Xibo and log4j vulnerability: CVE-2021-44228

Get Help Other
1

Hi. I wonder based on the recent log4j vulnerably discovery.
Whether there is such module embedded in xibo docker images , and if so what version …

Thanks.

2 Likes
2

Great question and i am wondering the same myself

1 Like
3

Same here. Could you please confirm?

4

AFAIK, not the CMS as it’s not Java but PHP.

5

I’d love confirmation of this as well.

6

Hey all,

Good question! Like others I suspect the answer is no, Log4J is not used in Xibo or the docker images but I’d like to hear a formal confirmation too. Security issues require very clear and transparent communication, even if it’s just to say there’s nothing to worry about. That way we can direct our efforts elsewhere,

Thanks.

1 Like
7

Hello everyone, our apologies for not responding to this sooner.

Xibo CMS does not use Java, and Xibo for Android which is written in Java doesn’t use log4j, so there is no risk from the vulnerability. I hope this helps to reassure you but if you have any further questions, please let me know.

Many Thanks,

8

Hello DanBW,

Can you confirm this for the players too?

Thnx

9

Hi puthplaza,

Regarding the players, Xibo for Android is written in Java but does not use log4j. There should not be any risk from the vulnerability on any of the player platforms.

Many Thanks.

2 Likes
10

This topic was automatically closed 91 days after the last reply. New replies are no longer allowed.