[DRBD-announce] Linstor and log4j

Gábor Hernádi <[email protected]> Wed, 15 Dec 2021 09:29:11 +0100
Newsgroups dev.linux.lists.drbd-announce
Message-ID <CAL16tNa+BNQ_FmPcoEJnN=ubYztp6X2ebCHoQRE2m8K93D3SUQ@mail.gmail.com>
Hello!

As we received a few questions regarding the recently discovered security
issues with log4j, we want to clarify that Linstor is *not* using log4j but
logback as a logging framework.
Linstor is therefore NOT vulnerable for security issues in the log4j
library.

Linstor is open source and is using Gradle to manage its dependencies.
Linstor's dependencies can be found via GitHub[1]

[1] https://github.com/LINBIT/linstor-server/blob/master/build.gradle

Best regards,
Gabor