Re: Remote code execution exploit found in Log4j - CVE-2021-44228

On 12/13/21 6:30 AM, Larry "DrFranken" Bolhuis wrote:
. . .

I think part of the confusion here is the word Apache. Apache in this case refers NOT to the Apache Web Server (a VERY commonly used server on IBM i) but instead to the Apache software foundation.. . .

Quite. And unfortunately, people have a habit of referring to *anything* from Apache as simply Apache. Whether it's the Apache Web Server (more properly the Apache httpd Web Server, which is not Java-based, and therefore not affected), or Apache Tomcat (which can also function as a web server; it's Java based, but no even remotely current version uses Log4j), or some other product. In fact, the only Apache product I'm aware of that I've *never* heard referred to as simply "Apache" would be SVN.

Sort of the same way, nearly four decades ago, people almost immediately began referring to "Lotus 1-2-3" as simply "Lotus."

Let's all endeavour to be more specific about Apache products.

--
JHHL