# Log4j - do we need to be concerned? **URL:** \ **Category:** RapidWeaver Classic\ **Created:** [December 14, 2021, 4:28pm UTC](https://forums.realmacsoftware.com/t/log4j-do-we-need-to-be-concerned/41754 "2021-12-14T16:28:38Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![dave](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/dave/32/147_2.png) [@dave](https://forums.realmacsoftware.com/u/dave)\ **Post date:** [December 14, 2021, 4:28pm UTC](https://forums.realmacsoftware.com/t/log4j-do-we-need-to-be-concerned/41754/1 "2021-12-14T16:28:38Z")
I’ve been asked by the head of our IT department if we need to have concerns around our websites and Log4j. All of my medical imaging websites are Rw/Foundation (1 or 6) - based, hosted on a DreamHost Dedicated Server and flow through Cloudflare. We long ago siloed off our patient-facing sites from any/all operational sites (i.e., sites that we ‘run our business’ on). Hoping someone who really knows (e.g., @dan, @joeworkman, @Isaiah, etc.,) can weigh in. ---
**Author:** ![instacks](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/instacks/32/23339_2.png) [@instacks](https://forums.realmacsoftware.com/u/instacks)\ **Post date:** [December 14, 2021, 4:53pm UTC](https://forums.realmacsoftware.com/t/log4j-do-we-need-to-be-concerned/41754/2 "2021-12-14T16:53:44Z")
Bottom line: no. If you just have a web hosting plan, no Java process will be executed there. As you have a dedicated server, there could be Java processes running. Try searching on the server for _log4j_ for a initial idea if the library is located on your server. Still, this cannot be anything related to RW generated websites. ---
**Author:** ![dave](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/dave/32/147_2.png) [@dave](https://forums.realmacsoftware.com/u/dave)\ **Post date:** [December 14, 2021, 4:57pm UTC](https://forums.realmacsoftware.com/t/log4j-do-we-need-to-be-concerned/41754/3 "2021-12-14T16:57:21Z")
Thank you Jannis. I only have Rw sites running on my Dedicated Server. I’ll search for log4j to see if DreamHost has the library on the server (they manage our server for us), but it’s reassuring to know that it cannot be anything related to RW generated websites. Cheers! ---
**Author:** ![TemplateRepo](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/templaterepo/32/17547_2.png) [@TemplateRepo](https://forums.realmacsoftware.com/u/TemplateRepo)\ **Post date:** [December 14, 2021, 5:31pm UTC](https://forums.realmacsoftware.com/t/log4j-do-we-need-to-be-concerned/41754/4 "2021-12-14T17:31:07Z")
I don’t know, or understand, the details, but I do know my server guy ran an update yesterday to Apache on all my servers. I think this is related to log4j. ---
**Author:** ![instacks](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/instacks/32/23339_2.png) [@instacks](https://forums.realmacsoftware.com/u/instacks)\ **Post date:** [December 14, 2021, 5:32pm UTC](https://forums.realmacsoftware.com/t/log4j-do-we-need-to-be-concerned/41754/5 "2021-12-14T17:32:25Z")
If it’s a Java process, this can be the case, yes. ---
**Author:** ![joeworkman](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/joeworkman/32/23780_2.png) [@joeworkman](https://forums.realmacsoftware.com/u/joeworkman)\ **Post date:** [December 14, 2021, 6:05pm UTC](https://forums.realmacsoftware.com/t/log4j-do-we-need-to-be-concerned/41754/6 "2021-12-14T18:05:17Z")
log4j is a popular error logging module for the Java programming language. You should not be worried about this for anything related to RapidWeaver. I also highly doubt that any hosting company is using Java for your hosting. I guess it’s possible that they could use it for backend management apps. You could pin your host about that. ---
**Author:** ![dave](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/dave/32/147_2.png) [@dave](https://forums.realmacsoftware.com/u/dave)\ **Post date:** [December 14, 2021, 7:12pm UTC](https://forums.realmacsoftware.com/t/log4j-do-we-need-to-be-concerned/41754/7 "2021-12-14T19:12:24Z")
Thanks again Jannis & Joe - DreamHost wrote back, and I quote: “_By default we do not have the packages in question installed, however if customers deployed JAR files, that could be a potential risk_.” They double-checked: there was no issue with our Dedicated Server. ---
**Author:** ![system](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/system/32/25301_2.png) [@system](https://forums.realmacsoftware.com/u/system)\ **Post date:** [January 14, 2022, 5:12am UTC](https://forums.realmacsoftware.com/t/log4j-do-we-need-to-be-concerned/41754/8 "2022-01-14T05:12:28Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.