X-Recipient: archive-cygwin AT delorie DOT com
X-Original-To: cygwin AT cygwin DOT com
Delivered-To: cygwin AT cygwin DOT com
DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 2AA603858C2C
Authentication-Results: sourceware.org;
 dmarc=pass (p=none dis=none) header.from=yandex.ru
Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=yandex.ru
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail;
 t=1643218501; bh=4dzthm5jCoPMU6vnE1TGiA+KNdgz2OOFiVOgjV2uzYI=;
 h=In-Reply-To:Subject:From:Message-ID:References:Date:Reply-To:To;
 b=v/yOkVuODhNZd+AMrQQETVwKDNljKGA0jZtaLz0tu2bvXNTCXLk/YFMujmDFrWgeB
 +pjLcu6pjgsNF/UnkoILkehyRUOVeanQpOcWteeFRWDuEKRkabY6H01oinRfUDbOGK
 6mZgozamsKsVe5HzLs3NzNC78a5P9lZbathUOBIE=
Authentication-Results: iva5-f582c699c75d.qloud-c.yandex.net;
 dkim=pass header.i=@yandex.ru
X-Yandex-Fwd: 2
Date: Wed, 26 Jan 2022 20:34:02 +0300
From: Andrey Repin <anrdaemon AT yandex DOT ru>
X-Mailer: The Bat! (v6.8.8) Home
X-Priority: 3 (Normal)
Message-ID: <786598409.20220126203402@yandex.ru>
To: mail2spam AT gmx DOT net, cygwin AT cygwin DOT com
Subject: Re: Is Cygwin in any way affected by "Log4j" / "Log4Shell"...???
In-Reply-To: <trinity-717d45d2-22b6-44cd-98a3-f392b03e3dee-1643217234041@3c-app-gmx-bap60>
References: <trinity-717d45d2-22b6-44cd-98a3-f392b03e3dee-1643217234041 AT 3c-app-gmx-bap60>
MIME-Version: 1.0
X-Spam-Status: No, score=-1.4 required=5.0 tests=BAYES_00, DKIM_SIGNED,
 DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, FREEMAIL_FROM, KAM_THEBAT,
 NICE_REPLY_A, RCVD_IN_DNSWL_LOW, SPF_HELO_NONE, SPF_PASS,
 TXREP autolearn=no autolearn_force=no version=3.4.4
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on
 server2.sourceware.org
X-BeenThere: cygwin AT cygwin DOT com
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe: <https://cygwin.com/mailman/options/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Reply-To: cygwin AT cygwin DOT com
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com
Sender: "Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>

Greetings, mail2spam AT gmx DOT net!

Since Cygwin(as a library/wrapper layer) is not packaging or in any other way
providing Java code, no.

As a software distribution platform, there are 33 packages that contain .jar
files: https://cygwin.com/cgi-bin2/package-grep.cgi?grep=%5C.jar%24&arch=x86_64
What they are doing and if they are susceptible to the exploit - a question to
the relevant package author(s).


-- 
With best regards,
Andrey Repin
Wednesday, January 26, 2022 20:20:45

Sorry for my terrible english...


-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple