#log4j2 — Public Fediverse posts

LLM slop bug reports in log4J2

This thing now needs to be fixed on the highest level possible
Wasting programmers time is what the LLMs are doing

https://github.com/apache/logging-log4j2/discussions/4052

#log4J2 #LLM #AI #generated #Slop #bug #bounty #reports #technology #OpenSource

"Open Source" is Broken:
https://xeiaso.net/blog/open-source-broken-2021-12-11/

#opensource
#opensourceisbroken
#log4j2
#corejs

I started working for @log4j in 2009 and made its last 1.2 series release. Since then, a lot has changed, but the community is still alive and growing. Proud of that!

https://logging.apache.org/blog/2023/12/18/20-years-of-innovation.html

#opensource #java #log4j #log4j2

Angriffe auf Lücken in TP-Link Archer, #Apache #Log4j2 und Oracle Weblogic | Security https://www.heise.de/news/Angriffe-auf-Luecken-in-TP-Link-Archer-Apache-Log4j2-und-Oracle-Weblogic-8984237.html #Patchday

#IPs #exploiting the #log4j2 CVE-2021-44228 detected by the #crowdsec community

https://gist.github.com/blotus/f87ed46718bfdc634c9081110d243166

Response
https://hub.crowdsec.net/author/crowdsecurity/configurations/apache_log4j2_cve-2021-44228

Coucou les #chatons ! On nous signale dans l'oreillette une faille dans la lib java log4j. Plus d'info sur notre forum pour connaître les services #chatons pouvant être impactés. #log4jshell #Log4j2
https://forum.chatons.org/t/log4j-java-et-cve-2021-44228-log4shell/3069

RT @[email protected]

In the wake of the Apache #Log4j2 vulnerability (CVE-2021-44228), we have shipped Docker Desktop 4.3.1, which includes updates to the docker scan command. More from CTO @[email protected] on what we know so far and how to know if you've been impacted: https://dockr.ly/3DM74Hm

🐦🔗: https://twitter.com/Docker/status/1469801707068608514

RT @[email protected]

Glad to see the quick action from the @[email protected] team, helping the community detect the #log4j2 vulnerability in their images with "docker scan"

Well done 👏👏👏 https://twitter.com/stefscherer/status/1469780338033451017

🐦🔗: https://twitter.com/felipecruz/status/1469789505569923081

RT @[email protected]

It doesn’t matter if you like Java or not. We’re here to help each other in the community. If you want to check your #Docker images for #log4j2 vulnerabilities, update to the latest @[email protected] Desktop 4.3.1 which helps you with `docker scan` to find them.

🐦🔗: https://twitter.com/stefscherer/status/1469780338033451017

#Cloudflare #security responded to #log4j2 #vulnerability

https://blog.cloudflare.com/how-cloudflare-security-responded-to-log4j2-vulnerability/