Tag

eol-software

Safeguard articles tagged "eol-software" — guides, analysis, and best practices for software supply chain and application security.

1 article

AppSec

Log4j 1.2.17 Vulnerabilities: Why Log4j 1.x Cannot Be Fixed

The only real log4j 1.2.17 vulnerability fix is migrating off the 1.x line — it reached end of life in 2015 and its RCE-class CVEs will never be patched. Here is the case and the path.

Apr 29, 20256 min read