[DRBD-announce] Linstor and log4j
Gábor Hernádi <[email protected]> Wed, 15 Dec 2021 09:29:11 +0100
| Newsgroups | dev.linux.lists.drbd-announce |
|---|---|
| Message-ID | <CAL16tNa+BNQ_FmPcoEJnN=ubYztp6X2ebCHoQRE2m8K93D3SUQ@mail.gmail.com> |
Hello! As we received a few questions regarding the recently discovered security issues with log4j, we want to clarify that Linstor is *not* using log4j but logback as a logging framework. Linstor is therefore NOT vulnerable for security issues in the log4j library. Linstor is open source and is using Gradle to manage its dependencies. Linstor's dependencies can be found via GitHub[1] [1] https://github.com/LINBIT/linstor-server/blob/master/build.gradle Best regards, Gabor