pg.ddx.io pgsql-admin@postgresql.org mailing list archivehelp / color / mirror / Atom feed
PostgreSQL - CVE-2021-44228 - dependency on Log4j ? 4+ messages / 3 participants [nested] [flat]
* PostgreSQL - CVE-2021-44228 - dependency on Log4j ? @ 2021-12-13 10:19 Joao COSTA <jcosta@pictet.com> 0 siblings, 2 replies; 4+ messages in thread From: Joao COSTA @ 2021-12-13 10:19 UTC (permalink / raw) To: pgsql-admin@lists.postgresql.org <pgsql-admin@lists.postgresql.org> Hi Community, Is PostgreSQL instance dependent of this Log4J Library ? I was looking on postgresql website but I did not find anything Many Thanks, Joao This message is not intended for persons who are citizens of, domiciled or resident in, or entities registered in a country or jurisdiction in which its distribution, publication, provision or use would violate current laws and regulations. The content of this message is confidential and may be read and/or used only by the recipient of this message. For information about personal data protection, please refer to the Pictet Group’s Privacy Notice available at www.group.pictet/privacynotice. If you have received this e-mail message in error, please destroy it and delete it from your computer. The Pictet Group may not be held liable for the use, transmission or treatment of the content of this message. The recipient of this message remains solely liable for any form of reproduction, copying, disclosure, modification and/or publication of the content. No liability whatsoever will be incurred by the Pictet Group. The recipient of this message agrees to comply with the applicable laws and regulations in the jurisdictions where they use the information contained herein.<br> ^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: PostgreSQL - CVE-2021-44228 - dependency on Log4j ? @ 2021-12-13 11:42 lazaro garcia <lazaro3487@gmail.com> parent: Joao COSTA <jcosta@pictet.com> 1 sibling, 1 reply; 4+ messages in thread From: lazaro garcia @ 2021-12-13 11:42 UTC (permalink / raw) To: Joao COSTA <jcosta@pictet.com>; +Cc: pgsql-admin@lists.postgresql.org <pgsql-admin@lists.postgresql.org> There is no relation between Log4j and PostgreSQL. Log4j is a logging library used in the Java ecosystem. Regards. El lun, 13 dic 2021 a las 12:20, Joao COSTA (<jcosta@pictet.com>) escribió: > Hi Community, > > > > Is PostgreSQL instance dependent of this Log4J Library ? > > I was looking on postgresql website but I did not find anything > > > > Many Thanks, > > Joao > > Banque Pictet & Cie SA > Route des Acacias 60 > 1211 Geneva 73 - Switzerland > Tel. +41 58 323 2323 > Fax. +41 58 323 2324 > group.pictet > <http://group.pictet?utm_source=outlook&utm_medium=email&utm_campaign=signature; > > > > > ------------------------------ > > > This message is not intended for persons who are citizens of, domiciled or > resident in, or entities registered in a country or jurisdiction in which > its distribution, publication, provision or use would violate current laws > and regulations. The content of this message is confidential and may be > read and/or used only by the recipient of this message. For information > about personal data protection, please refer to the Pictet Group’s Privacy > Notice available at www.group.pictet/privacynotice. If you have received > this e-mail message in error, please destroy it and delete it from your > computer. The Pictet Group may not be held liable for the use, transmission > or treatment of the content of this message. The recipient of this message > remains solely liable for any form of reproduction, copying, disclosure, > modification and/or publication of the content. No liability whatsoever > will be incurred by the Pictet Group. The recipient of this message agrees > to comply with the applicable laws and regulations in the jurisdictions > where they use the information contained herein. > Attachments:^ permalink raw reply [nested|flat] 4+ messages in threadnoname (image/jpeg, 5.3K) download
view image
* RE: PostgreSQL - CVE-2021-44228 - dependency on Log4j ? @ 2021-12-13 11:57 Joao COSTA <jcosta@pictet.com> parent: lazaro garcia <lazaro3487@gmail.com> 0 siblings, 0 replies; 4+ messages in thread From: Joao COSTA @ 2021-12-13 11:57 UTC (permalink / raw) To: lazaro garcia <lazaro3487@gmail.com>; +Cc: pgsql-admin@lists.postgresql.org <pgsql-admin@lists.postgresql.org> Hi Lazaro Many Thanks for your clarification. Regards Joao From: lazaro garcia <lazaro3487@gmail.com> Sent: lundi 13 décembre 2021 12:43 To: Joao COSTA <jcosta@pictet.com> Cc: pgsql-admin@lists.postgresql.org Subject: Re: PostgreSQL - CVE-2021-44228 - dependency on Log4j ? There is no relation between Log4j and PostgreSQL. Log4j is a logging library used in the Java ecosystem. Regards. El lun, 13 dic 2021 a las 12:20, Joao COSTA (<jcosta@pictet.com<mailto:jcosta@pictet.com>>) escribió: Hi Community, Is PostgreSQL instance dependent of this Log4J Library ? I was looking on postgresql website but I did not find anything Many Thanks, Joao [cid:image001.jpg@01D7F020.85EF2120] Banque Pictet & Cie SA Route des Acacias 60 1211 Geneva 73 - Switzerland Tel. +41 58 323 2323 Fax. +41 58 323 2324 group.pictet<http://group.pictet?utm_source=outlook&utm_medium=email&utm_campaign=signature; ________________________________ This message is not intended for persons who are citizens of, domiciled or resident in, or entities registered in a country or jurisdiction in which its distribution, publication, provision or use would violate current laws and regulations. The content of this message is confidential and may be read and/or used only by the recipient of this message. For information about personal data protection, please refer to the Pictet Group’s Privacy Notice available at www.group.pictet/privacynotice<http://www.group.pictet/privacynotice;. If you have received this e-mail message in error, please destroy it and delete it from your computer. The Pictet Group may not be held liable for the use, transmission or treatment of the content of this message. The recipient of this message remains solely liable for any form of reproduction, copying, disclosure, modification and/or publication of the content. No liability whatsoever will be incurred by the Pictet Group. The recipient of this message agrees to comply with the applicable laws and regulations in the jurisdictions where they use the information contained herein. This message is not intended for persons who are citizens of, domiciled or resident in, or entities registered in a country or jurisdiction in which its distribution, publication, provision or use would violate current laws and regulations. The content of this message is confidential and may be read and/or used only by the recipient of this message. For information about personal data protection, please refer to the Pictet Group’s Privacy Notice available at www.group.pictet/privacynotice. If you have received this e-mail message in error, please destroy it and delete it from your computer. The Pictet Group may not be held liable for the use, transmission or treatment of the content of this message. The recipient of this message remains solely liable for any form of reproduction, copying, disclosure, modification and/or publication of the content. No liability whatsoever will be incurred by the Pictet Group. The recipient of this message agrees to comply with the applicable laws and regulations in the jurisdictions where they use the information contained herein.<br> Attachments:^ permalink raw reply [nested|flat] 4+ messages in threadimage001.jpg (image/jpeg, 5.3K) download
view image
* RE: PostgreSQL - CVE-2021-44228 - dependency on Log4j ? @ 2021-12-13 14:09 dave@davebolt.co.uk parent: Joao COSTA <jcosta@pictet.com> 1 sibling, 0 replies; 4+ messages in thread From: dave@davebolt.co.uk @ 2021-12-13 14:09 UTC (permalink / raw) To: 'Joao COSTA' <jcosta@pictet.com>; pgsql-admin@lists.postgresql.org Posting this response even though it is not directly related to pgsql-admin. There is a nice write-up on the Sophos Naked Security blog about the Log4j issue: https://nakedsecurity.sophos.com/2021/12/13/log4shell-explained-how-it-works-why-you-need-to-know-an... This includes information about checking if your server is affected and how to update to the patched version of log4j-core and log4j-api The original question asked if PostreSQL is dependent but my understanding is that we should be asking “Is anything on my server using Log4j”. Hope this helps. Dave From: Joao COSTA [mailto:jcosta@pictet.com] Sent: 13 December 2021 10:20 To: pgsql-admin@lists.postgresql.org Subject: PostgreSQL - CVE-2021-44228 - dependency on Log4j ? Hi Community, Is PostgreSQL instance dependent of this Log4J Library ? I was looking on postgresql website but I did not find anything Many Thanks, Joao Banque Pictet & Cie SA Route des Acacias 60 1211 Geneva 73 - Switzerland Tel. +41 58 323 2323 Fax. +41 58 323 2324 <http://group.pictet?utm_source=outlook&utm_medium=email&utm_campaign=signature; group.pictet _____ This message is not intended for persons who are citizens of, domiciled or resident in, or entities registered in a country or jurisdiction in which its distribution, publication, provision or use would violate current laws and regulations. The content of this message is confidential and may be read and/or used only by the recipient of this message. For information about personal data protection, please refer to the Pictet Group’s Privacy Notice available at www.group.pictet/privacynotice. If you have received this e-mail message in error, please destroy it and delete it from your computer. The Pictet Group may not be held liable for the use, transmission or treatment of the content of this message. The recipient of this message remains solely liable for any form of reproduction, copying, disclosure, modification and/or publication of the content. No liability whatsoever will be incurred by the Pictet Group. The recipient of this message agrees to comply with the applicable laws and regulations in the jurisdictions where they use the information contained herein. Attachments:^ permalink raw reply [nested|flat] 4+ messages in threadimage001.jpg (image/jpeg, 5.3K) download
view image
end of thread, other threads:[~2021-12-13 14:09 UTC | newest] Thread overview: 4+ messages (download: mbox mbox.gz follow: Atom feed) -- links below jump to the message on this page -- 2021-12-13 10:19 PostgreSQL - CVE-2021-44228 - dependency on Log4j ? Joao COSTA <jcosta@pictet.com> 2021-12-13 11:42 ` Re: PostgreSQL - CVE-2021-44228 - dependency on Log4j ? lazaro garcia <lazaro3487@gmail.com> 2021-12-13 11:57 ` RE: PostgreSQL - CVE-2021-44228 - dependency on Log4j ? Joao COSTA <jcosta@pictet.com> 2021-12-13 14:09 ` dave@davebolt.co.uk
This inbox is served by DDX for PostgreSQL; see mirroring instructions for how to clone and mirror all data and code used for this inbox