From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from omta002.cacentral1.a.cloudfilter.net (omta002.cacentral1.a.cloudfilter.net [3.97.99.33]) by sourceware.org (Postfix) with ESMTPS id E8BD4385841C for ; Thu, 23 Dec 2021 16:15:58 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org E8BD4385841C Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=SystematicSw.ab.ca Authentication-Results: sourceware.org; spf=none smtp.mailfrom=systematicsw.ab.ca Received: from shw-obgw-4004a.ext.cloudfilter.net ([10.228.9.227]) by cmsmtp with ESMTP id 0Pldnr13sztEj0Ql4nia0Q; Thu, 23 Dec 2021 16:15:58 +0000 Received: from [192.168.1.105] ([68.147.0.90]) by cmsmtp with ESMTP id 0Ql3nk7X5d5Un0Ql3n4ei3; Thu, 23 Dec 2021 16:15:58 +0000 X-Authority-Analysis: v=2.4 cv=FrgWQknq c=1 sm=1 tr=0 ts=61c4a0be a=T+ovY1NZ+FAi/xYICV7Bgg==:117 a=T+ovY1NZ+FAi/xYICV7Bgg==:17 a=IkcTkHD0fZMA:10 a=iMpC6L0jGsNNbTZxuiUA:9 a=QEXdDO2ut3YA:10 Message-ID: Date: Thu, 23 Dec 2021 09:15:57 -0700 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Thunderbird/91.4.1 Reply-To: cygwin@cygwin.com Subject: Re: Inquiry on Apache Log4j's Effect on Cygwin Software Content-Language: en-CA To: cygwin@cygwin.com References: Cc: Iyana Garry From: Brian Inglis Organization: Systematic Software In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-CMAE-Envelope: MS4xfDVQIEPuS+Yqfs+dzfgBTugpEl8q5yGB45aw2SBn5K6wA5bGzD9FsC64l9CA8A6n9B6pPPWknq7vYzZUKOKe+dEakqxb33CD8gmP2fUygjUl0VQQvLv3 Dhktfl5PyJPuFUXcZPHCQHoTgIUDp9+Ql372zQTcY2ER/x9SSpqUIFAlQDCv9SJ74yMS04VGHaUQVMrKpToXCHWoJke1lUkKWau3FpbpIHJCIv1v4m0ewZmP X-Spam-Status: No, score=-1164.7 required=5.0 tests=BAYES_00, KAM_DMARC_STATUS, KAM_LAZY_DOMAIN_SECURITY, NICE_REPLY_A, RCVD_IN_BARRACUDACENTRAL, RCVD_IN_MSPIKE_H2, SPF_HELO_NONE, SPF_NONE, TXREP autolearn=no autolearn_force=no version=3.4.4 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on server2.sourceware.org X-BeenThere: cygwin@cygwin.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: General Cygwin discussions and problem reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Dec 2021 16:16:00 -0000 On 2021-12-23 08:19, Iyana Garry wrote: > Is there any confirmation that Cygwin software is not impacted by > the Apache Log4J vulnerabilities (CVE-2021-44228, CVE-2021-45046 and > CVE-2021-45105)? Cygwin neither supports nor packages Java or log4j (Log for Java). -- Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada This email may be disturbing to some readers as it contains too much technical detail. Reader discretion is advised. [Data in binary units and prefixes, physical quantities in SI.]