# \[RELEASE\] Geneos 5.11.3, fix for Apache Log4j2 vulnerability

**URL:** <https://community.itrsgroup.com/t/release-geneos-5-11-3-fix-for-apache-log4j2-vulnerability/131>\
**Category:** Announcements\
**Created:** [21 December 2021 14:13 UTC](https://community.itrsgroup.com/t/release-geneos-5-11-3-fix-for-apache-log4j2-vulnerability/131 "2021-12-21T14:13:40Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![system](https://europe1.discourse-cdn.com/flex013/uploads/itrsgroup/original/1X/ab76c7f661d75620a1b6d43bec49ff42e0a20716.png) [@system](https://community.itrsgroup.com/u/system)\
**Post date:** [21 December 2021 14:13 UTC](https://community.itrsgroup.com/t/release-geneos-5-11-3-fix-for-apache-log4j2-vulnerability/131/1 "2021-12-21T14:13:41Z")

</div>

Released: 21 December 2021

This release delivers the updated binaries in the [ITRS Downloads](https://resources.itrsgroup.com/downloads) page for:

- Active Console
- Web Dashboard
- Terracotta Messaging integration
- VMware Monitor integration

# Important

The Geneos 5.11.3 release includes updates to the following Geneos components and integrations to address the [Apache Log4j](https://www.itrsgroup.com/blog/log4j-zero-day-vulnerability) vulnerabilities (CVE-2021-44228, CVE-2021-45046, and CVE-2021-45105):

- Active Console 5.11.3
- Web Dashboard 5.11.3
- Terracotta Messaging integration 2.0.235
- VMware integration 1.4.20

We recommend upgrading to the latest version Geneos 5.11.3 or newer. We can also confirm that no other Geneos components are affected by this vulnerability.

If you are unable to upgrade, please see the mitigation and workaround information in [Vulnerability in Apache Log4j](https://support.itrsgroup.com/hc/en-us/articles/360007035877-Vulnerability-in-Apache-Log4j-CVE-2021-44228-).

# Highlights

These are the highlights of this release:

- The Apache Log4j library in the Active Console, Web Dashboard, Terracotta Messaging integration, and VMware Monitor integration, has been upgraded to 2.17.0 to fix the security vulnerability in Apache Log4j (CVE-2021-45105). We recommend upgrading to the latest version Geneos 5.11.3 or newer.

To know more about the impact of this issue to the ITRS products and components, see [Vulnerability in Apache Log4j](https://support.itrsgroup.com/hc/en-us/articles/360007035877-Vulnerability-in-Apache-Log4j-CVE-2021-44228-).