Log4J on Linux & Windows

[Kevin.Herron]

Nothing to worry about, we don't use log4j as the logging backend. The log4j.properties files are artifacts from the past and are not used.

Java Zero Day Question

I think we’re crafting some kind of official statement, but there’s nothing to worry about. Ignition doesn’t use log4j as its logging backend. Both 7.9 and 8.x versions use a different backend called logback instead. Even old unsupported versions of Ignition that did use log4j used version 1.x, which isn’t affected. For anyone interested this is the CVE: CVE - CVE-2021-44228