Sorry I couldn't find any topic about the log4 j vulnerability in relation to Akeeba. Therfore this question...
Are Akeeba products affected by the log4j vulnerability?
If so, can please share some information about it?
Thanks.
Stephan
#36329 log4j
Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket
Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.
Environment Information
Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a
Latest post by stauf on Friday, 17 December 2021 10:08 CST
Friday, 17 December 2021 10:01 CST
nicholas
Akeeba Staff
Manager
Log4j is a vulnerability in a popular Open Source logging component for the Java Programming language. Joomla and its extensions are written in PHP, a different programming language.
Some extensions and Joomla itself have client–side JavaScript code. However, JavaScript has absolutely nothing to do with Java — the term “JavaScript” is a misnomer, a marketing term conjured up by Netscape's misguided marketing team in the mid–to–late 90s and unfortunately it stuck. The proper name of the client-side programming language is, in fact, ECMAScript.
As a result Joomla and its extensions are NOT vulnerable to the Log4J vulnerability. The J in log4j stands for Java, not Joomla, a completely different programming language than what is used for Joomla itself and its extensions.
Finally, please note that the Apache HTTP server itself is not vulnerable per the Apache Foundation's guidance on the Log4J vulnerability issue.
Therefore there is nothing to worry about as a Joomla user. This issue does not affect us in any way.
Nicholas K. Dionysopoulos
Lead Developer and Director
🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!
Friday, 17 December 2021 10:08 CST
stauf
Thanks Nicholas...