Become a Computing member

Third Log4j vulnerability uncovered, Apache releases version 2.17.0

20 December 2021 • 2 min read

Apache releases version 2.17.0 to address third Log4j vulnerability uncovered this month

Image:

Apache releases version 2.17.0 to address third Log4j vulnerability uncovered this month

'High severity' bug fixed is an uncontrolled recursion flaw

The Apache Software Foundation (ASF) has rolled out another update - version 2.17.0 - for its Java-based open-source logging library Log4j to address a third security vulnerability discovered in th...

To continue reading this article...

Join Computing

Unlimited access to real-time news, analysis and opinion from the technology industry
Receive important and breaking news in our daily newsletter
Be the first to hear about our events and awards programmes
Join live member only interviews with IT leaders at the ‘IT Lounge’; your chance to ask your burning tech questions and have them answered
Access to the Computing Delta hub providing market intelligence and research
Receive our members-only newsletter with exclusive opinion pieces from senior IT Leaders

Already a Computing member?

Previous Article

A fifth of all employees will fall for a phishing message, study finds

Next Article

Belgian defence ministry suffers cyber attack through Log4j exploitation

You may also like

Ivanti patches bugs in Connect Secure and Policy Secure gateways

Threats and Risks

Ivanti patches bugs in Connect Secure and Policy Secure gateways

Comes on the heels of federal-level security concerns

05 April 2024 • 3 min read

Cyber agency took systems offline after hack, report

Hacking

Cyber agency took systems offline after hack, report

CISA cautioned last month about threat actors exploiting multiple Ivanti vulnerabilities

11 March 2024 • 3 min read

Oracle's controversial stewardship of Java: The good and the bad

Open Source

Oracle's controversial stewardship of Java: The good and the bad

Oracle is doing a good job in keeping Java relevant. But that's pretty much where it ends, says Azul CTO

15 February 2024 • 5 min read

Author spotlight

Dev Kundaliya

More from Dev Kundaliya

Meta unveils its latest large language model Llama 3

EU watchdog rejects Meta's 'pay for privacy' attempt

More on Threats and Risks

Hackers launch brute-force attacks on business VPNs and more

Threats and Risks

Hackers launch brute-force attacks on business VPNs and more

The attacks rely on trial-and-error attempts to crack login credentials

18 April 2024 • 2 min read

Palo Alto Networks patches 'critical' vulnerability under active exploitation

Threats and Risks

Palo Alto Networks patches 'critical' vulnerability under active exploitation

Volexity says a ‘spike in exploitation’ is likely

Kyle Alspach

16 April 2024 • 2 min read

CISA issues emergency order on Microsoft breach by Russian hackers

Threats and Risks

CISA issues emergency order on Microsoft breach by Russian hackers

Affected bodies must take immediate action, agency says

Kyle Alspach

12 April 2024 • 2 min read

Delta