{"id":8564,"date":"2021-12-16T08:56:10","date_gmt":"2021-12-16T13:56:10","guid":{"rendered":"https:\/\/www.redline13.com\/blog\/?p=8556"},"modified":"2021-12-22T19:33:06","modified_gmt":"2021-12-23T00:33:06","slug":"log4j-and-redline13","status":"publish","type":"post","link":"https:\/\/www.redline13.com\/blog\/2021\/12\/log4j-and-redline13\/","title":{"rendered":"Log4j and RedLine13"},"content":{"rendered":"\n
\"Log4j<\/figure><\/div>\n\n\n\n

A zero-day vulnerability was uncovered in the ubiquitous Log4j library.  This dependency is used for event logging purposes (as its name suggests).  However, the vulnerability allows for remote access and code execution on affected machines.  The fix is to use an updated version of this library (2.15.0 or higher) which prevents this.<\/p>\n\n\n\n

We conducted an internal code review at RedLine13 and we do not use Log4j <\/a>(or related dependencies like Log4php) directly within our systems.  JMeter<\/a> does however use Log4j and thus any server running JMeter is potentially at risk.<\/p>\n\n\n\n

We have addressed this in the builds for the various versions of JMeter which we support, by directly updating for this dependency.  There is a useful article on CloudFare<\/a> that describes several effective mitigation strategies.  When the Apache Software Foundation<\/a> releases an \u201cofficial\u201d update to JMeter that addresses the Log4j vulnerability, we will include that build.<\/p>\n\n\n\n

The Log4j issue represents a \u201czero-day\u201d vulnerability.  Something that we make available to all JMeter tests is the ability to use the \u201cNightly\u201d build<\/a>.  This binary is updated daily, and often will have fixes for issues like this available much sooner than in official releases.  This feature was applicable in this case within hours of announcement of the Log4j issue, though using the standard 5.4.1 release from RedLine13 is now preferable because of the above changes we have applied to our JMeter builds.<\/p>\n\n\n\n

RedLine13 offers a full-featured free trial that you can sign up<\/a> for and start testing today.
<\/p>\n","protected":false},"excerpt":{"rendered":"

A zero-day vulnerability was uncovered in the ubiquitous Log4j library.  This dependency is used for event logging purposes (as its name suggests).  However, the vulnerability allows for remote access and code execution on affected machines.  The fix is to use an updated version of this library (2.15.0 or higher) which prevents this. We conducted an internal code review at RedLine13 and we do not use Log4j (or related dependencies like Log4php) directly within our systems.  JMeter does however use Log4j and thusRead More →<\/a><\/p>\n","protected":false},"author":11,"featured_media":8579,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[283,565],"class_list":{"0":"entry","1":"post","2":"publish","3":"author-dkoziel","4":"post-8564","6":"format-standard","7":"has-post-thumbnail","8":"category-blog","9":"post_tag-jmeter","10":"post_tag-log4j"},"yoast_head":"\nLog4j and What You Should Know - RedLine13<\/title>\n<meta name=\"description\" content=\"Log4j and RedLine13 - We conducted an internal code review at RedLine13 and we do not use Log4j. JMeter does. We list what you should do.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.redline13.com\/blog\/2021\/12\/log4j-and-redline13\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Log4j and What You Should Know - RedLine13\" \/>\n<meta property=\"og:description\" content=\"Log4j and RedLine13 - We conducted an internal code review at RedLine13 and we do not use Log4j. JMeter does. We list what you should do.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.redline13.com\/blog\/2021\/12\/log4j-and-redline13\/\" \/>\n<meta property=\"og:site_name\" content=\"RedLine13\" \/>\n<meta property=\"article:published_time\" content=\"2021-12-16T13:56:10+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-12-23T00:33:06+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.redline13.com\/blog\/wp-content\/uploads\/2021\/12\/log4j-1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"507\" \/>\n\t<meta property=\"og:image:height\" content=\"206\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"David Koziel\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"David Koziel\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.redline13.com\/blog\/2021\/12\/log4j-and-redline13\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.redline13.com\/blog\/2021\/12\/log4j-and-redline13\/\"},\"author\":{\"name\":\"David Koziel\",\"@id\":\"https:\/\/www.redline13.com\/blog\/#\/schema\/person\/51d282221e3230ab35f964f98ada9b20\"},\"headline\":\"Log4j and RedLine13\",\"datePublished\":\"2021-12-16T13:56:10+00:00\",\"dateModified\":\"2021-12-23T00:33:06+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.redline13.com\/blog\/2021\/12\/log4j-and-redline13\/\"},\"wordCount\":280,\"publisher\":{\"@id\":\"https:\/\/www.redline13.com\/blog\/#organization\"},\"keywords\":[\"JMeter\",\"log4j\"],\"articleSection\":[\"Blog\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.redline13.com\/blog\/2021\/12\/log4j-and-redline13\/\",\"url\":\"https:\/\/www.redline13.com\/blog\/2021\/12\/log4j-and-redline13\/\",\"name\":\"Log4j and What You Should Know - RedLine13\",\"isPartOf\":{\"@id\":\"https:\/\/www.redline13.com\/blog\/#website\"},\"datePublished\":\"2021-12-16T13:56:10+00:00\",\"dateModified\":\"2021-12-23T00:33:06+00:00\",\"description\":\"Log4j and RedLine13 - We conducted an internal code review at RedLine13 and we do not use Log4j. JMeter does. We list what you should do.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.redline13.com\/blog\/2021\/12\/log4j-and-redline13\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.redline13.com\/blog\/2021\/12\/log4j-and-redline13\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.redline13.com\/blog\/2021\/12\/log4j-and-redline13\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.redline13.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Log4j and RedLine13\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.redline13.com\/blog\/#website\",\"url\":\"https:\/\/www.redline13.com\/blog\/\",\"name\":\"RedLine13\",\"description\":\"(Almost) Free Load Testing in the Cloud\",\"publisher\":{\"@id\":\"https:\/\/www.redline13.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.redline13.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.redline13.com\/blog\/#organization\",\"name\":\"RedLine13\",\"url\":\"https:\/\/www.redline13.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.redline13.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.redline13.com\/blog\/wp-content\/uploads\/2013\/06\/cropped-rl13-header-logo.jpg\",\"contentUrl\":\"https:\/\/www.redline13.com\/blog\/wp-content\/uploads\/2013\/06\/cropped-rl13-header-logo.jpg\",\"width\":300,\"height\":68,\"caption\":\"RedLine13\"},\"image\":{\"@id\":\"https:\/\/www.redline13.com\/blog\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.redline13.com\/blog\/#\/schema\/person\/51d282221e3230ab35f964f98ada9b20\",\"name\":\"David Koziel\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.redline13.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/2babf644e0993fc86893c24d7525f1e3be114a8746c01249797f25587ae1697a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/2babf644e0993fc86893c24d7525f1e3be114a8746c01249797f25587ae1697a?s=96&d=mm&r=g\",\"caption\":\"David Koziel\"},\"url\":\"https:\/\/www.redline13.com\/blog\/author\/dkoziel\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Log4j and What You Should Know - RedLine13","description":"Log4j and RedLine13 - We conducted an internal code review at RedLine13 and we do not use Log4j. JMeter does. We list what you should do.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.redline13.com\/blog\/2021\/12\/log4j-and-redline13\/","og_locale":"en_US","og_type":"article","og_title":"Log4j and What You Should Know - RedLine13","og_description":"Log4j and RedLine13 - We conducted an internal code review at RedLine13 and we do not use Log4j. JMeter does. We list what you should do.","og_url":"https:\/\/www.redline13.com\/blog\/2021\/12\/log4j-and-redline13\/","og_site_name":"RedLine13","article_published_time":"2021-12-16T13:56:10+00:00","article_modified_time":"2021-12-23T00:33:06+00:00","og_image":[{"width":507,"height":206,"url":"https:\/\/www.redline13.com\/blog\/wp-content\/uploads\/2021\/12\/log4j-1.png","type":"image\/png"}],"author":"David Koziel","twitter_card":"summary_large_image","twitter_misc":{"Written by":"David Koziel","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.redline13.com\/blog\/2021\/12\/log4j-and-redline13\/#article","isPartOf":{"@id":"https:\/\/www.redline13.com\/blog\/2021\/12\/log4j-and-redline13\/"},"author":{"name":"David Koziel","@id":"https:\/\/www.redline13.com\/blog\/#\/schema\/person\/51d282221e3230ab35f964f98ada9b20"},"headline":"Log4j and RedLine13","datePublished":"2021-12-16T13:56:10+00:00","dateModified":"2021-12-23T00:33:06+00:00","mainEntityOfPage":{"@id":"https:\/\/www.redline13.com\/blog\/2021\/12\/log4j-and-redline13\/"},"wordCount":280,"publisher":{"@id":"https:\/\/www.redline13.com\/blog\/#organization"},"keywords":["JMeter","log4j"],"articleSection":["Blog"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.redline13.com\/blog\/2021\/12\/log4j-and-redline13\/","url":"https:\/\/www.redline13.com\/blog\/2021\/12\/log4j-and-redline13\/","name":"Log4j and What You Should Know - RedLine13","isPartOf":{"@id":"https:\/\/www.redline13.com\/blog\/#website"},"datePublished":"2021-12-16T13:56:10+00:00","dateModified":"2021-12-23T00:33:06+00:00","description":"Log4j and RedLine13 - We conducted an internal code review at RedLine13 and we do not use Log4j. JMeter does. We list what you should do.","breadcrumb":{"@id":"https:\/\/www.redline13.com\/blog\/2021\/12\/log4j-and-redline13\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.redline13.com\/blog\/2021\/12\/log4j-and-redline13\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.redline13.com\/blog\/2021\/12\/log4j-and-redline13\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.redline13.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Log4j and RedLine13"}]},{"@type":"WebSite","@id":"https:\/\/www.redline13.com\/blog\/#website","url":"https:\/\/www.redline13.com\/blog\/","name":"RedLine13","description":"(Almost) Free Load Testing in the Cloud","publisher":{"@id":"https:\/\/www.redline13.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.redline13.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.redline13.com\/blog\/#organization","name":"RedLine13","url":"https:\/\/www.redline13.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.redline13.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.redline13.com\/blog\/wp-content\/uploads\/2013\/06\/cropped-rl13-header-logo.jpg","contentUrl":"https:\/\/www.redline13.com\/blog\/wp-content\/uploads\/2013\/06\/cropped-rl13-header-logo.jpg","width":300,"height":68,"caption":"RedLine13"},"image":{"@id":"https:\/\/www.redline13.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.redline13.com\/blog\/#\/schema\/person\/51d282221e3230ab35f964f98ada9b20","name":"David Koziel","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.redline13.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/2babf644e0993fc86893c24d7525f1e3be114a8746c01249797f25587ae1697a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2babf644e0993fc86893c24d7525f1e3be114a8746c01249797f25587ae1697a?s=96&d=mm&r=g","caption":"David Koziel"},"url":"https:\/\/www.redline13.com\/blog\/author\/dkoziel\/"}]}},"_links":{"self":[{"href":"https:\/\/www.redline13.com\/blog\/wp-json\/wp\/v2\/posts\/8564","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.redline13.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.redline13.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.redline13.com\/blog\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/www.redline13.com\/blog\/wp-json\/wp\/v2\/comments?post=8564"}],"version-history":[{"count":1,"href":"https:\/\/www.redline13.com\/blog\/wp-json\/wp\/v2\/posts\/8564\/revisions"}],"predecessor-version":[{"id":8580,"href":"https:\/\/www.redline13.com\/blog\/wp-json\/wp\/v2\/posts\/8564\/revisions\/8580"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.redline13.com\/blog\/wp-json\/wp\/v2\/media\/8579"}],"wp:attachment":[{"href":"https:\/\/www.redline13.com\/blog\/wp-json\/wp\/v2\/media?parent=8564"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.redline13.com\/blog\/wp-json\/wp\/v2\/categories?post=8564"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.redline13.com\/blog\/wp-json\/wp\/v2\/tags?post=8564"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}