[Pandas-dev] Pandas Support For TVA

[Wes McKinney]

FWIW, I do not believe that pandas contains or depends on any Java
code (log4j is a Java component).

On Fri, Dec 17, 2021 at 5:20 AM Marc Garcia <garcia.marc at gmail.com> wrote:
>
> Thanks for your email Dalton. We only offer this sort of support via Tidelift. If you are a subscriptor, please send us this via Tidelift. If you are not, the only options we can offer is to become one, use pandas without support, or stop using pandas.
>
> I hope this helps, cheers!
>
> On Fri, 17 Dec 2021, 08:18 Gilreath, Dalton E via Pandas-dev, <pandas-dev at python.org> wrote:
>>
>> Pandas support,
>>
>>
>>
>> You are receiving this message because a cybersecurity vulnerability has been identified and TVA is taking precautions to remedy any applications which may be affected. Pandas is currently being used by TVA. TVA is requesting confirmation on whether the Apache Log4j utility is present as part of this application. If Log4j is being utilized please provide the version and remediation steps your company plans on taking.
>>
>>
>>
>> Please respond to this email within 48 hours and advise if this file is present. If it is not, no further action is necessary except responding with confirmation that it does not exist. If it is present, please advise on if you have a patch available to remediate this issue. We must have a patch to continue use of this application. If no patch is available, the application must be turned off by December 24, 2021 to ensure TVA system security.
>>
>>
>>
>> Your information should be sent to me at degilreath at tva.gov. Feel free to contact me with any questions.
>>
>>
>>
>> Dalton Gilreath
>> Manager, Product Delivery – Maximo
>> Technology and Innovation
>>
>> W. 423-751-8029    M. 423-785-7215    E. degilreath at tva.gov
>> 1101 Market Street, Chattanooga, TN 37402
>>
>>
>>
>> NOTICE: This electronic message transmission contains information that may be TVA SENSITIVE, TVA RESTRICTED, or TVA CONFIDENTIAL. Any misuse or unauthorized disclosure can result in both civil and criminal penalties. If you are not the intended recipient, be aware that any disclosure, copying, distribution, or use of the content of this information is prohibited. If you have received this communication in error, please notify me immediately by email and delete the original message.
>>
>>
>>
>> _______________________________________________
>> Pandas-dev mailing list
>> Pandas-dev at python.org
>> https://mail.python.org/mailman/listinfo/pandas-dev
>
> _______________________________________________
> Pandas-dev mailing list
> Pandas-dev at python.org
> https://mail.python.org/mailman/listinfo/pandas-dev