Happy Meter

[biometrics]

Did that and found some in my Arduino IDE (ver 2.12.0), according to this

log4shell/software at main · NCSC-NL/log4shell

Operational information regarding the log4shell vulnerabilities in the Log4j logging library. - log4shell/software at main · NCSC-NL/log4shell

github.com

there is a fix that was implemented.
If I stay up to date am I all good then?

Though it is good to fix it, if you don't have a web server or similar accessablity from the internet you won't be affected. This is a direct access exploit.

 

[Sinbad]

Though it is good to fix it, if you don't have a web server or similar accessablity from the internet you won't be affected. This is a direct access exploit.

Not necessarily. You could import a project that writes something dodgy to your log file and pwns your system.

But the fix is well known and effective

 

[biometrics]

Not necessarily. You could import a project that writes something dodgy to your log file and pwns your system.

But the fix is well known and effective

Pretty unlikely. But yes always good to apply patches.

 

[Nicholas]

4/10
Feeling kinda flat, but still better than on the last few daze.