Bug#1001684: [Davmail-users] Davmail and the CVE-2021-44228-Log4j?

2021-12-14 Thread Geert Stappers
On Tue, Dec 14, 2021 at 06:23:29PM +0100, Mickaël Guessant wrote: To: davmail-us...@lists.sourceforge.net > Le 14/12/2021 à 08:52, Ole Holm Nielsen via Davmail-users a écrit : > > Hi, > > > > We have installed davmail 6.0.1 dated Dec. 3, 2021 as an RPM on CentOS > > 7.9.  However, it's only a few

Bug#1001684: [Davmail-users] Davmail and the CVE-2021-44228-Log4j?

2021-12-14 Thread Alexandre Rossi
Hi, > > We have installed davmail 6.0.1 dated Dec. 3, 2021 as an RPM on CentOS 7.9. > > However, it's only a few days ago that the Vulnerability in Apache Log4j > > (CVE-2021-44228-Log4j) was announced. We note that Davmail includes a log4j [...] > > Question: Is davmail vulnerable to log4j? If

Bug#1001684: [Davmail-users] Davmail and the CVE-2021-44228-Log4j?

2021-12-14 Thread Geert Stappers
On Tue, Dec 14, 2021 at 08:52:50AM +0100, Ole Holm Nielsen via Davmail-users wrote: > Hi, > > We have installed davmail 6.0.1 dated Dec. 3, 2021 as an RPM on CentOS 7.9. > However, it's only a few days ago that the Vulnerability in Apache Log4j > (CVE-2021-44228-Log4j) was announced. We note