<div dir="ltr"><div style="color:black;background-color:white"><span style="font-family:arial,sans-serif"><font size="2">As one of the points of contact at CERT for LLVM, I've received messages
 from CERT asking if LLVM is affected by any of the recent log4j 
vulnerabilities: <b>CVE-2021-45105</b>, <b>CVE-2021-4104</b>, <b>CVE-2021-45046</b> and <b>CVE-2021-44228</b>. It seems
CERT is reaching out to every single vendor registered with them about these vulnerabilities.</font></span></div><span style="font-family:arial,sans-serif"><font size="2">
</font></span><div style="color:black;background-color:white">
<span style="font-family:arial,sans-serif"><font size="2"><br aria-hidden="true"></font></span>

</div><span style="font-family:arial,sans-serif"><font size="2">
</font></span><div style="color:black;background-color:white"><span style="font-family:arial,sans-serif"><font size="2">
As far as I know no LLVM sub-project uses Java, so LLVM should not be vulnerable to any of the log4j issues.</font></span></div><span style="font-family:arial,sans-serif"><font size="2">
</font></span><div style="color:black;background-color:white"><span style="font-family:arial,sans-serif"><font size="2">
Before I go ahead and record in the CERT database that LLVM is not 
affected, I thought I'd just double check if anyone is aware of any use
 of Java in LLVM and/or any potential way LLVM could be affected by the 
recent log4j issues?</font></span></div><div style="color:black;background-color:white"><span style="font-family:arial,sans-serif"><font size="2"><br></font></span></div><div style="color:black;background-color:white"><span style="font-family:arial,sans-serif"><font size="2">Thanks,</font></span></div><div style="color:black;background-color:white"><span style="font-family:arial,sans-serif"><font size="2"><br></font></span></div><div style="color:black;background-color:white"><span style="font-family:arial,sans-serif"><font size="2">Kristof<br></font></span></div>
<div style="color:black;font-size:11pt;font-family:Calibri,Arial,Helvetica,sans-serif;background-color:white">
</div></div>