LyX ⇒ Has LyX been affected by the recent log4j vulnerability?

[lkiltz]

Dear board members,

Can you tell me if LyX has been affected by the recent log4j vulnerability?

Best regards,
Lothar

[Ijon Tichy]

• What is Log4Shell?
• What is Log4J?
• Is LyX a server software, that provides remote (HTTP) access? No, it is a local application.
• Is LyX a Java application? No, as you can see sourced, it is a C++ application.
• Does LyX use any Java logging frameworks? No

But if you really fear, that the local C++ application LyX could be affected by Log4Shell, you should not ask other users, but either inspect the code or ask the developers.

(A completely different question would be, whether http://www.lyx.org is somehow affected by Log4Shell. But also nothing the user community could answer.)