Jump to content
Ultimaker Community of 3D Printing Experts

Java log4j


Arthur Haga
 Share

Recommended Posts

=================gr5 - google translate (this part of the forum is supposed to be in english) ==================

Dear Sir or Madam,

 

 

Last weekend an important vulnerability was revealed in a widely used Java tool (log4j).

Within the Haga, an inventory is now being made as soon as possible of which devices/applications are used by us (also from external suppliers) that may be sensitive to this.

 

The following Cura devices/applications are known to us, among others:

· Ultimate Maker 3

 

We have a number of questions, which we would like to have an answer to as soon as possible (ideally within 24 hours):

1. Does Ultimaker have an idea whether the above-mentioned devices/applications use log4j, and if so, which version?

2. If the devices/applications are sensitive, how soon will this be resolved by patching/update to version 2.15?

 

 

We would like to receive an answer from you shortly (before 16 Dec 21).

 

Arthur van der Mast

hague hospital

The Hague

 

=============== original =================

Dear Sir or Madam,

 

 

Afgelopen weekend is er een belangrijke kwetsbaarheid bekend geworden in een veel gebruikte Java-tool (log4j).

Binnen het Haga wordt er nu op zo kort mogelijke termijn geïnventariseerd welke apparaten/applicaties bij ons gebruikt worden (ook van externe leveranciers) die hier misschien gevoelig voor zijn.

 

Oa de volgende apparaten/applicaties van Cura zijn bij ons bekend:

·         Ultimaker 3

 

We hebben hierbij een aantal vragen, waar we graag zo snel mogelijk (idealiter binnen 24 uur) antwoord op willen hebben:

1.       Heeft Ultimaker in beeld of de hierboven genoemde apparaten/applicaties gebruik maken van log4j, en zo ja, welke versie?

2.       Als de apparaten/applicaties gevoelig zijn, op welke termijn zal dit verholpen zijn dmv patching/update naar versie 2.15?

 

 

Wij zouden graag op korte termijn (voor 16 dec 21) een antwoord van u willen hebben.

 

Arthur van der Mast

Hagaziekhuis

Den haag

 

  • Link to post
    Share on other sites

    JAVA is not used for the development of our printer firmware, CURA slicer, nor for the cloud applications (Digital Factory, Marketplace, Contributor portal, Account services, eLearning), so in no way our products are impacted by the Log4J vulnerability

    • Like 6
    Link to post
    Share on other sites

    Create an account or sign in to comment

    You need to be a member in order to leave a comment

    Create an account

    Sign up for a new account in our community. It's easy!

    Register a new account

    Sign in

    Already have an account? Sign in here.

    Sign In Now
     Share

    • Our picks

      • New here? Get ahead with a free onboarding course
        Hi,
         
        Often getting started is the most difficult part of any process. A good start sets you up for success and saves you time and energy that could be spent elsewhere. That is why we have a onboarding course ready for
        Ultimaker S5 Pro Bundle, Ultimaker S5, Ultimaker S3 Ultimaker 2+ Connect.   
        They're ready for you on the Ultimaker Academy platform. All you need to do to gain access is to register your product to gain free access. 
        Ready? Register your product here in just 60 seconds.
          • Like
        • 11 replies
    ×
    ×
    • Create New...