[Starlingx-discuss] Is there Log4j security vulnerability in Starlingx 5.0?

[Khalil, Ghada]

Hi Jeremy,
Just to clarify, there is no java used in StarlingX.

Regards,
Ghada

-----Original Message-----
From: Waines, Greg <Greg.Waines at windriver.com> 
Sent: Thursday, January 06, 2022 1:56 PM
To: Jeremy Stanley <fungi at yuggoth.org>; starlingx-discuss at lists.starlingx.io
Subject: Re: [Starlingx-discuss] Is there Log4j security vulnerability in Starlingx 5.0?

Correct.

-----Original Message-----
From: Jeremy Stanley <fungi at yuggoth.org> 
Sent: Wednesday, January 5, 2022 10:26 AM
To: starlingx-discuss at lists.starlingx.io
Subject: Re: [Starlingx-discuss] Is there Log4j security vulnerability in Starlingx 5.0?

[Please note: This e-mail is from an EXTERNAL e-mail address]

On 2022-01-05 15:16:54 +0000 (+0000), Waines, Greg wrote:
> StarlingX is NOT impacted by log4j library security vulnerability.
[...]

Is that because an installation of StarlingX results in no Java-based software on the systems, or that the Java-based software installed does not use the Log4j library, or uses it but does not use vulnerable versions, or for some other reason? Thanks for the details!
--
Jeremy Stanley

_______________________________________________
Starlingx-discuss mailing list
Starlingx-discuss at lists.starlingx.io
http://lists.starlingx.io/cgi-bin/mailman/listinfo/starlingx-discuss