News for hackers. Stuff that matters.

A comment on Log4j RCE Found. Parent comment

Re:Log4j RCE Found by grrrrrrreat on Friday December 10, 2021 @06:05PM (#29516563)
Does this affect SL4j wrappers over log4j as well ?
[ Parent | on HN ]
Re:Log4j RCE Found by exec on Friday December 10, 2021 @06:30PM (#29516775)
Yes. I managed to reproduce the issue with slf4j + log4j2.
[ Parent | on HN ]
Re:Log4j RCE Found by sathishv on Saturday December 11, 2021 @02:21AM (#29519195)
can you please share code sample? and what versions you used? i am unable to replicate with log4j 1.2.12, slf4j 1.7.6, java8-151
[ Parent | on HN ]
Re:Log4j RCE Found by orgesballa on Saturday December 11, 2021 @05:42AM (#29519957)
Affected versions >= 2.0.0, < 2.0.11 < 1.11.10

So you are safe!

[ Parent | on HN ]
Re:Log4j RCE Found by kikowi on Thursday December 16, 2021 @06:31AM (#29577196)
Do you have any reference about < 1.11.10 being affected? I though versions 1.x are not affected.
[ Parent | on HN ]