Apache has released another Log4j version, 2.17.1 fixing a newly discovered remote code execution (RCE) vulnerability in 2.17.0, tracked as CVE-2021-44832. Prior to today, 2.17.0 was the most ...

The fallout from the Log4J vulnerabilities is a perfect example of a larger problem, though. The flaws are in the design of the software, and so to find it, you need someone who really understands ...

Violating orthogonality Overall, Log4j is a good example of the use of orthogonality. However, some code in Log4j violates this principle.

Log4j 2.6, the latest version of the popular logging library for Java, will include a number of configuration options that allows it to run in a completely garbage-free manner. The release follows ...