6 Jan
2022
6 Jan
'22
11:56 p.m.
Correct. -----Original Message----- From: Jeremy Stanley <fungi@yuggoth.org> Sent: Wednesday, January 5, 2022 10:26 AM To: starlingx-discuss@lists.starlingx.io Subject: Re: [Starlingx-discuss] Is there Log4j security vulnerability in Starlingx 5.0? [Please note: This e-mail is from an EXTERNAL e-mail address] On 2022-01-05 15:16:54 +0000 (+0000), Waines, Greg wrote:
StarlingX is NOT impacted by log4j library security vulnerability. [...]
Is that because an installation of StarlingX results in no Java-based software on the systems, or that the Java-based software installed does not use the Log4j library, or uses it but does not use vulnerable versions, or for some other reason? Thanks for the details! -- Jeremy Stanley