Re:Third High Severity CVE in Log4j Is Published
by staticassertion on Sunday December 19, 2021 @03:12PM
(#29617855)
In no way is manually writing a patch and then live patching the common situation.
The vast majority of cases, and this has been the case for decades, will be that you take responsibility for your own dependencies, and you let your vendors take responsibility for theirs.
The vast majority of cases, and this has been the case for decades, will be that you take responsibility for your own dependencies, and you let your vendors take responsibility for theirs.