2 ms·
It's in that verge article; "The summit will also include the Apache Software Foundation — the owner and maintainer of the Log4j library — and Oracle, owner of
by mikeyouse 5y ago
It's in that verge article;
"The summit will also include the Apache Software Foundation — the owner and maintainer of the Log4j library — and Oracle, owner of the Java software platform on which the Log4j library runs. GitHub and the Linux Open Source Foundation will also be represented."
Which makes sense -- they host the Open Source Security Foundation (https://openssf.org/ https://openssf.org/) which is meant to be working on exactly this type of problem.