Log4j (English Wikipedia)

"Apache Log4j 1.2 Release History". apache.org. Apache Software Foundation. Retrieved September 2, 2014.
"Release Notes - Log4j". logging.apache.org. Retrieved October 9, 2023.
"Log4j 2 Guide - Apache Log4j 2". Logging.apache.org. July 12, 2014. Retrieved July 24, 2014.
"Log4j 2 Guide - Apache Log4j 2: News". Logging.apache.org. July 12, 2014. Retrieved July 24, 2014.
"Log4j – Overview - Apache Log4j 2". logging.apache.org. June 5, 2016. Retrieved July 3, 2016.
"Log4j 2 Asynchronous Loggers for Low-Latency Logging - Apache Log4j 2". Logging.apache.org. July 12, 2014. Retrieved July 24, 2014.
"Level (Apache Log4j 1.2.17 API)". Logging.apache.org. June 9, 2012. Retrieved July 24, 2014.
"Custom Log Levels". Logging.apache.org. July 12, 2014. Retrieved July 16, 2016.
"Configuration". Logging.apache.org. July 5, 2016. Retrieved July 16, 2016.
"Architecture". Logging.apache.org. July 5, 2016. Retrieved July 16, 2016.
"Appenders". Logging.apache.org. July 5, 2016. Retrieved July 16, 2016.
"Layouts". Logging.apache.org. July 5, 2016. Retrieved July 16, 2016.
"Filters". Logging.apache.org. July 5, 2016. Retrieved July 16, 2016.
"TTCCLayout (Apache Log4j 1.2.17 API)". Logging.apache.org. June 9, 2012. Retrieved July 24, 2014.
"MDC (Apache Log4j 1.2.17 API)". Logging.apache.org. June 9, 2012. Retrieved July 24, 2014.
"Apache log4net". Logging.apache.org. Retrieved December 11, 2021.
"Apache Logging Services". Apache.org. Retrieved March 11, 2015.
"log4cxx - Changelog". logging.apache.org.
"Apache Log4j Security Vulnerabilities". December 6, 2021.

issues.apache.org

"LOG4J2-3208: Disable JNDI by default". December 11, 2021. Retrieved December 14, 2021.
"LOG4J2-3211: Remove support for Lookups in messages". December 13, 2021. Retrieved December 14, 2021.

blogs.apache.org

"Apache Logging Services Project Announces Log4j 1 End-Of-Life; Recommends Upgrade to Log4j 2". blogs.apache.org. August 5, 2015. Retrieved July 3, 2016.

people.apache.org

"Class NDC". Archived from the original on August 20, 2007. Retrieved December 11, 2021.

archive.today

"Log4r Manual". log4r.rubyforge.org. Archived from the original on December 25, 2012. Retrieved April 13, 2017.

arstechnica.com

Goodin, Dan (December 9, 2021). "Zeroday in ubiquitous Log4j tool poses a grave threat to the Internet". Ars Technica. Retrieved December 10, 2021.

bund.de

bsi.bund.de

"Warnstufe Rot: Schwachstelle Log4Shell führt zu extrem kritischer Bedrohungslage" [Red alarm: Log4Shell vulnerability causes extremely critical threat situation]. BSI press service (in German). December 12, 2021.

cisa.gov

"Statement from CISA Director Easterly on "Log4j" Vulnerability". CISA. Washington. December 11, 2021.

cyber.gc.ca

"Statement from the Minister of National Defence on Apache Vulnerability and Call to Canadian Organizations to Take Urgent Action". Government of Canada. December 12, 2021. Archived from the original on December 20, 2021. Retrieved December 12, 2021.

cyberkendra.com

"Worst Apache Log4j RCE Zero day Dropped on Internet". Cyber Kendra. December 9, 2021. Retrieved December 10, 2021.

doi.org

Gerhards, R. (March 1, 2009). "RFC 5424 - The Syslog Protocol". tools.ietf.org. doi:10.17487/RFC5424. Retrieved July 16, 2016. {{cite journal}}: Cite journal requires |journal= (help)

github.com

"Release 2.24.3". December 13, 2024. Retrieved December 26, 2024.
"stritti/Log4js - The Logging Framework for JavaScript with no runtime dependencies". GitHub. Retrieved December 11, 2021.
"tmuth/Logger-A-PL-SQL-Logging-Utility — GitHub". Github.com. Retrieved July 24, 2014.
"LOG4J2-3198: Log4j2 no longer formats lookups in messages by default". GitHub. December 5, 2021.
"Restrict LDAP access via JNDI by rgoers · Pull Request #608 · apache/logging-log4j2". GitHub. 30 November–5 December 2021

graylog.org

docs.graylog.org

"GELF". docs.graylog.org. June 8, 2016. Archived from the original on February 9, 2020. Retrieved July 16, 2016.

grobmeier.de

"The new log4j 2.0". Grobmeier.de. December 5, 2012. Retrieved July 24, 2014.

ietf.org

tools.ietf.org

Gerhards, R. (March 1, 2009). "RFC 5424 - The Syslog Protocol". tools.ietf.org. doi:10.17487/RFC5424. Retrieved July 16, 2016. {{cite journal}}: Cite journal requires |journal= (help)

jsnlog.com

"Logging JavaScript errors to your server side log". JSNLog. Retrieved December 11, 2021.

lawfaremedia.org

"What's the Deal with the Log4Shell Security Nightmare?". Lawfare. December 10, 2021.

lmax-exchange.github.io

"Disruptor by LMAX-Exchange". Lmax-exchange.github.io. Retrieved July 24, 2014.

log4javascript.org

"a JavaScript logging framework". log4javascript. Retrieved December 11, 2021.

minecraft.net

help.minecraft.net

"Security Vulnerability in Minecraft: Java Edition". Minecraft. December 10, 2021.

mschilli.github.io

Schilli, Mike; Goess, Kevin. "log4perl - log4j for Perl". log4perl. Retrieved December 11, 2021.

oracle.com

docs.oracle.com

"RandomAccessFile". docs.oracle.com. July 28, 2011. Retrieved July 16, 2016.

pcmag.com

Mott, Nathaniel (December 10, 2021). "Countless Servers Are Vulnerable to Apache Log4j Zero-Day Exploit". PC Magazine. Retrieved December 10, 2021.

qos.ch

reload4j.qos.ch

"Reload4j Home". reload4j.qos.ch. Retrieved January 12, 2022.
"Reload4j Project; Easy migration from log4j 1.2.x". qos.ch. January 12, 2022. Retrieved January 12, 2022.

logback.qos.ch

"Logback Home". Logback.qos.ch. Retrieved July 24, 2014.

ralphgoers.com

Goers, Ralph (December 15, 2019). "Why was Log4j 2 created?". Ralph Goers.

rubyforge.org

log4r.rubyforge.org

"Log4r Manual". log4r.rubyforge.org. Archived from the original on December 25, 2012. Retrieved April 13, 2017.

sonatype.com

blog.sonatype.com

Grigg, Kadi (February 4, 2022). "Wicked Good Development - Cybersecurity Experts Talk Log4J, Open Source and More". blog.sonatype.com. Retrieved August 16, 2022.

sourceforge.net

"Logging Framework for C | Free System Administration software downloads at". Sourceforge.net. Retrieved July 24, 2014.

tagesschau.de

"BSI warnt vor Sicherheitslücke" [BSI warns of security vulnerabilities]. Tagesschau (in German). December 12, 2021.

theguardian.com

"Recently uncovered software flaw 'most critical vulnerability of the last decade'". the Guardian. Associated Press. December 11, 2021.

web.archive.org

"GELF". docs.graylog.org. June 8, 2016. Archived from the original on February 9, 2020. Retrieved July 16, 2016.
"Class NDC". Archived from the original on August 20, 2007. Retrieved December 11, 2021.
"Statement from the Minister of National Defence on Apache Vulnerability and Call to Canadian Organizations to Take Urgent Action". Government of Canada. December 12, 2021. Archived from the original on December 20, 2021. Retrieved December 12, 2021.

wired.com

Newman, Lily Hay (December 10, 2021). "The Internet Is on Fire". Wired – via www.wired.com.