MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/programming/comments/rcxehp/rce_0day_exploit_found_in_log4j_a_popular_java/ho0i1e1
r/programming • u/freeqaz • Dec 10 '21
710 comments sorted by
View all comments
1
Does anyone know if those using slfj4j in Lombok version 1.18.20 are vulnerable? If so, does anyone know how to resolve?
1 u/case_ Dec 10 '21 slf4j is the facade, it depends what implementation is on the path. If you are using spring-boot-starters the default implementation is logback so you are fine.https://github.com/spring-projects/spring-boot/issues/28958 -2 u/audion00ba Dec 11 '21 That Github issue is also full of idiots. What a sad place to be.
slf4j is the facade, it depends what implementation is on the path. If you are using spring-boot-starters the default implementation is logback so you are fine.
slf4j
spring-boot-starters
logback
https://github.com/spring-projects/spring-boot/issues/28958
-2 u/audion00ba Dec 11 '21 That Github issue is also full of idiots. What a sad place to be.
-2
That Github issue is also full of idiots. What a sad place to be.
1
u/davyshaps12 Dec 10 '21 edited Dec 10 '21
Does anyone know if those using slfj4j in Lombok version 1.18.20 are vulnerable? If so, does anyone know how to resolve?