Re: PSPP and Log4j

[Ben Pfaff]

PSPP does not use log4j.

On Tue, Jan 4, 2022 at 9:42 AM <therese.horn@kronoberg.se> wrote:
>
> Hi,
>
> Thanks for your reply!
>
> We use PSPP as a complement to SPSS for statistical calculations. Do you know 
> if PSPP uses Log4j?
>
> Med vänlig hälsning,
> Therese Horn
>
> -----Ursprungligt meddelande-----
> Från: Friedrich Beckmann <friedrich.beckmann@gmx.de>
> Skickat: den 3 januari 2022 15:14
> Till: Horn Therese RGS IT projekt o kvalitet <therese.horn@kronoberg.se>
> Kopia: pspp-dev@gnu.org
> Ämne: Re: PSPP and Log4j
>
> Observera att det här mejlet har sitt ursprung utanför Region Kronoberg. Var 
> försiktig. Om du inte väntar dig detta mejl och känner till avsändaren, 
> klicka inte på länkar eller öppna bifogade filer.
>
>
> Hi Therese,
>
> thanks for questions regarding pspp and log4j. Could you maybe tell us about 
> your use of pspp, i.e. for what kind of data do you use pspp and what kind of 
> analysis are you doing?
>
> Thanks
>
> Friedrich
>
> > Am 03.01.2022 um 08:29 schrieb <therese.horn@kronoberg.se> 
> > <therese.horn@kronoberg.se>:
> >
> > Hello,
> >
> > I work with managing your system PSPP and hope that I have come to the 
> > right place.
> > Given the recent situation regarding the vulnerability risk around Log4J, I 
> > would be grateful if you could answer the following questions:
> >
> > Does the product contain the Log4J framework?
> >       • Is your product vulnerable to CVE-2021-44228?
> >       • How do you intend to handle the vulnerability?
> >       • How should we act as a customer?
> >       • IF there is no immediate solution WHEN this and WHAT do we do in 
> > the meantime?
> >
> >
> > Med vänlig hälsning
> > Therese Horn
> > Projektledare | IT Projekt och kvalitet
> > +46470588605 | +46767207948
> > therese.horn@kronoberg.se
> > www.regionkronoberg.se
> >
> > <image001.png>
>