Log4j mitigation

Tue Dec 14 00:06:11 UTC 2021

On 13. Dec 2021, at 20:32, Jared Mauch <jared at puck.nether.net> wrote:
> 
> This is an great modern example showing how deeply embedded things could be, and they get worse with each of these nesting technologies as well, it may be embedded in a docker or VM image, or the class could be in some other JAR or zip you are not aware of, or could come back with an overlapping class definition based on the order things get loaded.

That’s what we’ll have SBOMs for [1].

Grüße, Carsten

[1]: https://en.wikipedia.org/wiki/Software_bill_of_materials