Documents and interviews reveal Apache developers' efforts to patch the Log4j flaw, after they were alerted about the flaw on Nov. 24 by an employee a