mirror of https://github.com/qos-ch/slf4j
Ceki Gulcu
parent
7a68675fc6
commit
45fbb1ebc8
|
|
@ -13,14 +13,15 @@
|
|||
|
||||
<script type="text/javascript" src="js/jquery-min.js"></script>
|
||||
|
||||
<script src="templates/header.js" type="text/javascript"></script>
|
||||
<div id="left">
|
||||
<script src="templates/left.js" type="text/javascript"></script>
|
||||
</div>
|
||||
<div id="right">
|
||||
<script src="templates/right.js" type="text/javascript"></script>
|
||||
</div>
|
||||
|
||||
<div id="content">
|
||||
<script src="templates/header.js" type="text/javascript"></script>
|
||||
<div id="left">
|
||||
<script src="templates/left.js" type="text/javascript"></script>
|
||||
</div>
|
||||
<div id="right">
|
||||
<script src="templates/right.js" type="text/javascript"></script>
|
||||
</div>
|
||||
|
||||
<div id="content">
|
||||
|
||||
|
||||
|
|
@ -90,6 +91,7 @@
|
|||
<script src="templates/footer.js" type="text/javascript"></script>
|
||||
|
||||
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</body>
|
||||
</html>
|
||||
|
|
|
|||
|
|
@ -35,6 +35,13 @@ a {
|
|||
text-decoration: none;
|
||||
}
|
||||
|
||||
#container {
|
||||
margin-left: auto;
|
||||
margin-right: auto;
|
||||
max-width: 100em;
|
||||
|
||||
}
|
||||
|
||||
#content a:hover {
|
||||
text-decoration: underline;
|
||||
}
|
||||
|
|
@ -117,20 +124,22 @@ strong {
|
|||
/* positioning-layers static and absolute */
|
||||
|
||||
#breadcrumbs {
|
||||
padding: 3px 10px 3px 10px;
|
||||
margin: 0px 4px 0px 4px;
|
||||
font-size: small;
|
||||
border: 1px solid #CCCCCC;
|
||||
padding: 3px 10px 3px 10px;
|
||||
margin: 0px 4px 0px 4px;
|
||||
font-size: small;
|
||||
border: 1px solid #CCCCCC;
|
||||
/*border-bottom: 1px solid #aaa;
|
||||
/* background-color: #ccc; lime;
|
||||
border-color: #663300;*/
|
||||
background-color: #ffd0a0;
|
||||
background-color: #ffd0a0;
|
||||
/*max-width: 77em;*/
|
||||
}
|
||||
|
||||
#left {
|
||||
position: absolute;
|
||||
left: 0px;
|
||||
//position: fixed;
|
||||
//left: 0px;
|
||||
|
||||
float: left;
|
||||
width: 15em;
|
||||
margin: 4px 0px 0px 4px;
|
||||
padding: 0px;
|
||||
|
|
@ -211,15 +220,16 @@ strong {
|
|||
}
|
||||
|
||||
#right {
|
||||
position: absolute;
|
||||
right: 0px;
|
||||
width: 14em;
|
||||
color: #564b47;
|
||||
margin: 4px 4px 0px 0px;
|
||||
padding: 0px;
|
||||
background-color: #ffffff;
|
||||
border: 1px solid #cccccc;
|
||||
font-size: 80%;
|
||||
//position: absolute;
|
||||
//right: 0px;
|
||||
float: right;
|
||||
width: 14em;
|
||||
color: #564b47;
|
||||
margin: 4px 4px 0px 0px;
|
||||
padding: 0px;
|
||||
background-color: #ffffff;
|
||||
border: 1px solid #cccccc;
|
||||
font-size: 80%;
|
||||
}
|
||||
|
||||
p.menu_header {
|
||||
|
|
|
|||
|
|
@ -10,6 +10,9 @@
|
|||
<body>
|
||||
<script type="text/javascript">prefix='';</script>
|
||||
<script type="text/javascript" src="js/jquery-min.js"></script>
|
||||
|
||||
<div id="container">
|
||||
|
||||
<script src="templates/header.js" type="text/javascript"></script>
|
||||
<div id="left">
|
||||
<noscript>Please turn on Javascript to view this menu</noscript>
|
||||
|
|
@ -58,6 +61,8 @@
|
|||
<script src="templates/footer.js" type="text/javascript"></script>
|
||||
|
||||
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
</body>
|
||||
</html>
|
||||
|
|
|
|||
|
|
@ -13,16 +13,18 @@
|
|||
<script type="text/javascript">prefix='';</script>
|
||||
<script type="text/javascript" src="js/jquery-min.js"></script>
|
||||
|
||||
<script type="text/javascript" src="templates/header.js" ></script>
|
||||
<div id="left">
|
||||
<noscript>Please turn on Javascript to view this menu</noscript>
|
||||
<script src="templates/left.js" type="text/javascript"></script>
|
||||
</div>
|
||||
<div id="right">
|
||||
<script src="templates/right.js" type="text/javascript"></script>
|
||||
</div>
|
||||
<div id="container">
|
||||
|
||||
<script type="text/javascript" src="templates/header.js" ></script>
|
||||
<div id="left">
|
||||
<noscript>Please turn on Javascript to view this menu</noscript>
|
||||
<script src="templates/left.js" type="text/javascript"></script>
|
||||
</div>
|
||||
<div id="right">
|
||||
<script src="templates/right.js" type="text/javascript"></script>
|
||||
</div>
|
||||
|
||||
<div id="content">
|
||||
<div id="content">
|
||||
|
||||
<h2>Latest STABLE version</h2>
|
||||
|
||||
|
|
@ -58,6 +60,7 @@ sub 2048R/7FBFA159 2012-04-26
|
|||
</pre>
|
||||
|
||||
<script src="templates/footer.js" type="text/javascript"></script>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</body>
|
||||
</html>
|
||||
|
|
|
|||
|
|
@ -11,15 +11,18 @@
|
|||
|
||||
<script type="text/javascript">prefix='';</script>
|
||||
<script type="text/javascript" src="js/jquery-min.js"></script>
|
||||
<script src="templates/header.js" type="text/javascript"></script>
|
||||
<div id="left">
|
||||
<noscript>Please turn on Javascript to view this menu</noscript>
|
||||
<script src="templates/left.js" type="text/javascript"></script>
|
||||
</div>
|
||||
<div id="right">
|
||||
<script src="templates/right.js" type="text/javascript"></script>
|
||||
</div>
|
||||
<div id="content">
|
||||
|
||||
<div id="container">
|
||||
|
||||
<script src="templates/header.js" type="text/javascript"></script>
|
||||
<div id="left">
|
||||
<noscript>Please turn on Javascript to view this menu</noscript>
|
||||
<script src="templates/left.js" type="text/javascript"></script>
|
||||
</div>
|
||||
<div id="right">
|
||||
<script src="templates/right.js" type="text/javascript"></script>
|
||||
</div>
|
||||
<div id="content">
|
||||
|
||||
|
||||
<h1>Simple Logging Facade for Java (SLF4J)</h1>
|
||||
|
|
@ -51,8 +54,15 @@
|
|||
</p>
|
||||
|
||||
|
||||
<h3>Donations and support contracts</h3>
|
||||
|
||||
<p>We welcome your donations to help the SLF4J project. We also
|
||||
offer support contracts. Please contact sales(at)qos.ch for details.
|
||||
</p>
|
||||
|
||||
|
||||
<script src="templates/footer.js" type="text/javascript"></script>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</body>
|
||||
</html>
|
||||
|
|
|
|||
|
|
@ -10,7 +10,9 @@
|
|||
<body>
|
||||
<script type="text/javascript">prefix='';</script>
|
||||
<script type="text/javascript" src="js/jquery-min.js"></script>
|
||||
|
||||
|
||||
<div id="container">
|
||||
|
||||
<script src="templates/header.js" type="text/javascript"></script>
|
||||
<div id="left">
|
||||
<script src="templates/left.js" type="text/javascript"></script>
|
||||
|
|
@ -68,6 +70,7 @@
|
|||
|
||||
<script src="templates/footer.js" type="text/javascript"></script>
|
||||
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</body>
|
||||
</html>
|
||||
|
|
|
|||
|
|
@ -11,15 +11,21 @@
|
|||
|
||||
<script type="text/javascript">prefix='';</script>
|
||||
<script type="text/javascript" src="js/jquery-min.js"></script>
|
||||
<script src="templates/header.js" type="text/javascript"></script>
|
||||
<div id="left">
|
||||
<noscript>Please turn on Javascript to view this menu</noscript>
|
||||
<script src="templates/left.js" type="text/javascript"></script>
|
||||
</div>
|
||||
<div id="right">
|
||||
<script src="templates/right.js" type="text/javascript"></script>
|
||||
</div>
|
||||
<div id="content">
|
||||
|
||||
<div id="container">
|
||||
|
||||
<script src="templates/header.js" type="text/javascript"></script>
|
||||
|
||||
|
||||
<div id="left">
|
||||
<noscript>Please turn on Javascript to view this menu</noscript>
|
||||
<script src="templates/left.js" type="text/javascript"></script>
|
||||
</div>
|
||||
<div id="right">
|
||||
<script src="templates/right.js" type="text/javascript"></script>
|
||||
</div>
|
||||
|
||||
<div id="content">
|
||||
|
||||
<h1>Comments on the CVE-2021-44228 vulnerability</h1>
|
||||
|
||||
|
|
@ -36,8 +42,8 @@
|
|||
href="https://www.lunasec.io/docs/blog/log4j-zero-day/">mechanics
|
||||
of the vulnerability</a>. The exploit becomes effective when the
|
||||
attacker can inject a string containing a substring in the form
|
||||
"${jndi:ldap://some.attacker-controlled.site/}". Opportunities
|
||||
for injecting such a string seem endless.
|
||||
"${jndi:ldap://some.attacker-controlled.site/}".
|
||||
Opportunities for injecting such strings appear to be endless.
|
||||
</p>
|
||||
|
||||
<p>Log4j 2.x is open for this attack because it performs a
|
||||
|
|
@ -59,6 +65,7 @@
|
|||
<p>Given that log4j version 1.x is still very widely deployed,
|
||||
we have been receiving a steady stream of questions regarding
|
||||
the vulnerability of log4j version 1.x.
|
||||
</p>
|
||||
|
||||
|
||||
<p><b>As log4j 1.x does not offer a look up mechanism, it does
|
||||
|
|
@ -77,6 +84,7 @@
|
|||
|
||||
<h3>How about the SLF4J API?</h3>
|
||||
|
||||
|
||||
<p>The SLF4J API is just an API which lets message data go
|
||||
through. As such, using log4j 2.x even via SLF4J does not
|
||||
mitigate the vulnerability.
|
||||
|
|
@ -102,10 +110,31 @@
|
|||
<p>If <code>log4j-core</code>, located in the
|
||||
<code>org.apache.logging.log4j</code> group, is absent, then you
|
||||
are fine. Otherwise, either remove the said artifact or upgrade
|
||||
to a log4j 2.x version which fixes the issue.
|
||||
<p>
|
||||
to a log4j 2.x version which fixes the issue.</p>
|
||||
|
||||
|
||||
<h3>Is there a bigger lesson?</h3>
|
||||
|
||||
<p>CVE-2021-44228 involves a cascade of failures in various
|
||||
components, of which only one is actually located in log4j
|
||||
2.x. Indeed, it takes only a moment of inattention to
|
||||
unwittingly create a vulnerability. However, vulnerabilities may
|
||||
arise even when you follow best practices.
|
||||
</p>
|
||||
|
||||
<p>Thus, while keeping up with the latest patches is a good
|
||||
practice, it is probably just as important to invest resources
|
||||
so that your organization is capable of understanding the actual
|
||||
root causes of various vulnerabilities and can avoid them in the
|
||||
first place. </p>
|
||||
|
||||
<p>Another question is the reaction speed. Once a vulnerability
|
||||
is detected, can your organization quickly fix a vulnerability?
|
||||
On this front, the log4j 2.x developers deserve credit for their
|
||||
quick response.
|
||||
</p>
|
||||
|
||||
|
||||
<h3>Further reading</h3>
|
||||
|
||||
<ol>
|
||||
|
|
@ -118,9 +147,6 @@
|
|||
href="https://github.com/lunasec-io/lunasec/blob/master/docs/blog/2021-12-09-log4j-zero-day.md">lunasec-io/lunasec</a></li>
|
||||
|
||||
</ol>
|
||||
|
||||
|
||||
|
||||
</div>
|
||||
</body>
|
||||
</html>
|
||||
|
|
|
|||
|
|
@ -10,14 +10,15 @@
|
|||
<body>
|
||||
<script type="text/javascript">prefix='';</script>
|
||||
<script type="text/javascript" src="js/jquery-min.js"></script>
|
||||
|
||||
<script src="templates/header.js" type="text/javascript"></script>
|
||||
<div id="left">
|
||||
<script src="templates/left.js" type="text/javascript"></script>
|
||||
</div>
|
||||
<div id="right">
|
||||
<script src="templates/right.js" type="text/javascript"></script>
|
||||
</div>
|
||||
|
||||
<div id="content">
|
||||
<script src="templates/header.js" type="text/javascript"></script>
|
||||
<div id="left">
|
||||
<script src="templates/left.js" type="text/javascript"></script>
|
||||
</div>
|
||||
<div id="right">
|
||||
<script src="templates/right.js" type="text/javascript"></script>
|
||||
</div>
|
||||
|
||||
<div id="content">
|
||||
|
||||
|
|
@ -128,6 +129,7 @@
|
|||
<p> </p>
|
||||
|
||||
<script src="templates/footer.js" type="text/javascript"></script>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</body>
|
||||
</html>
|
||||
|
|
|
|||
|
|
@ -12,15 +12,17 @@
|
|||
<script type="text/javascript">prefix='';</script>
|
||||
<script type="text/javascript" src="js/prettify.js"></script>
|
||||
<script type="text/javascript" src="js/jquery-min.js"></script>
|
||||
|
||||
<script src="templates/header.js" type="text/javascript"></script>
|
||||
<div id="left">
|
||||
<script src="templates/left.js" type="text/javascript"></script>
|
||||
</div>
|
||||
<div id="right">
|
||||
<script src="templates/right.js" type="text/javascript"></script>
|
||||
</div>
|
||||
|
||||
<div id="content">
|
||||
|
||||
<script src="templates/header.js" type="text/javascript"></script>
|
||||
<div id="left">
|
||||
<script src="templates/left.js" type="text/javascript"></script>
|
||||
</div>
|
||||
<div id="right">
|
||||
<script src="templates/right.js" type="text/javascript"></script>
|
||||
</div>
|
||||
|
||||
<div id="content">
|
||||
|
||||
|
||||
|
|
@ -2421,6 +2423,10 @@
|
|||
<h3>13 April 2005 - start of work on SLF4J project</h3>
|
||||
|
||||
<p>Launch of the SLF4J project. Work has begun on the web-site, svn
|
||||
repositories as well as the source code. </p> <script
|
||||
src="templates/footer.js" type="text/javascript"></script> </div>
|
||||
</body> </html>
|
||||
repositories as well as the source code. </p>
|
||||
|
||||
<script src="templates/footer.js" type="text/javascript"></script>
|
||||
</div>
|
||||
</div>
|
||||
</body>
|
||||
</html>
|
||||
|
|
|
|||
Loading…
Reference in New Issue