Rtools4 and log4j vulnerabilities?

r-windows / rtools-installer

Builds the rtools40 installer

https://cran.r-project.org/bin/windows/Rtools/

27 stars 2 forks source link

Rtools4 and log4j vulnerabilities? #21

Closed jhollist closed 2 years ago

jhollist commented 2 years ago

I am completely out of my element with this question, but I've been pinged at work (because I'm often "the R guy" there) about log4j vulnerabilities and Rtools4. From what I can see it doesn't look like this is an issue as there I don't see any Java in Rtools4. Just wondering if you could confirm this, point me to something I could use to test for myself, or point me to a better place to ask.

Thanks and apologies!

jhollist commented 2 years ago

@hrbrmstr to the rescue! https://twitter.com/hrbrmstr/status/1481286247607844868 Will close this.

jeroen commented 2 years ago

Indeed there is no Java in R or rtools.