Apache log4j2

[jcashandprizes]

I am trying to do my due diligence and track down any piece of software in my environment that might use the Apache log4j framework that has recently been dubbed a critical vulnerability (link below). Does Veyon use this framework at all, and is there a vulnerability that needs to be addressed with this software? If so, when can we expect a patch, or is there something more we need to do? Thanks!

https://www.zdnet.com/article/security-warning-new-zero-day-in-the-log4j-java-library-is-already-being-exploited/

[tobydox]

Since Veyon is written in C++ we don't include any Java components such as log4j. We and you therefore do not have to take any actions regarding Veyon