Before using Kopia I wanted to ask if there has been any issues with the Log4J vulnerability?
Specifically I am referring to the zero-day vulnerability that was identified in the Apache Log4j logging software on December 10 (CVE-2021-44228), the Log4j vulnerability identified on December 14 ( CVE-2021-45046 ), the third which was identified on December 17 ( CVE-2021-45105 ), and the fourth which was identified on December 29 ( CVE-2021-44832 )…
Kopia is written in Golang, so my answer would be: No Java parts involved, thus no log4j dependency.
1 Like
Thanks very much for the update much appreciated.