<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:DengXian;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"\@DengXian";
panose-1:2 1 6 0 3 1 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">We are still getting those vulnerabilities related to log4j in our As server by our vulnerability scanner (we are running As 3.2.0). The scanner found these files:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:8.5pt;font-family:"Arial",sans-serif;color:black;background:white">gems/gems/ladle-0.2.0-java/lib/ladle/apacheds/log4j-1.2.14.jar</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:8.5pt;font-family:"Arial",sans-serif;color:black;background:white">gems/gems/mizuno-0.6.11/lib/java/log4j-1.2.17.jar</span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I understand from earlier threads about this that these are for testing and not in use by the AS application. Is this true, and if so, can we simply remove the
<span style="font-size:8.5pt;font-family:"Arial",sans-serif;color:black;background:white">
gems/gems/ladle-0.2.0-java/lib/ladle and mizuno-0.6.11 folders? Will it affect AS in any way?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.5pt;font-family:"Arial",sans-serif;color:black;background:white"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.5pt;font-family:"Arial",sans-serif;color:black;background:white">Thanks</span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">---<o:p></o:p></p>
<p class="MsoNormal"><b><i>Bin Zhang (he/him/his)<o:p></o:p></i></b></p>
<p class="MsoNormal">Systems and Technology Librarian<o:p></o:p></p>
<p class="MsoNormal">Library Systems & IT Services, University Library<o:p></o:p></p>
<p class="MsoNormal">California State University, Sacramento<o:p></o:p></p>
<p class="MsoNormal"><a href="mailto:bzhang@csus.edu"><span style="color:#0563C1">bzhang@csus.edu</span></a> | +1 (916) 278-5664<o:p></o:p></p>
<p class="MsoNormal">Zoom: <a href="https://csus.zoom.us/my/bzhang"><span style="color:#0563C1">https://csus.zoom.us/my/bzhang</span></a><o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>