[haiku-sysadmin] HDS and Log4J Vulnerability

  • From: "Andrew Lindesay" <apl@xxxxxxxxxxxxxx>
  • To: haiku-sysadmin@xxxxxxxxxxxxx
  • Date: Fri, 10 Dec 2021 22:20:50 +1300

Hello;

You may be aware of this [1] vulnerability around Java tech that has recently 
been discovered.  I have had a look and believe that HDS should be unaffected 
because is it not using `log4j` and is also using a version of the JVM that is 
not impacted.

Regards

[1] https://www.lunasec.io/docs/blog/log4j-zero-day/

-- 
Andrew Lindesay

Other related posts: