SNAP not affected by log4j vulnerability

snap
#1

Hello,
In the news you can read that the library log4j has a huge security vulnerability.
Because this is related to Java and SNAP uses Java some might wonder if SNAP is also affected.
I can reassure you. SNAP does not use the log4j library. So, you are still safe.
In risk are webservices which use this library. SNAP is neither a webservice nor does it use log4j.

What is Log4J vulnerability? All about logging library that has affected digital systems (republicworld.com)

7 Likes
#2

thanks for the quick update on this!

#3

Thanks for this message

#4

Beware the add-ons. The NASA SeaDAS Toolbox Kit Module does use log4j. I use it to read NASA OBPG level-2 files.

2 Likes