perfSONAR User Q&A and Other Discussion

[Hans Kuhn <>]

On 10 Dec 2021, at 11:21, Mark Feit wrote:

> Hans Kuhn writes:
>
> Thanks Mark! Can you reassure me that this doesn't apply to pS even tho it 
> runs log4j 1.x?
>
> "The 1.x series of Log4j is also vulnerable to this issue when using the 
> JMS Appender class."
>
> All of our Log4j logging goes to files via the RollingFileAppender.  You 
> can see that in the configuration we ship here:  
> https://github.com/perfsonar/maddash/blob/master/maddash-server/etc/log4j.properties.
>
> --Mark

Hi Mark,

Thanks for the clarification! I also appreciate the pointer to log4j's 
configuration as I'm still evaluating the rest of our services that rely on 
java.

best, Hans