Log4J - you probably need to patch.

[phoneguy55]

https://support.avaya.com/helpcenter/getGenericDetails?detailId=1399839287609

SMGR patch is out.

 

[JayNEC]

SBCE patches are out too, and most of those are internet facing.

No patch for AADS yet though(8.0.1 and above), and that's internet facing.

These two things have been my biggest initial concern.

New England Communications

http://www.necomm.com

 

[jimbojimbo]

Avaya has patches for critical internet facing components for Remote Worker including ASBCE 8.1.3, AADS 8.1.4.1 (new binary), and Session Manager 8.1.3 (although I've asked about proof on this one).

I would not run remote worker without the patches in place. I have been seeing hacking attempts from Russia, the Ukraine, and Germany(a redirect from Russia) over the past 2 weeks. I expect US based hosted solution provider attacks are also happening. I would also strongly suggest eliminating any outbound internet capability from AADS and Session Manager at this time.

 

[phoneguy55]

SMGR patch and SM patch done in my lab. Seem to be fine so far.

 

[wpetilli]

anyone do the sbc's?

 

[kyle555]

Yeah. standalone 8.1.2 and EMS+HA SBC on 8.0.1 and 8.1.2

No complaints.

 

[lopes1211]

Did 8.1.3 SMGR's, SM's, EMS+HA SBC's on Sunday, no issues.

-CL

 

[Wanebo]

The AAMS patch they made to be applied via the GUI works pretty nicely. You just have to be on SP 8 to apply it.

 

[lopes1211]

Just making sure everybody saw that Avaya released a V2 of the log4j patches around 12/22. Looks like they may have missed something in their 1st attempt at a patch.

-CL

 

[jimbojimbo]

If you patched on or before 12/22 you probably have to patch again. There was a third log4j vulnerability found.

 

[phoneguy55]

Has anyone patched Session Manager with log4j and after data replication is no longer working?

 

[Wanebo]

Patched 5 ASM's and had no issues with data replication so far (a week later).

 

[phoneguy55]

Thanks for the reply. I patched 5 as well but 2 have data replication problems. I have an Avaya SR opened but no fix as of yet.