8 months on, US says Log4Shell will be around for “a decade or longer”