Skip to content

Commit c20a0d2

Browse files
committed
Fix some typos in log4j blog post
1 parent 3663e7d commit c20a0d2

File tree

1 file changed

+7
-7
lines changed

1 file changed

+7
-7
lines changed

_posts/2021-12-16-state-of-log4j-in-scala-ecosystem.md

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ For further technical guidance, see [Guidance for preventing, detecting, and hun
1313

1414
A project is affected by the log4j vulnerabilities if it contains a vulnerable version of a log4j artifact on its classpath.
1515

16-
You may find below a non-comprenhensive list of core Scala tools and libraries known to be affected by the vulnerability, and in which version (if any) it is addressed.
16+
You may find below a non-comprehensive list of core Scala tools and libraries known to be affected by the vulnerability, and in which version (if any) it is addressed.
1717

1818
We also give some useful tasks and settings to address the vulnerabilities in applications built with sbt, Mill or Maven.
1919

@@ -24,7 +24,7 @@ We also give some useful tasks and settings to address the vulnerabilities in ap
2424
The following information is provided AS IS, without any warranty of any kind, for your convenience.
2525
A proper security assessment of any CVE, including the log4j vulnerabilities, remains your sole responsibility.
2626

27-
### Affected tools and libraries with fix available
27+
### Affected tools and libraries with an available fix
2828

2929
The following core tools and libraries have versions affected by the log4j vulnerability, but have published newer versions with the appropriate patches.
3030
It is recommended that you upgrade to these versions as soon as possible.
@@ -38,28 +38,28 @@ If this is not possible, for libraries, see the tip below on how to force the de
3838
| sbt | 1.x < 1.5.7 | 1.5.7 |
3939

4040
Log4j is not enabled by default since sbt 1.4.0, but all users are recommended to upgrade to the latest fixed version.
41-
Any organization using sbt as part of CI/CD (continuous integration and delivery), automated publishing, and projects that expose TCP/IP entry point during testing may be most vulnerable to an exploit.
41+
Any organization using sbt as part of CI/CD (continuous integration and delivery), automated publishing, and projects that expose a TCP/IP entry point during testing may be most vulnerable to an exploit.
4242

4343
#### Libraries
4444

4545
| Organization | Artifact name | Fixed in version |
4646
|--------------|---------------|------------------|
4747
| TBD | | |
4848

49-
### Affected tools and libraries without known fix available
49+
### Affected tools and libraries without a known available fix
5050

5151
The following core tools and libraries are affected by the log4j vulnerability, and have not yet published an updated version with the appropriate patches.
5252
Consult the CVEs to use any other applicable mitigation that may apply in your case.
5353

54-
It may also be possible to force the dependency of log4j, as explained above.
54+
It may also be possible to force the dependency of log4j, as explained below.
5555

5656
| Organization | Artifact name |
5757
|--------------|---------------|
5858
| none known so far | |
5959

6060
## Useful sbt tasks and settings
6161

62-
If your application is built with sbt, which is common in the Scala ecosystem, here are some information on how to determine the classpath of your application, and how to force an upgrade of the log4j dependencies.
62+
If your application is built with sbt, which is common in the Scala ecosystem, here is some information on how to determine the classpath of your application, and how to force an upgrade of the log4j dependencies.
6363

6464
### `fullClasspath`
6565

@@ -152,7 +152,7 @@ $ mvn dependency:build-classpath
152152

153153
More information can be found [in this StackOverflow answer](https://stackoverflow.com/a/27451672/1829647).
154154

155-
Like in sbt, you can force an upgrade of transitivie dependencies of log4j using `<dependency>` entries:
155+
Like in sbt, you can force an upgrade of transitive dependencies of log4j using `<dependency>` entries:
156156

157157
```xml
158158
<dependency>

0 commit comments

Comments
 (0)