[Lex Computer & Tech Group/LCTG] Log4j

[Robert Primak]

 It is not in stand-alone home or Pro versions of Windows. Unless you are connecting to an Enterprise Domain, you do not have the affected file(s), and your computer does not do the logging which uses the vulnerable logging.
-- Bob Primak

    On Sunday, December 26, 2021, 02:51:51 PM EST, Smita Desai <smitausa at gmail.com> wrote:  
 
 Log4j<!--#yiv9409794053 _filtered {} _filtered {} _filtered {}#yiv9409794053 #yiv9409794053 p.yiv9409794053MsoNormal, #yiv9409794053 li.yiv9409794053MsoNormal, #yiv9409794053 div.yiv9409794053MsoNormal {margin:0in;font-size:11.0pt;font-family:"Calibri", sans-serif;}#yiv9409794053 a:link, #yiv9409794053 span.yiv9409794053MsoHyperlink {color:blue;text-decoration:underline;}#yiv9409794053 span.yiv9409794053EmailStyle20 {font-family:"Arial", sans-serif;color:windowtext;font-weight:normal;font-style:normal;}#yiv9409794053 .yiv9409794053MsoChpDefault {font-size:10.0pt;} _filtered {}#yiv9409794053 div.yiv9409794053WordSection1 {}-->
Yes, I agree that there is nothing – the end user – can do to eliminate this bug, we can make sure to install patches and fixes as soon a s they are available. However, I do think that it will affect all machines with all OSes. I did a cursory – cursory since did not check the version – look at my Windows 10 computers and found it to be part of MATLAB and MS SQL Server (maybe due to Azure components). 

  

To find which apps use it, search for log4j*.jar on the root drive. That is C: drive on Windows. Jar files – Java Archives - are libraries (or DLLs in Windows) and this one was created and maintained by Apache. So if anyone is running Apache Tomcat – the web server – they would be potentially affected.

  

Log4j also affects LDAP (Light Directory Access Protocol), which is commonly used to retrieve user data and attributes, so applications using LDAP may also be affected.  

  

Here is a link to s guidance on this issue. At the bottom, is a link to list of affected products (a who is who of tech).

  

And this is still unfolding, so stay tuned.

  

Smita Desai

  

From: Robert Primak <bobprimak at yahoo.com> 
Sent: Sunday, December 26, 2021 11:40 AM
To: Smita Desai <smitausa at gmail.com>; Lex Computer Group <lctg at lists.toku.us>
Subject: Re: [Lex Computer & Tech Group/LCTG] Log4j

  

  

This is not an issue the home user can fix. It's on the servers for a number of popular web based services. It's not in Windows.

  

-- Bob Primak 

  

On Saturday, December 25, 2021, 10:48:07 AM EST, Smita Desai <smitausa at gmail.com> wrote: 

  

  

Fun at our expense…

https://log4jmemes.com/

Enjoy,

Smita Desai

  

===============================================
::The Lexington Computer and Technology Group Mailing List::
Reply goes to sender only; Reply All to send to list.
Send to the list: LCTG at lists.toku.us      Message archives: http://lists.toku.us/private.cgi/lctg-toku.us
To subscribe: email lctg-subscribe at toku.us  To unsubscribe: email lctg-unsubscribe at toku.us
Future and Past meeting information: http://LCTG.toku.us
List information: http://lists.toku.us/listinfo.cgi/lctg-toku.us
This message was sent to bobprimak at yahoo.com.
Set your list options: http://lists.toku.us/options.cgi/lctg-toku.us/bobprimak@yahoo.com
  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.toku.us/pipermail/lctg-toku.us/attachments/20211226/b97c6ec5/attachment.html>