Modernize or Die® - CFML News for December 14th, 2021 - Episode 128

<p><strong>2021-12-14 Weekly News - Episode 128</strong></p><p>Watch the video version on YouTube at <a href="https://youtu.be/_GrDec5PVwg">https://youtu.be/_GrDec5PVwg</a> </p><p><em>Hosts:<br></em> <br>Gavin Pickin - Senior Developer for Ortus Solutions<br>Dan Card  - Software Developer for Ortus Solutions</p><p><br><em>Thanks to our Sponsor - Ortus Solutions</em></p><p>The makers of ColdBox, CommandBox, ForgeBox, TestBox and almost every other Box out there. <br>A few ways  to say thanks back to Ortus Solutions:</p><ul> <li>Like and subscribe to our videos on YouTube. </li> <li>Subscribe to our Podcast on your Podcast Apps and leave us a review</li> <li>Sign up for a free or paid account on CFCasts, which is releasing new content every week</li> <li>Buy Ortus’s new Book - 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (<a href="http://gum.co/coldbox-tips">http://gum.co/coldbox-tips</a>)</li> </ul><p><br><em>Patreon Support<br></em><br>We have 37 patreons providing 97% of the funding for our Modernize or Die Podcasts via our Patreon site: <a href="https://www.patreon.com/ortussolutions">https://www.patreon.com/ortussolutions</a>. </p><p><strong>News and Events</strong></p><p><em>New Host - Dan Card</em></p><p>Dan introduces himself and gives a quick run down of his CFML experience.<em><br></em></p><p>Log4j Vulnerability Reported</p><p>There is a critical security vulnerability (CVE-2021-44228 aka Log4Shell) in the java library log4j which is a popular logging library for java applications. It is included in both Adobe ColdFusion and Lucee for example.<br>Putting together some info to help sort this issue out as it pertains to ColdFusion and Lucee users. I'll update this entry as needed.<br><a href="https://www.petefreitag.com/item/923.cfm">https://www.petefreitag.com/item/923.cfm</a> </p><p>Adobe’s update on the matter (thanks charlie for pointing this out)<br>Blog - <a href="https://coldfusion.adobe.com/2021/12/update-log4j-vulnerability/">https://coldfusion.adobe.com/2021/12/update-log4j-vulnerabi