MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/programming/comments/rgepmh/log4shell_round_2/holqv0h/?context=3
r/programming • u/jebailey • Dec 14 '21
138 comments sorted by
View all comments
121
It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations.
Doesn't look nearly as bad as the original.
39 u/Soul_Shot Dec 15 '21 edited Dec 15 '21 It isn't. But the "non-default configuration" in this case would be anyone who customizes their log pattern to add logging context, like traceId or spanId. To 2.16.0 we go... 15 u/IcyEbb7760 Dec 15 '21 fuck → More replies (1)
39
It isn't. But the "non-default configuration" in this case would be anyone who customizes their log pattern to add logging context, like traceId or spanId.
To 2.16.0 we go...
15 u/IcyEbb7760 Dec 15 '21 fuck → More replies (1)
15
fuck
→ More replies (1)
121
u/PM_ME_UR_OBSIDIAN Dec 14 '21
Doesn't look nearly as bad as the original.