Need to confirm if we need to upgrade to patch for Log4j

Hello,

I've been trying to confirm if we need to patch 2 particular computers, and even when we found this link, we would like some guidance/confirmation if we need to upgrade to patch this.  Can anybody confirm if based on this software installed if we need to patch any of these? 

Currently these are the Agilent software installed:

Computer 1:

Name

Vendor Version

Agilent OpenLAB Acquisition.

Agilent Technologies. 2.2.0.484.
Agilent OpenLAB CDS - Agilent 35900 A/D. Agilent Technologies. 2.3.53.
Agilent OpenLAB CDS - Agilent Data Player. Agilent Technologies. 01.02.010.
Agilent OpenLAB CDS - Agilent GC. Agilent Technologies. 1.02.055.
Agilent OpenLAB CDS - Agilent GC/MS. Agilent Technologies. 1.01.0.475.
Agilent OpenLAB CDS - Agilent Headspace. Agilent Technologies. 1.07.2.16293.1717.
Agilent OpenLAB CDS - Agilent LC. Agilent Technologies. 2.16.6.
Agilent OpenLAB CDS - Agilent LC/MS. Agilent Technologies. 1.2.35.0.
Agilent OpenLAB CDS - Agilent SS420x. Agilent Technologies. 01.01.65.
Agilent OpenLAB CDS Control Panel Help. Agilent Technologies. 1.02.031.
Agilent OpenLAB CDS Help and Learning. Agilent Technologies. 1.02.031.
Agilent OpenLAB Content Management Add-in. Agilent Technologies. 2.2.0.505.
Agilent OpenLAB Content Management Configuration. Agilent Technologies. 2.2.0.539.
Agilent OpenLAB Content Management Documentation. Agilent Technologies. 2.2.0.505.
Agilent OpenLAB Content Management. Agilent Technologies. 2.2.0.505.
Agilent OpenLAB Data Analysis. Agilent Technologies. 2.200.0.528.
Agilent OpenLAB Setup Utility. Agilent Technologies. 2.1.0.0.
Agilent OpenLAB Shared Services. Agilent Technologies. 2.2.0.618.
Agilent Parts Finder. Agilent Technologies. 1.04.5389.
Agilent Software Verification Tool B.01.01. Agilent Technologies. 5.1.010.0.
Agilent Technologies 5977B MSD Documentation. Agilent Technologies. 1.15.17170.1550.
Agilent Technologies 7650A ALS Documentation. Agilent Technologies. 1.15.17170.1550.
Agilent Technologies 7697A Headspace Documentation. Agilent Technologies. 1.15.17170.1550.
Agilent Technologies 7890B Gas Chromatograph Documentation. Agilent Technologies. 1.15.17170.1550.
Agilent Technologies Documentation Menu. Agilent Technologies. 1.15.17170.1550.
Agilent Technologies GC Firmware Update Tool. Agilent Technologies. 1.6.0.49.
PostgreSQL. Agilent Technologies. 9.3.6.2.

Computer 2:

Name Vendor Version
Agilent InfinityLab LC/MSD Series and 6100 Series LC/MS Resources. Agilent Technologies. 3.00.0000.
Agilent Lab Advisor. Agilent Technologies. 02.11.308.
Agilent OpenLAB CDS ChemStation 35900 A/D Drivers. Agilent Technologies. 2.3.54.
Agilent OpenLab CDS ChemStation Edition. Agilent Technologies. 01.10.201.
Agilent OpenLAB CDS ChemStation ELSD Drivers. Agilent Technologies. 1.7.21.38663.
Agilent OpenLab CDS ChemStation GC Drivers. Agilent Technologies. 3.0.527.
Agilent OpenLab CDS ChemStation LC and CE Drivers. Agilent Technologies. 3.0.32.
Agilent OpenLab CDS ChemStation Micro GC Drivers. Agilent Technologies. 2.0.0.934.
Agilent OpenLab CDS Control Panel ChemStation Plugin. Agilent Technologies. 1.10.7.
Agilent OpenLab CDS Control Panel Help. Agilent Technologies. 1.04.028.
Agilent OpenLAB Content Management Add-in. Agilent Technologies. 2.4.0.589.
Agilent OpenLAB Content Management Configuration. Agilent Technologies. 2.4.0.683.
Agilent OpenLab Content Management. Agilent Technologies. 2.4.0.589.
Agilent OpenLab Data Provider for ChemStation. Agilent Technologies. 1.18.0.
Agilent OpenLab Shared Services (64 bit). Agilent Technologies. 3.2.0.620.
Agilent OpenLab Shared Services. Agilent Technologies. 3.2.0.620.
Agilent OpenLab Storage Client Services. Agilent Technologies. 3.2.0.620.
Agilent Parts Finder. Agilent Technologies. 1.05.6374.
Agilent Software Verification Tool B.01.01. Agilent Technologies. 5.1.010.0.

Thanks in advance,

Joel Vazquez

Parents
  • Hello Joel,

    Your Computer 2 system is an OpenLab Chemstation Secure Workstation C.01.10 and will require the Log4j patch to address the security vulnerability.

    For Computer 1 it is unclear which version of CDS 2.x Workstation Plus you have.  With newer systems there is an Agilent OpenLab CDS line that would have the overall/base version number.  The Software Verification Reports for OpenLab CDS 2 can be checked for the base version number located in the "C:\SVReports\Agilent OpenLAB" directory.  If no reports exist you can run the Software Verification Tool in the Start Menu under Agilent Technologies to create one.  On the report look in the middle near the top for the Base Revision Number.  Currently CDS 2.3 and newer have Log4J patches.

    For CDS 2.3 and newer Workstation Plus systems, follow the link you posted and select the appropriate CDS 2.x version and download the readme and Log4j patch.  Another way to get there is to log into Agilent's Subscribe net, click on Product List and navigate to the OpenLab CDS section.  Select CDS 2 updates and select Previous versions tab if dealing with CDS 2.3, 2.4, or 2.5.  Download the readme and patch.

    https://community.agilent.com/technical/software/b/announcements-865833490/posts/apache-log4j-security-vulnerability-in-some-openlab-products

    Here 2.3 is just an example.

    -Bill

Reply
  • Hello Joel,

    Your Computer 2 system is an OpenLab Chemstation Secure Workstation C.01.10 and will require the Log4j patch to address the security vulnerability.

    For Computer 1 it is unclear which version of CDS 2.x Workstation Plus you have.  With newer systems there is an Agilent OpenLab CDS line that would have the overall/base version number.  The Software Verification Reports for OpenLab CDS 2 can be checked for the base version number located in the "C:\SVReports\Agilent OpenLAB" directory.  If no reports exist you can run the Software Verification Tool in the Start Menu under Agilent Technologies to create one.  On the report look in the middle near the top for the Base Revision Number.  Currently CDS 2.3 and newer have Log4J patches.

    For CDS 2.3 and newer Workstation Plus systems, follow the link you posted and select the appropriate CDS 2.x version and download the readme and Log4j patch.  Another way to get there is to log into Agilent's Subscribe net, click on Product List and navigate to the OpenLab CDS section.  Select CDS 2 updates and select Previous versions tab if dealing with CDS 2.3, 2.4, or 2.5.  Download the readme and patch.

    https://community.agilent.com/technical/software/b/announcements-865833490/posts/apache-log4j-security-vulnerability-in-some-openlab-products

    Here 2.3 is just an example.

    -Bill

Children
No Data
Was this helpful?