Log4Shell issues?

[jrp]

Hi,

Could I ask that someone from Agisoft give an official statement confirming whether or not any Agisoft products are affected by the Log4Shell vulnerability.

I need to gather this information for an institutional security review, and I felt it was worth asking here incase it helps anyone else in the same posiiton.

I'm not expecting any issues, but I only use the local network infrastructure not the cloud infrastucture, so I'm not sure what it runs on.

Also, appologies if this is already up here somewhere, I can't find it if it is.

Thanks.

[oshee]

I second the request for some info on this

[Alexey Pasumansky]

Hello!

Metashape doesn't use Log4J, as Metashape is developed using C++, while Log4J is a Java framework. So the mentioned vulnerability doesn't apply to Metashape software.

There is a separate Metashape Java Library that allows to use Metashape C++ engine from Java, but it also doesn't use Log4J framework.