May I know if backdrop vulnerable to the Log4shell/Log4j (CVE-2021-44228) in any stage or version or third party plugin found vulnerable to this ? Is there any official statement from backdrop on this ? I need a firm answer on this. Thanks.
Weekly office hours
Bring your questions to our weekly virtual office hours, every Wednesday. Everyone is welcome.
Recent topics
Posted 4 days 12 hours ago by (pgrayove) in How-To and Troubleshooting
Posted 6 days 12 hours ago by (lias) in How-To and Troubleshooting
Posted 1 week 3 days ago by Francis Greaves (themetman) in How-To and Troubleshooting
Posted 1 week 4 days ago by (Ernst) in How-To and Troubleshooting
Posted 1 week 5 days ago by (samgreco) in How-To and Troubleshooting
Recent comments
I am withdrawing my question for the following reason: https://forum.backdropcms.org/comment/8960#comment-8960
Error when trying to check for updates
My hosting is located in a country that blocks numerous online resources, so I am not surprised that updates and modules are unavailable. However, everything works perfectly on a local server...
Unable to run update - fails with Connection timed out
UPDATE: I fixed the errors that I found in the logs. They were related to deleting an old blog content type pulled over from Drupal that was still referenced in one of the layouts. I updated...
missing "add block" in custom layout
Hmmm... this sounds like a bug with Copy Blocks. Would this possibly be related: https://github.com/backdrop-contrib/copy_blocks/issues/26 https://github.com/backdrop-contrib/...
missing "add block" in custom layout
Also this error: Warning: Undefined array key "blog" in summary() (line 63 of /app/core/modules/layout/plugins/access/entity_bundle_layout_access.inc). I did recently delete an old blog...
Comments
Backdrop is definitely not vulnerable because of Log4j. Log4j is a Java component; Backdrop doesn't directly use Java, it's written in PHP, HTML, and JavaScript, with a smattering of scripting languages and configurations.
Note: I don't speak officially for Backdrop, but I'm pretty confident about this.
I'm glad to hear this. Thanks for your affirmation.