[Starlingx-discuss] Is there Log4j security vulnerability in Starlingx 5.0?

Jeremy Stanley fungi at yuggoth.org
Wed Jan 5 15:25:30 UTC 2022


On 2022-01-05 15:16:54 +0000 (+0000), Waines, Greg wrote:
> StarlingX is NOT impacted by log4j library security vulnerability.
[...]

Is that because an installation of StarlingX results in no
Java-based software on the systems, or that the Java-based software
installed does not use the Log4j library, or uses it but does not
use vulnerable versions, or for some other reason? Thanks for the
details!
-- 
Jeremy Stanley
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 963 bytes
Desc: not available
URL: <http://lists.starlingx.io/pipermail/starlingx-discuss/attachments/20220105/e3a95975/attachment.sig>


More information about the Starlingx-discuss mailing list