SV: PSPP and Log4j

[therese.horn]

Hi,

Thanks for your reply!

We use PSPP as a complement to SPSS for statistical calculations. Do you know 
if PSPP uses Log4j?

Med vänlig hälsning,
Therese Horn

-----Ursprungligt meddelande-----
Från: Friedrich Beckmann <friedrich.beckmann@gmx.de> 
Skickat: den 3 januari 2022 15:14
Till: Horn Therese RGS IT projekt o kvalitet <therese.horn@kronoberg.se>
Kopia: pspp-dev@gnu.org
Ämne: Re: PSPP and Log4j

Observera att det här mejlet har sitt ursprung utanför Region Kronoberg. Var 
försiktig. Om du inte väntar dig detta mejl och känner till avsändaren, klicka 
inte på länkar eller öppna bifogade filer.


Hi Therese,

thanks for questions regarding pspp and log4j. Could you maybe tell us about 
your use of pspp, i.e. for what kind of data do you use pspp and what kind of 
analysis are you doing?

Thanks

Friedrich

> Am 03.01.2022 um 08:29 schrieb <therese.horn@kronoberg.se> 
> <therese.horn@kronoberg.se>:
>
> Hello,
>
> I work with managing your system PSPP and hope that I have come to the right 
> place.
> Given the recent situation regarding the vulnerability risk around Log4J, I 
> would be grateful if you could answer the following questions:
>
> Does the product contain the Log4J framework?
>       • Is your product vulnerable to CVE-2021-44228?
>       • How do you intend to handle the vulnerability?
>       • How should we act as a customer?
>       • IF there is no immediate solution WHEN this and WHAT do we do in the 
> meantime?
>
>
> Med vänlig hälsning
> Therese Horn
> Projektledare | IT Projekt och kvalitet
> +46470588605 | +46767207948
> therese.horn@kronoberg.se
> www.regionkronoberg.se
>
> <image001.png>