diff --git a/slf4j-site/src/site/pages/log4shell.html b/slf4j-site/src/site/pages/log4shell.html index de1e77b8..1d8c48ef 100644 --- a/slf4j-site/src/site/pages/log4shell.html +++ b/slf4j-site/src/site/pages/log4shell.html @@ -33,9 +33,9 @@

Preamble

-

The contents of this page are the result of our - understanding of the situation and are provided AS IS without - warranty of any kind.

+

Please note that the contents of this page are the result of + our understanding of the situation and are provided AS IS + without warranty of any kind.

What is CVE-2021-44228?

@@ -121,6 +121,22 @@

It goes without saying that once log4j-1.2.17.jar is patched, you would need to deploy it.

+ +

Reload4j 1.2.18 as a replacement for + log4j 1.2.17

+ +

The reload4j project is + a fork of Apache log4j version 1.2.17 with the goal of fixing + the pressing issues mentioned above. It is intended as a drop-in + replacement for log4j version 1.2.17. By drop-in, we mean the + replacement of log4j.jar with reload4j.jar in + your build with no source code changes in .java files being + necessary. +

+ +

With version 1.2.18.0, the reload4j project offers a clear + and easy migration path for the thousands of users who have an + urgent need to fix vulnerabilities in log4j 1.2.17.

How about the SLF4J API?