Frans J Elliott

I also have noticed this vulnerability. My employer has made a pretty big deal about this, and all the software devs have to scan their computers (and any other computers/servers...

Unfortunately, as long as the old version of the log4j package shows up in the scan tool, it's a problem. It's a company politics thing, and the IT Information Security...

I just noticed that if I reclone the YouCompleteMe repository and then run install.py without the --java-completer flag that dependency won't be checked out. This is good enough for me...

+1 Mainly interested in the ability to validate ACM certificates cross-account.