Are colibri stats also affected by log4j exposure?

[netFLOw]

Hi all,

we are using colibri stats. Are they also affected by the log4j exposure?
I would be very grateful for help.

Kinds regards

Florian

[Freddie]

CVE-2021-44228 and Jitsi components

Summary Some of the Jitsi components load a version of log4j which is affected by CVE-2021-44228. According to our review, jigasi and older jitsi-videobridge instances configured to use callstats may be affected, while all other jitsi components and jigasi instances with no callstats configuration are not affected. Mitigation Jigasi instances with callstats enabled should be updated to 1.1-216. Jitsi-videobridge instances older than 2.1-504 (May 2021) with callstats enabled should be updated…

[damencho]

Nope.

[netFLOw]

Thank you very much for your quick replies!!