<div dir="ltr"><div id="gmail-magicdomid225" class="gmail-ace-line">Good afternoon everyone,</div><div class="gmail-ace-line"><br></div><div class="gmail-ace-line">French version below, version Française ci-dessous.<br></div><div id="gmail-magicdomid233" class="gmail-ace-line"><br></div><div id="gmail-magicdomid547" class="gmail-ace-line"><span class="gmail-author-a-z89zhz81zz89zz90zal6z68zz79zvz85z5z73ztf">Last Friday 10th December, a security issue has been discovered in Apache Log4j. It has been quickly declared as critical.</span><span class="gmail-author-a-tz89z8yz76zihcz71z7z75zz90zhz84zz76zz69z"> Many s</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">oftware programs</span><span class="gmail-author-a-tz89z8yz76zihcz71z7z75zz90zhz84zz76zz69z"> suffered f</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">rom</span><span class="gmail-author-a-tz89z8yz76zihcz71z7z75zz90zhz84zz76zz69z"> this issue.</span></div><div id="gmail-magicdomid178" class="gmail-ace-line"><br></div><div id="gmail-magicdomid932" class="gmail-ace-line"><span class="gmail-author-a-z89zhz81zz89zz90zal6z68zz79zvz85z5z73ztf">L</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">izmap is unaffected by the </span><span class="gmail-author-a-z89zhz81zz89zz90zal6z68zz79zvz85z5z73ztf">L</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">og4j security issue. </span><span class="gmail-author-a-tz89z8yz76zihcz71z7z75zz90zhz84zz76zz69z">It</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z"> is buil</span><span class="gmail-author-a-tz89z8yz76zihcz71z7z75zz90zhz84zz76zz69z">t</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z"> </span><span class="gmail-author-a-tz89z8yz76zihcz71z7z75zz90zhz84zz76zz69z">with</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z"> PHP and </span><span class="gmail-author-a-z89zhz81zz89zz90zal6z68zz79zvz85z5z73ztf">J</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">ava</span><span class="gmail-author-a-z89zhz81zz89zz90zal6z68zz79zvz85z5z73ztf">s</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">cript. Our backend is based on </span><span class="gmail-author-a-z89zhz81zz89zz90zal6z68zz79zvz85z5z73ztf">P</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">ostgre</span><span class="gmail-author-a-z89zhz81zz89zz90zal6z68zz79zvz85z5z73ztf">SQL</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">[2] and </span><span class="gmail-author-a-z89zhz81zz89zz90zal6z68zz79zvz85z5z73ztf">QGIS</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">[3]. Both of these projects are build in C/C++ and are unaffected by </span><span class="gmail-author-a-gz88zz72zz69zx2kz70z8hz122zs0fz66zz69z">L</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">og4j's exploit.</span></div><div id="gmail-magicdomid438" class="gmail-ace-line"><br></div><div id="gmail-magicdomid518" class="gmail-ace-line"><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">Log4j is a JAVA based library that is not used in any of our products (</span><span class="gmail-author-a-z89zhz81zz89zz90zal6z68zz79zvz85z5z73ztf">Lizmap </span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">modules,</span><span class="gmail-author-a-z89zhz81zz89zz90zal6z68zz79zvz85z5z73ztf"> QGIS</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z"> plugins and of course </span><span class="gmail-author-a-z89zhz81zz89zz90zal6z68zz79zvz85z5z73ztf">L</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">izmap</span><span class="gmail-author-a-z89zhz81zz89zz90zal6z68zz79zvz85z5z73ztf"> or any side projects</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">).</span></div><div id="gmail-magicdomid163" class="gmail-ace-line"><br></div><div id="gmail-magicdomid541" class="gmail-ace-line"><span class="gmail-author-a-z89zhz81zz89zz90zal6z68zz79zvz85z5z73ztf">The 3Liz team</span></div><div id="gmail-magicdomid60" class="gmail-ace-line"><br></div><div class="gmail-ace-line">--------<br></div><div class="gmail-ace-line"><br></div><div class="gmail-ace-line">Bonjour,<br></div><div id="gmail-magicdomid718" class="gmail-ace-line"><br></div><div id="gmail-magicdomid928" class="gmail-ace-line"><span class="gmail-author-a-tz89z8yz76zihcz71z7z75zz90zhz84zz76zz69z">Le 10 décembre dernier, un</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">e</span><span class="gmail-author-a-tz89z8yz76zihcz71z7z75zz90zhz84zz76zz69z"> </span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">faille</span><span class="gmail-author-a-tz89z8yz76zihcz71z7z75zz90zhz84zz76zz69z"> de sécurité a été découvert</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">e</span><span class="gmail-author-a-tz89z8yz76zihcz71z7z75zz90zhz84zz76zz69z">
dans le logiciel Apache Log4j, utilisé majoritairement dans des
applications développées en JAVA. Ce trou de sécurité a été déclaré très
critique</span><span class="gmail-author-a-z89zhz81zz89zz90zal6z68zz79zvz85z5z73ztf">. B</span><span class="gmail-author-a-tz89z8yz76zihcz71z7z75zz90zhz84zz76zz69z">eaucoup de </span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">logiciels open source sont affectés.</span></div><div id="gmail-magicdomid916" class="gmail-ace-line"><br></div><div id="gmail-magicdomid930" class="gmail-ace-line"><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">Lizmap, les modules </span><span class="gmail-author-a-z89zhz81zz89zz90zal6z68zz79zvz85z5z73ztf">L</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">izmap et les plugins QGIS n'utilisent pas </span><span class="gmail-author-a-gz88zz72zz69zx2kz70z8hz122zs0fz66zz69z">J</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">ava ni </span><span class="gmail-author-a-gz88zz72zz69zx2kz70z8hz122zs0fz66zz69z">L</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">og4J. Q</span><span class="gmail-author-a-z89zhz81zz89zz90zal6z68zz79zvz85z5z73ztf">GIS</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z"> et </span><span class="gmail-author-a-z89zhz81zz89zz90zal6z68zz79zvz85z5z73ztf">P</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">ostgre</span><span class="gmail-author-a-z89zhz81zz89zz90zal6z68zz79zvz85z5z73ztf">SQL,</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z"> les d</span><span class="gmail-author-a-z89zhz81zz89zz90zal6z68zz79zvz85z5z73ztf">e</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">ux autres composant</span><span class="gmail-author-a-z89zhz81zz89zz90zal6z68zz79zvz85z5z73ztf">s</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z"> de la pile logiciel de </span><span class="gmail-author-a-z89zhz81zz89zz90zal6z68zz79zvz85z5z73ztf">L</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">izmap </span><span class="gmail-author-a-z89zhz81zz89zz90zal6z68zz79zvz85z5z73ztf">W</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">eb</span><span class="gmail-author-a-z89zhz81zz89zz90zal6z68zz79zvz85z5z73ztf"> C</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">lient, ne sont pas plus affecté car </span><span class="gmail-author-a-z89zhz81zz89zz90zal6z68zz79zvz85z5z73ztf">é</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">crit en </span><span class="gmail-author-a-z89zhz81zz89zz90zal6z68zz79zvz85z5z73ztf">C</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">/</span><span class="gmail-author-a-z89zhz81zz89zz90zal6z68zz79zvz85z5z73ztf">C</span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">++.</span></div><div id="gmail-magicdomid872" class="gmail-ace-line"><br></div><div id="gmail-magicdomid877" class="gmail-ace-line"><span class="gmail-author-a-z89zhz81zz89zz90zal6z68zz79zvz85z5z73ztf">L'équipe 3Liz</span></div><div id="gmail-magicdomid693" class="gmail-ace-line"><br></div><div id="gmail-magicdomid829" class="gmail-ace-line"><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">1. </span><span class="gmail-author-a-z89zhz81zz89zz90zal6z68zz79zvz85z5z73ztf gmail-url"><a href="https://jelix.org" rel="noreferrer noopener">https://jelix.org</a></span></div><div id="gmail-magicdomid830" class="gmail-ace-line"><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">2. </span><span class="gmail-author-a-z89zhz81zz89zz90zal6z68zz79zvz85z5z73ztf gmail-url"><a href="https://www.postgresql.org" rel="noreferrer noopener">https://www.postgresql.org</a></span></div><div id="gmail-magicdomid831" class="gmail-ace-line"><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z">3. </span><span class="gmail-author-a-z89zhz81zz89zz90zal6z68zz79zvz85z5z73ztf gmail-url"><a href="https://qgis.org" rel="noreferrer noopener">https://</a></span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z gmail-url"><a href="https://qgis.org" rel="noreferrer noopener">qgis.org</a></span><span class="gmail-author-a-z84zfz68zz82z43ekdz65zxtv2z65zz82z"> </span></div><div id="gmail-magicdomid875" class="gmail-ace-line"><br></div>-- <br><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><p> <span style="font-weight:bold;color:rgb(154,205,50)">Etienne Trimaille</span>
<br>Ingénieur géomaticien <br>
<a href="http://www.3liz.com" style="text-decoration:none;color:rgb(154,205,50)" target="_blank">www.3liz.com</a> <br>
</p><p><span style="font-size:0.8em"> +33 6 12 93 11 39<br></span></p><p><span style="font-size:0.8em">
<br>
<b>Siège social</b> <br>
73, allée Kleber <br>
Boulevard de Strasbourg <br>
34000 Montpellier </span>
</p></div></div></div></div></div></div></div>