Subject: bug#52707: closed (Re: bug#52707: Log4j Shell Vulnerability)

From: [email-masked] (GNU bug Tracking System)
Date: Tue, 21 Dec 2021 17:52:02 +0000

Your bug report

#52707: Log4j Shell Vulnerability

which was filed against the emacs package, has been closed.

The explanation is attached below, along with your original report.
If you require more details, please reply to [email-masked].

-- 
52707: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=52707
GNU Bug Tracking System
Contact [email-masked] with problems

Subject: Re: bug#52707: Log4j Shell Vulnerability
From: Dmitry Gutov <[email-masked]>
To: "Terry,Samantha" <[email-masked]>, [email-masked]
Date: Tue, 21 Dec 2021 20:49:43 +0300
List-Id: <debbugs-submit.debbugs.gnu.org>

On 21.12.2021 18:21, Terry,Samantha wrote:
> I’m sure you are well aware of the vulnerability with Log4j.  We are 
> needing to determine if the application Emacs is vulnerable.

It does not. Emacs doesn't use Java in its implementation, nor JVM itself.

Subject: Log4j Shell Vulnerability
From: "Terry,Samantha" <[email-masked]>
To: "[email-masked]" <[email-masked]>
Date: Tue, 21 Dec 2021 15:21:42 +0000
List-Id: <debbugs-submit.debbugs.gnu.org>

I'm sure you are well aware of the vulnerability with Log4j.  We are needing to determine if the application Emacs is vulnerable.  If so, do you plan on creating a patch or have a plan to patch?

Sam Terry
Research/Willow/Beacon/Therapy Plans - IT Manager
Sanford Health Technology Solutions
Route: 5012| O: 605.328.7310

-----------------------------------------------------------------------
Confidentiality Notice: This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
privileged and confidential information.  Any unauthorized review, use,
disclosure or distribution is prohibited.  If you are not the intended
recipient, please contact the sender by reply e-mail and destroy
all copies of the original message.