<div dir="ltr"><div dir="ltr"><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Dec 14, 2021 at 10:17 PM integer GmbH <<a href="mailto:support@integer-it.de">support@integer-it.de</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Hello Ubuntu-Team,<br>can you please tell me if the follwoing software is affected by the Log4J exploit?<br></blockquote><div><br></div><div>*disclaimer: I'm not from the security team and this is not a definitive or formal answer*<br></div><div><br></div><div>Hi,</div><div>In general for CVEs you'd want to check the <a href="https://ubuntu.com/security">https://ubuntu.com/security</a> entry for it.</div><div>It will mention its status, affected packages and link to further ressources one should know about.</div><div>In this case the links to USN and the wiki page are very helpful as well.</div><div><br></div><div>In this case that is at: <a href="https://ubuntu.com/security/CVE-2021-44228">https://ubuntu.com/security/CVE-2021-44228</a></div><div><br></div><div>The TL;DR could be, you do not list the affected package "apache-log4j1.2", so not affected.</div><div>But TBH your customers website clearly runs apache2 + php which isn't listed here.</div><div>Might there also be some java or any other solution (like an appliance which sometimes</div><div>aren't transparent what they use internally) that uses log4j2, no one here would know.</div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">python3.8<br>python3.8-minimal<br>python3-appdirs<br>python3-apt<br>python3-certifi<br>python3-chardet<br>python3-crypto<br>python3-dbus<br>python3-distlib<br>python3-distro<br>python3-distro-info<br>python3-distupgrade<br>python3-distutils<br>python3-dnspython<br>python3-filelock<br>python3-gi<br>python3-gpg<br>python3-idna<br>python3-importlib-metadata<br>python3-ldb<br>python3-lib2to3<br>python3-markdown<br>python3-minimal<br>python3-more-itertools<br>python3-netifaces<br>python3-packaging<br>python3-pkg-resources<br>python3-pygments<br>python3-pyparsing<br>python3-requests<br>python3-samba<br>python3-six<br>python3-talloc<br>python3-tdb<br>python3-update-manager<br>python3-urllib3<br>python3-virtualenv<br>python3-yaml<br>python3-zipp<br>python3.6-minimal<br>readline-common<br>rename<br>resolvconf<br>rsync<br>rsyslog<br>samba<br>samba-common<br>samba-common-bin<br>samba-dsdb-modules<br>samba-libs<br>samba-vfs-modules<br>sed<br>sensible-utils<br>shared-mime-info<br>socat<br>squid<br>squid-common<br>squid-langpack<br>ssl-cert<br>sudo<br>systemd<br>systemd-sysv<br>systemd-timesyncd<br>sysvinit-utils<br>tar<br>tcpd<br>tdb-tools<br>thermald<br>tzdata<br>ubuntu-advantage-tools<br>ubuntu-minimal<br>ubuntu-release-upgrader-core<br>ucf<br>udev<br>update-inetd<br>update-manager-core<br>usb.ids<br>usbutils<br>util-linux<br>vim-common<br>vim-tiny<br>virtualenv<br>wget<br>whiptail<br>winbind<br>xauth<br>xdg-user-dirs<br>xkb-data<br>xxd<br>xz-utils<br>zerofree<br>zlib1g<br>tasksel<br>tasksel-data<br><br>Our client Hopfenveredlung St. Johann is using this software and we want to make sure they are not affected by the Log4J exploit.<br><br>Best Regards<br>Jonas Böck<br><br><br> <div> <table style="width:100%" cellspacing="0" cellpadding="0" border="0"> <tbody> <tr style="font-size:0px"> <td style="vertical-align:top" align="left"> <table style="font-size:0px;white-space:nowrap;font-weight:400;color:rgb(0,0,1);font-style:normal" cellspacing="0" cellpadding="0" border="0"> <tbody> <tr style="font-size:24px"> <td style="font-family:"Fira Sans Light",sans-serif;vertical-align:top;padding:5px 0px 15px" align="left">_ <span style="font-size:1px;font-family:remialcxesans;color:rgb(255,255,255);line-height:1px"></span><span style="color:rgb(128,128,128)">_</span> <span style="color:rgb(217,0,0)">_</span></td></tr></tbody></table></td></tr> <tr style="font-size:0px"> <td style="vertical-align:top" align="left"> <table style="font-size:0px;white-space:nowrap;font-weight:700;color:rgb(0,0,1);font-style:normal" cellspacing="0" cellpadding="0" border="0"> <tbody> <tr style="font-size:16px"> <td style="font-family:"Fira Sans Light",sans-serif;vertical-align:top;padding:5px 5px 0px" align="left">integer GmbH Support</td></tr></tbody></table></td></tr> <tr style="font-size:0px"> <td style="vertical-align:top" align="left"> <table style="font-size:0px;white-space:nowrap;font-weight:400;color:rgb(0,0,1);font-style:normal" cellspacing="0" cellpadding="0" border="0"> <tbody> <tr style="font-size:12px"> <td style="font-family:"Fira Sans Light",sans-serif;vertical-align:top;padding:0px 5px 5px" align="left"></td></tr></tbody></table></td></tr> <tr style="font-size:0px"> <td style="vertical-align:top" align="left"> <table style="font-size:0px" cellspacing="0" cellpadding="0" border="0"> <tbody> <tr style="font-size:0px"> <td style="vertical-align:top" align="left"> <table style="font-size:0px" cellspacing="0" cellpadding="0" border="0"><tbody> <tr style="font-size:0px"> <td style="vertical-align:top;padding:5px" align="left"> <table style="font-size:12px;font-family:"Fira Sans Light",sans-serif;white-space:nowrap;font-weight:400;color:rgb(105,105,105);font-style:normal;text-align:left;line-height:11px" cellspacing="0" cellpadding="0" border="0"> <tbody> <tr style="font-size:12px"> <td style="font-family:"Fira Sans Light",sans-serif">Telefon 08252 - 96031 - 10</td></tr></tbody></table></td></tr></tbody></table></td> <td style="vertical-align:top" align="left"> <table style="font-size:0px" cellspacing="0" cellpadding="0" border="0"><tbody> <tr style="font-size:0px"> <td style="vertical-align:top;padding:5px" align="left"> <table style="font-size:12px;font-family:"Fira Sans Light",sans-serif;white-space:nowrap;font-weight:400;color:rgb(105,105,105);font-style:normal;text-align:left;line-height:11px" cellspacing="0" cellpadding="0" border="0"> <tbody> <tr style="font-size:12px"> <td style="font-family:"Fira Sans Light",sans-serif">|<br></td></tr></tbody></table></td></tr></tbody></table></td> <td style="vertical-align:top" align="left"> <table style="font-size:0px" cellspacing="0" cellpadding="0" border="0"><tbody> <tr style="font-size:0px"> <td style="vertical-align:top;padding:5px 0px 5px 5px" align="left"> <table style="font-size:12px;font-family:"Fira Sans Light",sans-serif;white-space:nowrap;font-weight:400;color:rgb(105,105,105);font-style:normal;text-align:left;line-height:11px" cellspacing="0" cellpadding="0" border="0"> <tbody> <tr style="font-size:12px"> <td style="font-family:"Fira Sans Light",sans-serif">E-Mail: <a style="color:rgb(105,105,105)" href="mailto:support@integer-it.de" target="_blank">support@integer-it.de</a> <br></td></tr></tbody></table></td></tr></tbody></table></td></tr></tbody></table></td></tr> <tr style="font-size:0px"> <td style="vertical-align:middle" align="left"> <table style="font-size:0px;line-height:normal" cellspacing="0" cellpadding="0" border="0"> <tbody> <tr style="font-size:0px"> <td style="vertical-align:middle;padding:10px 5px 5px" align="left"><a title="integer.de Website" href="https://integer.de/" target="_blank"><img style="height: 127px; width: 300px;" border="0" src="cid:17dbce7eede731abbdc1" width="300" height="127"></a><a id="gmail-m_8552809979448355777LPlnk689713" style="text-decoration:none" href="http://www.integer-it.de/" target="_blank"></a></td></tr></tbody></table></td></tr> <tr style="font-size:0px"> <td style="vertical-align:top" align="left"> <table style="font-size:0px" cellspacing="0" cellpadding="0" border="0"> <tbody> <tr style="font-size:0px"> <td style="vertical-align:top" align="left"> <table style="font-size:0px" cellspacing="0" cellpadding="0" border="0"><tbody> <tr style="font-size:0px"> <td style="vertical-align:top;padding:5px" align="left"> <table style="font-size:12px;font-family:"Fira Sans Light",sans-serif;white-space:nowrap;font-weight:400;color:rgb(105,105,105);font-style:normal;text-align:left;line-height:11px" cellspacing="0" cellpadding="0" border="0"> <tbody> <tr style="font-size:12px"> <td style="font-family:"Fira Sans Light",sans-serif">Hans-Sachs-Weg 25</td></tr></tbody></table></td></tr></tbody></table></td> <td style="vertical-align:top" align="left"> <table style="font-size:0px" cellspacing="0" cellpadding="0" border="0"><tbody> <tr style="font-size:0px"> <td style="vertical-align:top;padding:5px" align="left"> <table style="font-size:12px;font-family:"Fira Sans Light",sans-serif;white-space:nowrap;font-weight:400;color:rgb(105,105,105);font-style:normal;text-align:left;line-height:11px" cellspacing="0" cellpadding="0" border="0"> <tbody> <tr style="font-size:12px"> <td style="font-family:"Fira Sans Light",sans-serif">|<br></td></tr></tbody></table></td></tr></tbody></table></td> <td style="vertical-align:top" align="left"> <table style="font-size:0px" cellspacing="0" cellpadding="0" border="0"><tbody> <tr style="font-size:0px"> <td style="vertical-align:top;padding:5px 0px 5px 5px" align="left"> <table style="font-size:12px;font-family:"Fira Sans Light",sans-serif;white-space:nowrap;font-weight:400;color:rgb(105,105,105);font-style:normal;text-align:left;line-height:11px" cellspacing="0" cellpadding="0" border="0"> <tbody> <tr style="font-size:12px"> <td style="font-family:"Fira Sans Light",sans-serif">86529<br></td></tr></tbody></table></td></tr></tbody></table></td> <td style="vertical-align:top" align="left"> <table style="font-size:0px" cellspacing="0" cellpadding="0" border="0"><tbody> <tr style="font-size:0px"> <td style="vertical-align:top;padding:5px" align="left"> <table style="font-size:12px;font-family:"Fira Sans Light",sans-serif;white-space:nowrap;font-weight:400;color:rgb(105,105,105);font-style:normal;text-align:left;line-height:11px" cellspacing="0" cellpadding="0" border="0"> <tbody> <tr style="font-size:12px"> <td style="font-family:"Fira Sans Light",sans-serif">Schrobenhausen</td></tr></tbody></table></td></tr></tbody></table></td></tr></tbody></table></td></tr> <tr style="font-size:0px"> <td style="vertical-align:top" align="left"> <table style="font-size:0px" cellspacing="0" cellpadding="0" border="0"> <tbody> <tr style="font-size:0px"> <td style="vertical-align:top" align="left"> <table style="font-size:0px;white-space:nowrap;font-weight:400;color:rgb(105,105,105);font-style:normal" cellspacing="0" cellpadding="0" border="0"> <tbody> <tr style="font-size:12px"> <td style="font-family:"Fira Sans Light",sans-serif;vertical-align:top;padding:5px" align="left">Registergericht: Amtsgericht Ingolstadt<br>Registernummer: HRB 7821<br>Geschäftsführer: Luise Krammer</td></tr></tbody></table></td></tr> <tr style="font-size:0px"> <td style="vertical-align:top" align="left"> <table style="font-size:0px;white-space:nowrap;font-weight:400;color:rgb(105,105,105);font-style:normal" cellspacing="0" cellpadding="0" border="0"> <tbody> <tr style="font-size:12px"> <td style="font-family:"Fira Sans Light",sans-serif;vertical-align:top;padding:5px" align="left">Allgemeine Datenschutzhinweise:<br><a id="gmail-m_8552809979448355777LPlnk689713" style="text-decoration:none;color:rgb(105,105,105)" href="http://www.integer-it.de/ds.html" target="_blank"><strong style="font-weight:400">https://integer-it.de/ds.html</strong></a><span style="font-family:"Noto Sans""></span></td></tr></tbody></table></td></tr> <tr style="font-size:0px"> <td style="vertical-align:top" align="left"> <table style="font-size:0px;white-space:nowrap;font-weight:400;color:rgb(105,105,105);font-style:normal" cellspacing="0" cellpadding="0" border="0"> <tbody> <tr style="font-size:12px"> <td style="font-family:"Fira Sans Light",sans-serif;vertical-align:top;padding:5px" align="left">Folgen Sie uns auf: <a id="gmail-m_8552809979448355777LPlnk689713" style="text-decoration:none" href="https://www.facebook.com/integerit" target="_blank"><img title="Facebook" style="font-size: 12px; max-width: 20px; min-width: 20px;" border="0" alt="Facebook" src="cid:17dbce7eedfc87e12dc2"></a> <a id="gmail-m_8552809979448355777LPlnk689713" style="text-decoration:none" href="https://www.instagram.com/integergmbh/" target="_blank"><img title="Instagram" style="font-size: 12px; max-width: 20px; min-width: 20px;" border="0" alt="Instagram" src="cid:17dbce7eedfa574ee193"></a></td></tr></tbody></table>F</td></tr> <tr style="font-size:0px;line-height:normal"> <td style="vertical-align:top" align="left"> <p style="font-size:0px;font-family:Arial"><span style="font-size:14pt"><span style="font-size:8pt"><span style="font-size:8pt"></span></span><br></span><a title="" href="https://heyalter.com/schrobenhausen/" target="_blank"></a></p><a title="" href="https://heyalter.com/schrobenhausen/" target="_blank"><img border="0" src="cid:17dbce7eedf83a540034"></a><a id="gmail-m_8552809979448355777LPlnk689713" style="text-decoration:none" href="https://heyalter.com/schrobenhausen/" target="_blank"></a></td></tr> <tr style="font-size:0px"> <td style="vertical-align:top" align="left"> <table style="font-size:0px;white-space:nowrap;font-weight:400;color:rgb(0,0,1);font-style:normal" cellspacing="0" cellpadding="0" border="0"> <tbody> <tr style="font-size:24px"> <td style="font-family:"Fira Sans Light",sans-serif;vertical-align:top;padding:0px 0px 10px" align="left">_ <span style="color:rgb(128,128,128)">_</span> <span style="color:rgb(217,0,0)">_</span><br></td></tr></tbody></table></td></tr></tbody></table> <div></div> <p style="font-size:10pt;margin-bottom:5pt;font-family:Arial;margin-top:0px"></p></td></tr></tbody> <tbody><tr><td><div> </div> <div></div> <div></div> <div></div> <div></div> <div></div></td></tr></tbody></table></div>-- <br> Ubuntu-devel-discuss mailing list<br> <a href="mailto:Ubuntu-devel-discuss@lists.ubuntu.com" target="_blank">Ubuntu-devel-discuss@lists.ubuntu.com</a><br> Modify settings or unsubscribe at: <a href="https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss" rel="noreferrer" target="_blank">https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss</a><br> </blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature">Christian Ehrhardt<br>Staff Engineer, Ubuntu Server<br>Canonical Ltd</div></div>