[DRBD-announce] Linstor and log4j

Gábor Hernádi gabor.hernadi at linbit.com
Wed Dec 15 09:29:11 CET 2021


Hello!

As we received a few questions regarding the recently discovered security
issues with log4j, we want to clarify that Linstor is *not* using log4j but
logback as a logging framework.
Linstor is therefore NOT vulnerable for security issues in the log4j
library.

Linstor is open source and is using Gradle to manage its dependencies.
Linstor's dependencies can be found via GitHub[1]

[1] https://github.com/LINBIT/linstor-server/blob/master/build.gradle

Best regards,
Gabor
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.linbit.com/pipermail/drbd-announce/attachments/20211215/c5006b4d/attachment.htm>


More information about the drbd-announce mailing list