Re: CVE-2021-44228 log4j vulnerability

2021-12-13 Thread Bo Berglund
On Mon, 13 Dec 2021 11:55:18 +0300, Pavel Lyalyakin wrote: >The vulnerability CVE-2021-44228 in the Java-based library Log4j affects >Java-based products that depend on the Log4j library. As I said above, >Apache Subversion is not a Java application and it does not use Log4j. >VisualSVN Server is

Re: CVE-2021-44228 log4j vulnerability

2021-12-13 Thread Pavel Lyalyakin
On Mon, Dec 13, 2021 at 1:35 AM Bo Berglund wrote: > On Sun, 12 Dec 2021 15:30:20 +0300, Pavel Lyalyakin > wrote: > > >Apache Subversion and Apache HTTP Server are not Java applications. > >Subversion does not depend on log4j. AFAIK, Apache HTTP Server does not > >depend on log4j either. > > Sou

Re: CVE-2021-44228 log4j vulnerability

2021-12-12 Thread Bo Berglund
On Sun, 12 Dec 2021 15:30:20 +0300, Pavel Lyalyakin wrote: >Apache Subversion and Apache HTTP Server are not Java applications. >Subversion does not depend on log4j. AFAIK, Apache HTTP Server does not >depend on log4j either. Sounds good. We are using VisualSVN on our main SVN server running on

Re: CVE-2021-44228 log4j vulnerability

2021-12-12 Thread Mark Phippard
On Sun, Dec 12, 2021 at 7:31 AM Pavel Lyalyakin wrote: > > On Sun, Dec 12, 2021 at 5:34 AM surbhi khandelwal wrote: >> >> Hi >> >> I am using svn, version 1.6.11 (r934486) on rhel 1.6 could you kindly help >> me understand if this is vulnerable to the latest java vulnaribility >> >> >> Httpd v

Re: CVE-2021-44228 log4j vulnerability

2021-12-12 Thread Pavel Lyalyakin
On Sun, Dec 12, 2021 at 5:34 AM surbhi khandelwal wrote: > Hi > > I am using svn, version 1.6.11 (r934486) on rhel 1.6 could you kindly > help me understand if this is vulnerable to the latest java vulnaribility > > > Httpd version im using is 2.2.15 > > Looking for your help > > > Apache Subve