CSPC update now critical for all versions of 2.9?

[JSM92]

The Log4j response page originally stated only 2.9.1 and up were affected, now the update announcement says "including 2.9, 2.9.0.1, and 2.9.0.2, previously reported not affected".  Does this mean those versions are indeed affected and need to be updated immediately?  I'd let all my customers on 2.9 and below know they were safe based on the previous message. 

[vivekcha@cisco.com]

Hi,

Let us check the details and will get back to you with the update.

Regards,

Vivek Chauhan

[Ralph Herbst · Accepted solution]

All CSPC 2.9 version are affected including 2.9, 2.9.0.1, and 2.0.9.2.