Forum: Too Lazy BBS

Log4j - Why you should upgrade

From Randall@rsbecker@nexbridge.com to comp.sys.tandem on Tue Jul 19 07:03:59 2022

From Newsgroup: comp.sys.tandem

If you have not heard about this from me, or HPE, or other places, please have a glace. It is important that you patch or deal with the log4j component to prevent vulnerabilities.

https://channeldailynews.com/news/log4j-vulnerability-has-reached-endemic-proportions-says-report/77753?utm_source=CDN&utm_medium=enews&utm_campaign=CDN&scid=ed8c7e89-3f63-1128-a221-4e6022be5395

There was a HOTSTUFF that came out a while ago about this. Please read that and mitigate it.

Note: NSGit does not have any vulnerability associated with log4j. Jenkins also does not, unless you have replaced the default log4j version with a bad one.

Regards,
Randall Becker
On behalf of the NSGit team.
--- Synchronet 3.21d-Linux NewsLink 1.2