[x3d-public] X3DJSAIL release: log4j update, Blender 3.0 compatibility
John Carlson
yottzumm at gmail.com
Sat Jan 1 16:43:11 PST 2022
Log4j 1 references found in these files:
www.web3d.org/x3d/stylesheets$ find . -type f -name '*xml'|xargs grep -l
log4j-1.2.15.jar
./java/examples/build.xml
./java/build.xml
Also at
./java/lib/log4j-1.2.15.jar
I don't know the impact of adding log4j 1 to an ant build? Could a log
entry from ant trigger a log4j vulnerability?
If you don't see log4j-1.2.15 in those places, let me know.
Thanks!
John
On 12/30/21 17:41, Brutzman, Donald (Don) (CIV) wrote:
>
> Am happy to announce an updated release for X3DJSAIL.
>
> * X3D Java Scene Access Interface Library (X3DJSAIL)
> * https://www.web3d.org/specifications/java/X3DJSAIL.html
> * “X3D Java Scene Access Interface Library (X3DJSAIL) supports
> programmers with standards-based X3D Java interfaces and objects,
> all as open source.”
>
> Upgraded jars in this update addresses the recent potential security
> vulnerability found in Log4J logging library. Close study uncovered
> no evidence or rationale that the log4j library vulnerability might
> have had any exposure within Xj3DJSAIL, but (similar to other major
> Java libraries) we have nevertheless acted out of an abundance of
> caution. Details at
>
> * Apache Log4j 2
> * https://logging.apache.org/log4j/2.x
>
> Other features:
>
> * Compatibility with Blender 3.0, providing export capabilities such
> as programmatic viewpoint image capture.
> * Testing of HAnimJoint fields for ulimit llimit and stiffness as
> SFVec3f with default values or “0 0 0” to be consistent with
> reference specification Humanoid Animation (HAnim) version 2.0.
>
> Special thanks to John Carlson for in-depth testing and scrutiny that
> has helped with these advancements.
>
> Despite all challenges, it has been a great year for advancing X3D4
> programming in Java, Python, Semantic Web query, and other
> approaches. We hope that everyone enjoys continuing progress, and
> welcome all questions and issue reports.
>
> Have fun with X3D in 2022, Happy New Year! 8)
>
> all the best, Don
>
> --
>
> Don Brutzman Naval Postgraduate School, Code USW/Br brutzman at nps.edu
>
> Watkins 270, MOVES Institute, Monterey CA 93943-5000 USA +1.831.656.2149
>
> X3D graphics, virtual worlds, navy robotics https://
> faculty.nps.edu/brutzman
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://web3d.org/pipermail/x3d-public_web3d.org/attachments/20220101/43d896ea/attachment.html>
More information about the x3d-public
mailing list