X-Recipient:	archive-cygwin AT delorie DOT com
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.4.1 sourceware.org 2AA603858C2C
Authentication-Results:	sourceware.org;
	dmarc=pass (p=none dis=none) header.from=yandex.ru
Authentication-Results:	sourceware.org; spf=pass smtp.mailfrom=yandex.ru
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail;
	t=1643218501; bh=4dzthm5jCoPMU6vnE1TGiA+KNdgz2OOFiVOgjV2uzYI=;
	h=In-Reply-To:Subject:From:Message-ID:References:Date:Reply-To:To;
	b=v/yOkVuODhNZd+AMrQQETVwKDNljKGA0jZtaLz0tu2bvXNTCXLk/YFMujmDFrWgeB
	+pjLcu6pjgsNF/UnkoILkehyRUOVeanQpOcWteeFRWDuEKRkabY6H01oinRfUDbOGK
	6mZgozamsKsVe5HzLs3NzNC78a5P9lZbathUOBIE=
Authentication-Results:	iva5-f582c699c75d.qloud-c.yandex.net;
	dkim=pass header.i=@yandex.ru
X-Yandex-Fwd:	2
Date:	Wed, 26 Jan 2022 20:34:02 +0300
From:	Andrey Repin <anrdaemon AT yandex DOT ru>
X-Mailer:	The Bat! (v6.8.8) Home
X-Priority:	3 (Normal)
Message-ID:	<786598409.20220126203402@yandex.ru>
To:	mail2spam AT gmx DOT net, cygwin AT cygwin DOT com
Subject:	Re: Is Cygwin in any way affected by "Log4j" / "Log4Shell"...???
In-Reply-To:	<trinity-717d45d2-22b6-44cd-98a3-f392b03e3dee-1643217234041@3c-app-gmx-bap60>
References:	<trinity-717d45d2-22b6-44cd-98a3-f392b03e3dee-1643217234041 AT 3c-app-gmx-bap60>
MIME-Version:	1.0
X-Spam-Status:	No, score=-1.4 required=5.0 tests=BAYES_00, DKIM_SIGNED,
	DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, FREEMAIL_FROM, KAM_THEBAT,
	NICE_REPLY_A, RCVD_IN_DNSWL_LOW, SPF_HELO_NONE, SPF_PASS,
	TXREP autolearn=no autolearn_force=no version=3.4.4
X-Spam-Checker-Version:	SpamAssassin 3.4.4 (2020-01-24) on
	server2.sourceware.org
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.29
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe:	<https://cygwin.com/mailman/options/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Reply-To:	cygwin AT cygwin DOT com
Errors-To:	cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com
Sender:	"Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>

Greetings, mail2spam AT gmx DOT net!

Since Cygwin(as a library/wrapper layer) is not packaging or in any other way
providing Java code, no.

As a software distribution platform, there are 33 packages that contain .jar
files: https://cygwin.com/cgi-bin2/package-grep.cgi?grep=%5C.jar%24&arch=x86_64
What they are doing and if they are susceptible to the exploit - a question to
the relevant package author(s).


-- 
With best regards,
Andrey Repin
Wednesday, January 26, 2022 20:20:45

Sorry for my terrible english...


-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -