May I know if backdrop vulnerable to the Log4shell/Log4j (CVE-2021-44228) in any stage or version or third party plugin found vulnerable to this ? Is there any official statement from backdrop on this ? I need a firm answer on this. Thanks.
Weekly office hours
Bring your questions to our weekly virtual office hours, every Wednesday. Everyone is welcome.
Recent topics
Posted 1 day 12 hours ago by (izmeez) in How-To and Troubleshooting
Posted 2 days 17 hours ago by (izmeez) in How-To and Troubleshooting
Posted 2 days 22 hours ago by (ian) in How-To and Troubleshooting
Posted 4 days 19 hours ago by Noyon ali (noyon) in Installation Questions
Posted 1 week 15 hours ago by Martin Price | System Horizons Ltd (yorkshirepudding) in Weekly Meetings
Recent comments
@yorkshirepudding thank you for the additional info on improving discoverability and a handy way to keep a list of projects for reuse.
Why not add a Github star?
It is a good point @izmeez and when I was researching repo discoverability I found that GitHub search does prioritise matches with more stars. This is what I was researching for:...
Why not add a Github star?
Do you have a separate development environment and transfer database and config between sites?
Wierd happenings regarding updates...
This link should work if the VIEW contains a Block and a Page - the link from the block will be directed to this page. I've never used it, so I might be wrong. But what can be done easier is to...
Blog module questions
Thank you very much for your reply! I understood that I first need to create a VIEW. I had assumed that the settings were configured via the block because it’s already included in Backdrop...
Comments
Backdrop is definitely not vulnerable because of Log4j. Log4j is a Java component; Backdrop doesn't directly use Java, it's written in PHP, HTML, and JavaScript, with a smattering of scripting languages and configurations.
Note: I don't speak officially for Backdrop, but I'm pretty confident about this.
I'm glad to hear this. Thanks for your affirmation.