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:10pt; color:rgb(0,0,0)">
<br>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="x_divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> oXygen-user
<a class="x_moz-txt-link-rfc2396E" href="mailto:oxygen-user-bounces@oxygenxml.com">
<oxygen-user-bounces@oxygenxml.com></a> on behalf of George Bina <a class="x_moz-txt-link-rfc2396E" href="mailto:george@oxygenxml.com">
<george@oxygenxml.com></a><br>
<b>Sent:</b> Friday, December 17, 2021 5:35 AM<br>
<b>To:</b> oXygen User ML <a class="x_moz-txt-link-rfc2396E" href="mailto:oxygen-user@oxygenxml.com">
<oxygen-user@oxygenxml.com></a><br>
<b>Subject:</b> [oXygen-user] [ann] Security maintenance builds in response to the Log4j vulnerability</font>
<div> </div>
</div>
<div class="x_BodyFragment"><font size="2"><span style="font-size:11pt">
<div class="x_PlainText">Hi all,<br>
<br>
We made available maintenance builds for many of our products to provide<br>
a fix for the recent security vulnerabilities related to the Apache<br>
Log4j library. These builds cover the latest versions of our products as<br>
well as older versions.<br>
<br>
The corresponding security advisory is updated with the latest<br>
information about these issue, you can it at:<br>
<a href="https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html" class="x_moz-txt-link-freetext">https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html</a><br>
<br>
The new maintenance builds that we made available up to this point are<br>
listed below:<br>
<br>
Oxygen XML Editor<br>
==========================================<br>
<br>
Oxygen XML Editor 24.0 build 2021121518<br>
<a href="https://www.oxygenxml.com/xml_editor/download_oxygenxml_editor.html" class="x_moz-txt-link-freetext">https://www.oxygenxml.com/xml_editor/download_oxygenxml_editor.html</a><br>
<br>
Oxygen XML Editor 23.1 build 2021121415<br>
<a href="https://www.oxygenxml.com/xml_editor/software_archive_editor.html" class="x_moz-txt-link-freetext">https://www.oxygenxml.com/xml_editor/software_archive_editor.html</a><br>
<br>
Oxygen XML Author<br>
==========================================<br>
<br>
Oxygen XML Author 24.0 build 2021121518<br>
<a href="https://www.oxygenxml.com/xml_author/download_oxygenxml_author.html" class="x_moz-txt-link-freetext">https://www.oxygenxml.com/xml_author/download_oxygenxml_author.html</a><br>
<br>
Oxygen XML Author 23.1 build 2021121415<br>
<a href="https://www.oxygenxml.com/xml_author/software_archive_author.html" class="x_moz-txt-link-freetext">https://www.oxygenxml.com/xml_author/software_archive_author.html</a><br>
<br>
Oxygen XML Developer<br>
==========================================<br>
<br>
Oxygen XML Developer 24.0 build 2021121518<br>
<a href="https://www.oxygenxml.com/xml_developer/download_oxygenxml_developer.html" class="x_moz-txt-link-freetext">https://www.oxygenxml.com/xml_developer/download_oxygenxml_developer.html</a><br>
<br>
Oxygen XML Developer 23.1 build 2021121317<br>
<a href="https://www.oxygenxml.com/xml_developer/software_archive_developer.html" class="x_moz-txt-link-freetext">https://www.oxygenxml.com/xml_developer/software_archive_developer.html</a><br>
<br>
Oxygen XML Web Author<br>
==========================================<br>
<br>
Oxygen XML Web Author 24.0.0 build 2021121314<br>
<a href="https://www.oxygenxml.com/xml_web_author/download_oxygenxml_web_author.html" class="x_moz-txt-link-freetext">https://www.oxygenxml.com/xml_web_author/download_oxygenxml_web_author.html</a><br>
<br>
XML Web Author 23.1.1.2 build 2021121408<br>
<a href="https://www.oxygenxml.com/xml_web_author/software_archive_web_author.html" class="x_moz-txt-link-freetext">https://www.oxygenxml.com/xml_web_author/software_archive_web_author.html</a><br>
<br>
Oxygen XML Web Author 22.1.0.4 build 2021121415<br>
<a href="https://www.oxygenxml.com/xml_web_author/software_archive_web_author.html" class="x_moz-txt-link-freetext">https://www.oxygenxml.com/xml_web_author/software_archive_web_author.html</a><br>
<br>
Oxygen Content Fusion<br>
==========================================<br>
<br>
Oxygen Content Fusion 4.1.4 build 2021121611<br>
<a href="https://www.oxygenxml.com/content_fusion/download.html" class="x_moz-txt-link-freetext">https://www.oxygenxml.com/content_fusion/download.html</a><br>
<br>
Oxygen Content Fusion 3.0.1 build 2021121414<br>
<a href="https://www.oxygenxml.com/content_fusion/software_archive_content_fusion.html" class="x_moz-txt-link-freetext">https://www.oxygenxml.com/content_fusion/software_archive_content_fusion.html</a><br>
<br>
Oxygen Content Fusion 2.0.3 build 2021121417<br>
<a href="https://www.oxygenxml.com/content_fusion/software_archive_content_fusion.html" class="x_moz-txt-link-freetext">https://www.oxygenxml.com/content_fusion/software_archive_content_fusion.html</a><br>
<br>
Oxygen Feedback<br>
==========================================<br>
<br>
Oxygen Feedback Enterprise 1.4.5 build 2021121314<br>
<a href="https://www.oxygenxml.com/oxygen_feedback_enterprise/download.html" class="x_moz-txt-link-freetext">https://www.oxygenxml.com/oxygen_feedback_enterprise/download.html</a><br>
<br>
Oxygen Publishing Engine<br>
==========================================<br>
<br>
Oxygen Publishing Engine 24.0 build 2021121611<br>
<a href="https://www.oxygenxml.com/publishing_engine/download.html" class="x_moz-txt-link-freetext">https://www.oxygenxml.com/publishing_engine/download.html</a><br>
<br>
Oxygen Publishing Engine 23.1 build 2021121413<br>
<a href="https://www.oxygenxml.com/publishing_engine/software_archive_publishing_engine.html" class="x_moz-txt-link-freetext">https://www.oxygenxml.com/publishing_engine/software_archive_publishing_engine.html</a><br>
<br>
Oxygen XML WebHelp<br>
==========================================<br>
<br>
Oxygen XML WebHelp 24.0 build 2021121511<br>
<a href="https://www.oxygenxml.com/xml_webhelp/download_oxygenxml_webhelp.html" class="x_moz-txt-link-freetext">https://www.oxygenxml.com/xml_webhelp/download_oxygenxml_webhelp.html</a><br>
<br>
Oxygen XML WebHelp 23.1 build 2021121412<br>
<a href="https://www.oxygenxml.com/xml_webhelp/software_archive_webhelp.html" class="x_moz-txt-link-freetext">https://www.oxygenxml.com/xml_webhelp/software_archive_webhelp.html</a><br>
<br>
Oxygen PDF Chemistry<br>
==========================================<br>
<br>
Oxygen PDF Chemistry 24.0 build 2021121611<br>
<a href="https://www.oxygenxml.com/pdf_chemistry/download.html" class="x_moz-txt-link-freetext">https://www.oxygenxml.com/pdf_chemistry/download.html</a><br>
<br>
Oxygen PDF Chemistry 23.1 build 2021121413<br>
<a href="https://www.oxygenxml.com/pdf_chemistry/software_archive_chemistry.html" class="x_moz-txt-link-freetext">https://www.oxygenxml.com/pdf_chemistry/software_archive_chemistry.html</a><br>
<br>
Oxygen License Server<br>
==========================================<br>
<br>
Oxygen License Server 24.0 build 2021121311<br>
<a href="https://www.oxygenxml.com/license_server/download.html" class="x_moz-txt-link-freetext">https://www.oxygenxml.com/license_server/download.html</a><br>
<br>
==========================================<br>
<br>
The Oxygen SDK and some of the plugins that we make available that<br>
contain the log4j library were also updated:<br>
<br>
Oxygen SDK<br>
==========================================<br>
<br>
Oxygen SDK for version 24 is updated to version 24.0.0.2<br>
Oxygen SDK for version 23 is updated to version 23.1.0.4<br>
Oxygen SDK for version 22 is updated to version 22.1.0.6<br>
<br>
Please update your dependencies to our SDK to point to the corresponding<br>
fix version of the SDK.<br>
<br>
Web Author PDF Plugin<br>
==========================================<br>
<br>
Web Author PDF Plugin 24.0.0.1<br>
<a href="https://www.oxygenxml.com/maven/com/oxygenxml/web-author-publishing-plugin/24.0.0.1" class="x_moz-txt-link-freetext">https://www.oxygenxml.com/maven/com/oxygenxml/web-author-publishing-plugin/24.0.0.1</a><br>
<br>
<br>
Web Author PDF Plugin 23.1.1.2<br>
<a href="https://www.oxygenxml.com/maven/com/oxygenxml/web-author-publishing-plugin/23.1.1.2" class="x_moz-txt-link-freetext">https://www.oxygenxml.com/maven/com/oxygenxml/web-author-publishing-plugin/23.1.1.2</a><br>
<br>
Oxygen XML Editor/Author/Developer plugins<br>
==========================================<br>
<br>
Please use the "Help->Manage Add-ons..." action to uninstall previous <br>
versions and make sure you installed the latest version of the following <br>
add-ons:<br>
<br>
Oxygen Web Author Test Server Add-on should be updated to version <br>
22.1.1, 23.1.2 or 24.0.1<br>
<br>
XSD to JSON Schema Converter should be updated to version 23.1.1 or 24.0.1<br>
<br>
Git Client should be update to version 3.0.1<br>
<br>
Batch Documents Converter should be updated to version 3.2.1<br>
<br>
==========================================<br>
<br>
We are still working to provide maintenance builds for more of the older <br>
versions as well as tools to help automating the mitigation steps.<br>
<br>
Best Regards,<br>
George<br>
--<br>
George Cristian Bina<br>
<oXygen/> XML Editor, Schema Editor and XSLT Editor/Debugger<br>
<a href="http://www.oxygenxml.com" class="x_moz-txt-link-freetext">http://www.oxygenxml.com</a><br>
<br>
_______________________________________________<br>
oXygen-user mailing list<br>
<a class="x_moz-txt-link-abbreviated" href="mailto:oXygen-user@oxygenxml.com">oXygen-user@oxygenxml.com</a><br>
<a href="https://www.oxygenxml.com/mailman/listinfo/oxygen-user" class="x_moz-txt-link-freetext">https://www.oxygenxml.com/mailman/listinfo/oxygen-user</a><br>
</div>
</span></font></div>
</div>
<br>
<fieldset class="x_moz-mime-attachment-header"></fieldset>
<pre class="x_moz-quote-pre">_______________________________________________
oXygen-user mailing list
<a class="x_moz-txt-link-abbreviated" href="mailto:oXygen-user@oxygenxml.com">oXygen-user@oxygenxml.com</a>
<a class="x_moz-txt-link-freetext" href="https://www.oxygenxml.com/mailman/listinfo/oxygen-user">https://www.oxygenxml.com/mailman/listinfo/oxygen-user</a>
</pre>
</blockquote>
<pre class="x_moz-signature" cols="72"></pre>
</div>
</div>
</body>
</html>