Hi,
We are using Octopus cloud instance with octopus tentacles as clients for deployments for our .Net applications.
Can you please confirm whether installation of octopus tentacle or octopus cloud instance have been integrated with Octopus Java SDK or at the time of tentacle installation in windows servers was there any files or exe is related to Java SDK.
Regrads,
Shafi
Good morning @mohammed.shafi,
The Log4j issues affect two external integrations, one being the Octopus TeamCity Plugin and one the Java SDK. The Java SDK was brought into Octopus in September of this year so is a very new feature.
Thankfully, Octopus Cloud, Octopus Tentacle, and Octopus Server are not affected by this vulnerability.
If you have written a custom integration to the Octopus API in Java, using the Java SDK , then you will want to update your integration to use the latest version of the module.
Here is the link to our Vulnerability Advisories you can look at if you do have a Java SDK custom integration.
If you’re not using that then you should not be impacted by this.
I hope that answers your question but we are here to help if you have any other questions or follow up questions from this post.
Kind Regards,
Clare Martin
This topic was automatically closed 31 days after the last reply. New replies are no longer allowed.