On Tue, Dec 14, 2021 at 11:51 AM Clemens, G. (Gijs) <gijs.clem...@suntestsystems.nl> wrote: > > I have been contacted by my system administrator that there might be security > issues with Apache Subversion. The following files have been located on our > system: > > grails-plugin-log4j-2.4.4.jar > log4j-1.2.17.jar > tomcat-embed-logging-log4j-7.0.50.jar > log4j-1.2.13.jar
Subversion is not a Java app and does not provide or use any of these files. You must be using a 3rd party distribution of Subversion that provides a web interface or something written in Java. CollabNet's SVN Edge might be one example but there are likely others. You would need to contact the place you got this from for updates. All that said ... my understanding is that log4j 1.x does not have this problem that is going around. Mark
