[Qgis-psc] Log4J and QGIS

Marco Bernasocchi marco at qgis.org
Tue Dec 14 08:39:16 PST 2021


Thanks Anita, yes we absolutely should communicate that.

cheers Marco

On Tue, 14 Dec 2021, 11:30 Anita Graser, <anitagraser at gmx.at> wrote:

> Dear Matthias,
>
> Thanks for raising this. I took the liberty to answer the GIS.SE
> question using a statement from Jürgen :)
>
> I can also publish a blog post later today.
>
> Regards,
>
> Anita
>
>
> On 14.12.2021 11:25, Matthias Kuhn wrote:
> > Hi PSC,
> >
> > I have had several requests for QGIS being affected by the current
> > Log4J vulnerability in the last hours.
> >
> > To the best of my knowledge, QGIS is not affected in any way by this
> > vulnerability, this is also visible through the package list on
> > http://download.osgeo.org/osgeo4w/x86_64/versions.html .
> >
> > After discovering the following question on StackExchange, I wonder if
> > it would be worth adding a (short) statement on the qgis blog or
> > another communication channel.
> >
> https://gis.stackexchange.com/questions/418836/log4j-bug-handling-in-different-gis-systems
> >
> > Best regards
> > Matthias
> >
> > _______________________________________________
> > Qgis-psc mailing list
> > Qgis-psc at lists.osgeo.org
> > https://lists.osgeo.org/mailman/listinfo/qgis-psc
> _______________________________________________
> Qgis-psc mailing list
> Qgis-psc at lists.osgeo.org
> https://lists.osgeo.org/mailman/listinfo/qgis-psc
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/qgis-psc/attachments/20211214/9a9e72da/attachment.html>


More information about the Qgis-psc mailing list