<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
Dear Ms. Sylvester,<br>
<br>
<div class="moz-cite-prefix">On 14.12.21 18:28, Sylvester, Donna
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:PH0PR04MB790057CA597141337B60AAB0BD759@PH0PR04MB7900.namprd04.prod.outlook.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style type="text/css" style="display:none;">P {margin-top:0;margin-bottom:0;}</style>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif;
font-size: 12pt; color: rgb(0, 0, 0);">
<p
style="margin-right:0in;margin-left:0in;font-size:12pt;font-family:"Times
New Roman", serif;margin:0in">
<span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">Dear
TUG folks,</span></p>
<p
style="margin-right:0in;margin-left:0in;font-size:12pt;font-family:"Times
New Roman", serif;margin:0in">
<span
style="font-size:11.0pt;font-family:"Calibri",sans-serif"><br>
</span></p>
<p
style="margin-right:0in;margin-left:0in;font-size:12pt;font-family:"Times
New Roman", serif;margin:0in">
<span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">Seattle
University is looking into risk exposure regarding the Log4J
vulnerability. As such, we are reaching out to all our
software vendors to determine which products are vulnerable
and which are not.<o:p> </o:p></span></p>
<p
style="margin-right:0in;margin-left:0in;font-size:12pt;font-family:"Times
New Roman", serif;margin:0in">
<span
style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <o:p> </o:p></span></p>
<p
style="margin-right:0in;margin-left:0in;font-size:12pt;font-family:"Times
New Roman", serif;margin:0in">
<span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">Please
answer the following questions related to TeXworks.
<o:p></o:p></span></p>
<p
style="margin-right:0in;margin-left:0in;font-size:12pt;font-family:"Times
New Roman", serif;margin:0in">
<span
style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <o:p> </o:p></span></p>
<p
style="margin-right:0in;margin-left:0in;font-size:12pt;font-family:"Times
New Roman", serif;margin:0in">
<span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">1. Is
the application vulnerable to the Log4J vulnerability?<o:p>
<br>
</o:p></span></p>
</div>
</blockquote>
<br>
TeXworks is written in C++, not in Java, so it does not use Log4J.<br>
<br>
It does use other libraries, such as Qt, poppler, and hunspell,
which to my knowledge are not written in Java either, but those are
maintained by their separate development teams.<br>
<br>
<blockquote type="cite"
cite="mid:PH0PR04MB790057CA597141337B60AAB0BD759@PH0PR04MB7900.namprd04.prod.outlook.com">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif;
font-size: 12pt; color: rgb(0, 0, 0);">
<p
style="margin-right:0in;margin-left:0in;font-size:12pt;font-family:"Times
New Roman", serif;margin:0in">
<span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">2. If
it is vulnerable:<o:p> </o:p></span></p>
<p
style="margin-right:0in;margin-left:.5in;font-size:12pt;font-family:"Times
New Roman", serif;margin-top:0in;margin-bottom:0in">
<span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">a.
Is there a patch available to remedy the vulnerability?<o:p> </o:p></span></p>
<p
style="margin-right:0in;margin-left:.5in;font-size:12pt;font-family:"Times
New Roman", serif;margin-top:0in;margin-bottom:0in">
<span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">b. Do
you have a work-around that we can apply?<o:p> </o:p></span></p>
<p
style="margin-right:0in;margin-left:.5in;font-size:12pt;font-family:"Times
New Roman", serif;margin-top:0in;margin-bottom:0in">
<span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">c. If
there isn't a patch available, when can we expect a patch to
be released?<o:p> <br>
</o:p></span></p>
</div>
</blockquote>
<br>
Not applicable.<br>
<br>
<blockquote type="cite"
cite="mid:PH0PR04MB790057CA597141337B60AAB0BD759@PH0PR04MB7900.namprd04.prod.outlook.com">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif;
font-size: 12pt; color: rgb(0, 0, 0);">
<p
style="margin-right:0in;margin-left:0in;font-size:12pt;font-family:"Times
New Roman", serif;margin:0in">
<span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">3.
Is there a web page with Log4J status? If so, please provide
the link.<o:p> <br>
</o:p></span></p>
</div>
</blockquote>
<br>
No.<br>
<br>
Best regards,<br>
Stefan<br>
</body>
</html>