hotpatch-for-apache-log4j2
An agent to hotpatch the log4j RCE from CVE-2021-44228. (by corretto)
hotpatch-for-apache-log4j2
An agent to hotpatch the log4j RCE from CVE-2021-44228. (by karianna)
hotpatch-for-apache-log4j2 | hotpatch-for-apache-log4j2 | |
---|---|---|
10 | 2 | |
497 | 4 | |
0.0% | - | |
0.0 | 4.6 | |
over 1 year ago | over 2 years ago | |
Java | Java | |
GNU General Public License v3.0 or later | GNU General Public License v3.0 or later |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
hotpatch-for-apache-log4j2
Posts with mentions or reviews of hotpatch-for-apache-log4j2.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2021-12-26.
- Log4j vulnerability mitigation
- Amazon Linux Hotpatch for Apache Log4j Needs a Patch
- AWS injected bad code into customer run Java web apps
- AWS’s Hotpatch Agent for Log4j
-
Log4Shell Remediation Cheat Sheet | Created by Java Champion and security researcher at Snyk
For mitigation, there is also the option of last resort of hotpatching the JVM that was posted here a couple times: https://github.com/corretto/hotpatch-for-apache-log4j2
- A JavaAgent based hotpatch for fixing live JVMs with the log4shell vulnerability
-
Hotpatch for Apache Log4j released
Source Code - https://github.com/corretto/hotpatch-for-apache-log4j2
- corretto/hotpatch-for-apache-log4j2: An agent to hotpatch the log4j RCE from CVE-2021-44228, no JVM restarts needed. Patching > hotpatching > nothing.
- A Java based hotpatch for the Log4Shell vulnerability (log4j2 CVE)
hotpatch-for-apache-log4j2
Posts with mentions or reviews of hotpatch-for-apache-log4j2.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2021-12-12.
-
A JavaAgent based hotpatch for fixing live JVMs with the log4shell vulnerability
https://github.com/karianna/hotpatch-for-apache-log4j2/ is sourcing a PR that should land shortly that adds all of the warnings :-)
-
Java based hotpatch for Log4shell (log4j2 vulnerability)
A no warranty Java based hot patching solution. Also see https://github.com/karianna/hotpatch-for-apache-log4j2 which is a fork created for education / learning about the original patch.
What are some alternatives?
When comparing hotpatch-for-apache-log4j2 and hotpatch-for-apache-log4j2 you can also consider the following projects:
CVE-2021-44228_scanner - Scanners for Jar files that may be vulnerable to CVE-2021-44228
PowerShellSnippets