Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1osRk9-0006fg-Vh for pgsql-odbc@arkaria.postgresql.org; Tue, 08 Nov 2022 16:46:34 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1osRk8-0001jL-Tx for pgsql-odbc@arkaria.postgresql.org; Tue, 08 Nov 2022 16:46:32 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1osRk8-0001is-FT for pgsql-odbc@lists.postgresql.org; Tue, 08 Nov 2022 16:46:32 +0000 Received: from mail-vs1-xe35.google.com ([2607:f8b0:4864:20::e35]) by makus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1osRk3-0006KY-Id for pgsql-odbc@lists.postgresql.org; Tue, 08 Nov 2022 16:46:31 +0000 Received: by mail-vs1-xe35.google.com with SMTP id 128so14156071vsz.12 for ; Tue, 08 Nov 2022 08:46:27 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=9V3hfiY8up0vUCGT6QCRcbRaxkBiQaqcQHIJlzTXub8=; b=SY9HYsfyrbJM8TvGnuZ5QW2DtPwVCrIPptaetSLDbbuqBDQF1veKwm5PGZsretCDjv 6Z1Jl/u19hcxxkd14OslelgRsAmpyBnQF8D2aUwGEQk41RTh0vkbq/G1Zux1PNS9VWUg BRiA5PWnx9d5nWrNIZa41xiHhcRnjXjGQr//sz3Iw8zn4c/koQ5PcRf880WuiIAWVd64 d+N2ZHdriBwgzodqQ/5i8RO/Mq/VsZD/c+8ffy44m3jbHBBfJgFgM8p3Il9RFlMxUvqu 48U/linFT+0lovvDewFvnWkqQT1RqOHn8jJzKyJDmB8EJLl0kgplaU4Lk6HVmxzjW152 CdGg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=9V3hfiY8up0vUCGT6QCRcbRaxkBiQaqcQHIJlzTXub8=; b=c/nIiE0oFTnCXdgD3ZSBEB4+mokulSNiih8criDmxuyQoE1GoZwAwZW3erN7KEjhXL FEeoSJIhqZ13dlLEYialOcAQTxlYVQJwBH4LRLGpdxjMJRt2xeVj6K/bRtsW4+IxeDYK uAouTtz0mN0280P7mjtuPogZk0SlNK9SvQKrx9cM4SrXs7MZ4Xr11H539UG8+WV3/R9u ZUDDy3V39qntMr5tjI5vmU+4iBr4EQxsSLNOd+QfDGD/dqsX6mBYYJDX/IsZQ5LkzQ6M YGFoJnw0aOeU0jDCN5DpQE4yY6JKiSJRf9r/izsrKZxr985d/P2LJkzE4Yejsvv37ZVr Dt8g== X-Gm-Message-State: ACrzQf1/f5FJlPgcZoyHW9yuiPvAbeoZhedQ0brN8u4KJT+nWlbt7e+F CsijdTsNFP/c2ASgjQaba7YUv95Ksi0XEOIbhsM= X-Google-Smtp-Source: AMsMyM6bjok3++rfAK/N5xl5az1ITk4J0Uu+Uw5TYBEwKhE5o+oJ8pTKbQXjPRS0U++Ph4u3H/DdHn+0AggjvB8lF/0= X-Received: by 2002:a67:e0c7:0:b0:3aa:2e89:683 with SMTP id m7-20020a67e0c7000000b003aa2e890683mr30072073vsl.25.1667925986639; Tue, 08 Nov 2022 08:46:26 -0800 (PST) MIME-Version: 1.0 References: In-Reply-To: From: Dave Cramer Date: Tue, 8 Nov 2022 11:46:10 -0500 Message-ID: Subject: Re: ODBC log4j To: "Woods, Christopher (Customer Propositions & Delivery)" Cc: "pgsql-odbc@lists.postgresql.org" Content-Type: multipart/alternative; boundary="000000000000f205e805ecf847a6" List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --000000000000f205e805ecf847a6 Content-Type: text/plain; charset="UTF-8" On Tue, 8 Nov 2022 at 11:39, Dave Cramer wrote: > Hello Christopher, > > The ODBC driver is not written in JAVA, so it does not use log4j. I think > it's safe to say that there are no log4j vulnerabilities in the ODBC driver. > > Regards, > Dave Cramer > > > On Tue, 8 Nov 2022 at 11:37, Woods, Christopher (Customer Propositions & > Delivery) wrote: > >> >> >> Hi, >> >> >> >> I am new to PostgreSQL. Are you able to advise if the ODBC driver is >> Log4j vulnerability free please? I need to ensure before I can consider >> using it and could not see reference to it on the website / older posts in >> this group. >> >> >> >> Thanks >> >> >> >> Chris >> >> >> >> ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ >> The opinions expressed in this email represent those of the individual >> and not necessarily those of Lombard North Central plc. The contents of >> this email may be privileged and are confidential. It may not be disclosed >> to or used by anyone other than the addressee(s), nor copied in any way. If >> received in error, please advise the sender, then delete from your system. >> Lombard North Central plc does not accept responsibility for changes made >> to this message after it was sent. Should you wish to use email as a mode >> of communication, Lombard North Central plc is unable to guarantee the >> security of email content outside our own computer systems. >> Please do not e-mail any account or other confidential information. >> Lombard North Central plc may monitor e-mails for business and operational >> purposes. By replying to this message you give your consent to our >> monitoring of your email communications with us. >> While all reasonable care has been taken to avoid the transmission of >> viruses, it is the responsibility of the recipient to ensure that the >> onward transmission, opening or use of this message and any attachments >> will not adversely affect its systems or data. No responsibility is >> accepted by Lombard North Central plc in this regard and the recipient >> should carry out such virus and other checks as it considers appropriate. >> Lombard North Central plc, Registered in England. No 337004. >> Registered Office: 250 Bishopsgate, London, EC2M 4AA. >> Authorised and regulated by the Financial Conduct Authority for consumer >> credit activities. >> A member of NatWest Group. >> Calls may be recorded. >> +++++++++++++++++++++++++++++++++++++++++++++++++++++++ >> > --000000000000f205e805ecf847a6 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


=

= On Tue, 8 Nov 2022 at 11:39, Dave Cramer <pg@fastcrypt.com> wrote:
Hello Christopher,

The ODBC driver is not written in JAVA, so it does not use log4j. I think= it's safe to say that there are no log4j vulnerabilities in the ODBC d= river.

Regards,
Dave Cram= er


On Tue, 8 Nov 2022 at 11:37, Woods, Christopher (Cu= stomer Propositions & Delivery) <CHRISTOPHER.WOODS@lombard.co.uk> w= rote:

=C2=A0

Hi,

=C2=A0

I am new to PostgreSQL.=C2=A0 Are you able to advise= if the ODBC driver is Log4j vulnerability free please?=C2=A0 I need to ens= ure before I can consider using it and could not see reference to it on the= website / older posts in this group.

=C2=A0

Thanks

=C2=A0

Chris

=C2=A0


=C2=A0++++++++++++++++++++++++++++++++++++++++++++++++++++= ++++++ =C2=A0 =C2=A0 =C2=A0=C2=A0
The opinions expressed in this email = represent those of the individual and not necessarily those of Lombard Nort= h Central plc. The contents of this email may be privileged and are confide= ntial. It may not be disclosed to or used by anyone other than the addresse= e(s), nor copied in any way. If received in error, please advise the sender= , then delete from your system.
Lombard North Central plc does not acce= pt responsibility for changes made to this message after it was sent. Shoul= d you wish to use email as a mode of communication, Lombard North Central p= lc is unable to guarantee the security of email content outside our own com= puter systems.
Please do not e-mail any account or other confidential i= nformation. Lombard North Central plc may monitor e-mails for business and = operational purposes. By replying to this message you give your consent to = our monitoring of your email communications with us.
While all reasonab= le care has been taken to avoid the transmission of viruses, it is the resp= onsibility of the recipient to ensure that the onward transmission, opening= or use of this message and any attachments will not adversely affect its s= ystems or data. No responsibility is accepted by Lombard North Central plc = in this regard and the recipient should carry out such virus and other chec= ks as it considers appropriate.
Lombard North Central plc, Registered i= n England. No 337004.=C2=A0
Registered Office: 250 Bishopsgate, London,= EC2M 4AA.=C2=A0
Authorised and regulated by the Financial Conduct Auth= ority for consumer credit activities.
A member of NatWest Group.
Ca= lls may be recorded.
=C2=A0++++++++++++++++++++++++++++++++++++++++= +++++++++++++++
--000000000000f205e805ecf847a6--