News for hackers. Stuff that matters.

A comment on Tell HN: The software run by nearly every CA is affected by Log4J.

Re:Tell HN: The software run by nearly every CA is affected ... by hablutzel1 on Friday December 10, 2021 @08:27PM (#29517523)
If I'm not wrong this vulnerability affects Log4j 2.x onwards and the latest EJBCA from https://github.com/primekeydevs/ejbca-ce appears to be using only Log4j 1.2.17.
[ Parent | on HN ]
Re:Tell HN: The software run by nearly every CA is affected ... by maurom on Tuesday December 14, 2021 @10:55AM (#29552927)
Indeed, there's no sight of log4j2 on EJBCA Community deployments
[ Parent | on HN ]
Re:Tell HN: The software run by nearly every CA is affected ... by karansachdeva24 on Monday December 13, 2021 @07:19AM (#29538911)
How did you confirm the log4j version?
[ Parent | on HN ]
Re:Tell HN: The software run by nearly every CA is affected ... by hablutzel1 on Wednesday December 15, 2021 @04:24PM (#29571817)
Look at the the Log4j version under https://github.com/primekeydevs/ejbca-ce/tree/main/lib.
[ Parent | on HN ]