Pega Security Advisory - Apache Log4j - Vulnerability Hotfixes error for Pega 8.6 &8.5.3v

General
, ,
1

For 8.6version - We got a zip “DL-7585_HF-54923.zip” file from HF-54923 request and For 8.5.3v - We got a zip “DL-7585_HF-54924.zip” file from HF-549254 request.

When we tried to import using hot fix manager from UI, getting this error message

  • “Signature verification failed for DL-7577_HF-54923.zip: Failed to verify signatures: Unable to determine revocation status due to network error”.
  • “Signature verification failed for DL-7577_HF-54923.zip: Failed to verify signatures: Unable to determine revocation status due to network error”.
    Please see the attachment.

8.6.JPG
8.6.JPG954×629 45.7 KB

8.5.3.JPG
8.5.3.JPG971×540 33.3 KB

2

@HARIL043 This could be due to the HFIX getting corrupted. Request a copy from Pega GCS ftp link by raising a Pega Support ticket

3

@KarthikM6254 , found a solution - need to change the hotfixmanager/enableRevocation DSS to false and it worked.