Skip to main content

The Qt Company Products Are Not Affected by CVE-2021-44228 (Log4j vulnerability)

Dec 15, 2021

by Tuukka Turunen
Comments

None of The Qt Company products are affected by the Apache Log4j vulnerability (CVE-2021-44228).

The vulnerable or any other versions of the Apache log4j library are not used in the Qt framework, Qt Creator, Qt Design Studio, Squish, Coco, Test Center, Qt for MCU or in any other products offered by The Qt Company. Therefore, no actions are required for users of Qt or any of the other products of The Qt Company due to the Log4j vulnerability. 

Like many others, also for us some of our IT systems were affected and we have taken the needed actions to address the vulnerability. No attacks using the vulnerability have been detected in any of our system or systems hosted for us by others. 

If you have any questions or concerns related to this, please contact our support team(s). 

 

Blog Topics

Comments

Subscribe to our blog

Try Qt 6.11 Now!

Download the latest release here: www.qt.io/download

Qt 6.11 is now available, with new features and improvements for application developers and device creators.

We're Hiring

Check out all our open positions here and follow us on Instagram to see what it's like to be #QtPeople.

Related Articles

Security advisory: Untrusted Search Path vulnerability in OpenSSL backend certificate loading mechanism of Qt

Security advisory: Untrusted Search Path vulnerability in OpenSSL backend certificate loading mechanism of Qt

Untrusted Search Path vulnerability in the OpenSSL backend certificate..

Read Article
Security advisory: Type confusion and heap-buffer-overflow vulnerability in Qt SVG marker handling impacts Qt

Security advisory: Type confusion and heap-buffer-overflow vulnerability in Qt SVG marker handling impacts Qt

Type Confusion and Heap-based Buffer Overflow vulnerability in the SVG..

Read Article
Security advisory: QML Code Injection in VectorImage Component in Qt declarative module impacts Qt

Security advisory: QML Code Injection in VectorImage Component in Qt declarative module impacts Qt

Improper Control of Generation of Code ('Code Injection') vulnerability in..

Read Article