LoliKingdom/NukeJndiLookupFromLog4j

.

Droid-Hai opened this issue · 7 comments

The java app does exactly that, for the technical illiterate. That's all.

Ask away.

If you want to update to 2.15, that's possible, but you wouldn't need this tool. You'd just replace the 2.15 jar with your existing version's jar.

If you're using forge, you can use the forge mod instead.

You can use the tool to patch the vulnerability yes, the log4j jar should be in your libraries folder inside of your server folder.

The JndiLookup class needs removing in the log4j jar, yes. The tool does it for you.

You won't need to update anything, these libraries mojang uses hardly is updated, but if Mojang prompts an update, you can go ahead as the vulnerability is patched in new versions.