Is Cryptomator vulnerable to Java log4j exploit?

Cryptomator uses Java libraries such as JCE. Does it use log4j library which is affected by the recent CVE10 critical vulnerability?

No, it doesn’t. Cryptomator uses slf4j and logback, see dependencies for logging.

5 Likes

Just for the record: The same applies for the Android app as log4j isn’t included (see below) and Android should not be affected by this vulnerability in general.

List of all dependencies
playstoreReleaseCompileClasspath - Compile classpath for compilation 'playstoreRelease' (target  (androidJvm)).
+--- javax.annotation:jsr250-api:1.0
+--- org.jetbrains.kotlin:kotlin-android-extensions-runtime:1.6.0
|    \--- org.jetbrains.kotlin:kotlin-stdlib:1.6.0
|         +--- org.jetbrains:annotations:13.0 -> 20.1.0
|         \--- org.jetbrains.kotlin:kotlin-stdlib-common:1.6.0
+--- project :generator-api
+--- project :util
|    +--- org.cryptomator:cryptolib:2.0.2
|    |    +--- org.cryptomator:siv-mode:1.4.3
|    |    +--- com.google.code.gson:gson:2.8.7 -> 2.8.9
|    |    +--- com.google.guava:guava:30.1.1-jre
|    |    |    +--- com.google.guava:failureaccess:1.0.1
|    |    |    +--- com.google.code.findbugs:jsr305:3.0.2
|    |    |    +--- org.checkerframework:checker-qual:3.8.0
|    |    |    +--- com.google.errorprone:error_prone_annotations:2.5.1
|    |    |    \--- com.google.j2objc:j2objc-annotations:1.3
|    |    \--- org.slf4j:slf4j-api:1.7.31
|    +--- com.google.dagger:dagger:2.40.5
|    |    \--- javax.inject:javax.inject:1
|    +--- com.jakewharton.timber:timber:5.0.1
|    |    \--- org.jetbrains.kotlin:kotlin-stdlib:1.5.21 -> 1.6.0 (*)
|    +--- androidx.appcompat:appcompat:1.3.1
|    |    +--- androidx.annotation:annotation:1.1.0 -> 1.2.0
|    |    +--- androidx.core:core:1.5.0 -> 1.6.0
|    |    |    +--- androidx.annotation:annotation:1.2.0
|    |    |    +--- androidx.annotation:annotation-experimental:1.1.0
|    |    |    +--- androidx.lifecycle:lifecycle-runtime:2.0.0 -> 2.3.1
|    |    |    |    +--- androidx.lifecycle:lifecycle-common:2.3.1
|    |    |    |    |    \--- androidx.annotation:annotation:1.1.0 -> 1.2.0
|    |    |    |    +--- androidx.arch.core:core-common:2.1.0
|    |    |    |    |    \--- androidx.annotation:annotation:1.1.0 -> 1.2.0
|    |    |    |    \--- androidx.annotation:annotation:1.1.0 -> 1.2.0
|    |    |    \--- androidx.versionedparcelable:versionedparcelable:1.1.1
|    |    |         +--- androidx.annotation:annotation:1.1.0 -> 1.2.0
|    |    |         \--- androidx.collection:collection:1.0.0 -> 1.1.0
|    |    |              \--- androidx.annotation:annotation:1.1.0 -> 1.2.0
|    |    +--- androidx.cursoradapter:cursoradapter:1.0.0
|    |    |    \--- androidx.annotation:annotation:1.0.0 -> 1.2.0
|    |    +--- androidx.activity:activity:1.2.4
|    |    |    +--- androidx.annotation:annotation:1.1.0 -> 1.2.0
|    |    |    +--- androidx.core:core:1.1.0 -> 1.6.0 (*)
|    |    |    +--- androidx.lifecycle:lifecycle-runtime:2.3.1 (*)
|    |    |    +--- androidx.lifecycle:lifecycle-viewmodel:2.3.1
|    |    |    |    \--- androidx.annotation:annotation:1.1.0 -> 1.2.0
|    |    |    +--- androidx.savedstate:savedstate:1.1.0
|    |    |    |    \--- androidx.annotation:annotation:1.1.0 -> 1.2.0
|    |    |    \--- androidx.lifecycle:lifecycle-viewmodel-savedstate:2.3.1
|    |    |         +--- androidx.annotation:annotation:1.0.0 -> 1.2.0
|    |    |         +--- androidx.savedstate:savedstate:1.1.0 (*)
|    |    |         +--- androidx.lifecycle:lifecycle-livedata-core:2.3.1
|    |    |         |    \--- androidx.lifecycle:lifecycle-common:2.3.1 (*)
|    |    |         \--- androidx.lifecycle:lifecycle-viewmodel:2.3.1 (*)
|    |    +--- androidx.fragment:fragment:1.3.6
|    |    |    +--- androidx.annotation:annotation:1.1.0 -> 1.2.0
|    |    |    +--- androidx.core:core:1.2.0 -> 1.6.0 (*)
|    |    |    +--- androidx.collection:collection:1.1.0 (*)
|    |    |    +--- androidx.viewpager:viewpager:1.0.0
|    |    |    |    +--- androidx.annotation:annotation:1.0.0 -> 1.2.0
|    |    |    |    +--- androidx.core:core:1.0.0 -> 1.6.0 (*)
|    |    |    |    \--- androidx.customview:customview:1.0.0
|    |    |    |         +--- androidx.annotation:annotation:1.0.0 -> 1.2.0
|    |    |    |         \--- androidx.core:core:1.0.0 -> 1.6.0 (*)
|    |    |    +--- androidx.loader:loader:1.0.0
|    |    |    |    +--- androidx.annotation:annotation:1.0.0 -> 1.2.0
|    |    |    |    +--- androidx.core:core:1.0.0 -> 1.6.0 (*)
|    |    |    |    +--- androidx.lifecycle:lifecycle-livedata:2.0.0
|    |    |    |    |    +--- androidx.arch.core:core-runtime:2.0.0 -> 2.1.0
|    |    |    |    |    |    +--- androidx.annotation:annotation:1.1.0 -> 1.2.0
|    |    |    |    |    |    \--- androidx.arch.core:core-common:2.1.0 (*)
|    |    |    |    |    +--- androidx.lifecycle:lifecycle-livedata-core:2.0.0 -> 2.3.1 (*)
|    |    |    |    |    \--- androidx.arch.core:core-common:2.0.0 -> 2.1.0 (*)
|    |    |    |    \--- androidx.lifecycle:lifecycle-viewmodel:2.0.0 -> 2.3.1 (*)
|    |    |    +--- androidx.activity:activity:1.2.4 (*)
|    |    |    +--- androidx.lifecycle:lifecycle-livedata-core:2.3.1 (*)
|    |    |    +--- androidx.lifecycle:lifecycle-viewmodel:2.3.1 (*)
|    |    |    +--- androidx.lifecycle:lifecycle-viewmodel-savedstate:2.3.1 (*)
|    |    |    +--- androidx.savedstate:savedstate:1.1.0 (*)
|    |    |    \--- androidx.annotation:annotation-experimental:1.0.0 -> 1.1.0
|    |    +--- androidx.appcompat:appcompat-resources:1.3.1
|    |    |    +--- androidx.annotation:annotation:1.1.0 -> 1.2.0
|    |    |    +--- androidx.core:core:1.0.1 -> 1.6.0 (*)
|    |    |    +--- androidx.vectordrawable:vectordrawable:1.1.0
|    |    |    |    +--- androidx.annotation:annotation:1.1.0 -> 1.2.0
|    |    |    |    +--- androidx.core:core:1.1.0 -> 1.6.0 (*)
|    |    |    |    \--- androidx.collection:collection:1.1.0 (*)
|    |    |    \--- androidx.vectordrawable:vectordrawable-animated:1.1.0
|    |    |         +--- androidx.vectordrawable:vectordrawable:1.1.0 (*)
|    |    |         +--- androidx.interpolator:interpolator:1.0.0
|    |    |         |    \--- androidx.annotation:annotation:1.0.0 -> 1.2.0
|    |    |         \--- androidx.collection:collection:1.1.0 (*)
|    |    +--- androidx.drawerlayout:drawerlayout:1.0.0
|    |    |    +--- androidx.annotation:annotation:1.0.0 -> 1.2.0
|    |    |    +--- androidx.core:core:1.0.0 -> 1.6.0 (*)
|    |    |    \--- androidx.customview:customview:1.0.0 (*)
|    |    \--- androidx.savedstate:savedstate:1.1.0 (*)
|    \--- androidx.annotation:annotation:1.2.0
+--- project :domain
|    +--- com.jakewharton.timber:timber:5.0.1 (*)
|    +--- com.google.dagger:dagger:2.40.5 (*)
|    +--- io.reactivex.rxjava2:rxjava:2.2.21
|    |    \--- org.reactivestreams:reactive-streams:1.0.3
|    +--- org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.6.0
|    |    +--- org.jetbrains.kotlin:kotlin-stdlib:1.6.0 (*)
|    |    \--- org.jetbrains.kotlin:kotlin-stdlib-jdk7:1.6.0
|    |         \--- org.jetbrains.kotlin:kotlin-stdlib:1.6.0 (*)
|    \--- io.jsonwebtoken:jjwt-api:0.11.2
+--- project :data
|    +--- org.greenrobot:greendao:3.3.0
|    |    \--- org.greenrobot:greendao-api:3.3.0
|    +--- io.jsonwebtoken:jjwt-api:0.11.2
|    \--- io.minio:minio:8.3.4
|         +--- com.carrotsearch.thirdparty:simple-xml-safe:2.7.1
|         +--- com.google.guava:guava:30.1.1-jre (*)
|         +--- com.squareup.okhttp3:okhttp:4.8.1 -> 5.0.0-alpha.3
|         |    +--- com.squareup.okio:okio:3.0.0
|         |    |    \--- com.squareup.okio:okio-jvm:3.0.0
|         |    |         +--- org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.5.31 -> 1.6.0 (*)
|         |    |         \--- org.jetbrains.kotlin:kotlin-stdlib-common:1.5.31 -> 1.6.0
|         |    \--- org.jetbrains.kotlin:kotlin-stdlib:1.5.31 -> 1.6.0 (*)
|         +--- com.fasterxml.jackson.core:jackson-annotations:2.11.2
|         +--- com.fasterxml.jackson.core:jackson-core:2.11.2
|         +--- com.fasterxml.jackson.core:jackson-databind:2.11.2
|         |    +--- com.fasterxml.jackson.core:jackson-annotations:2.11.2
|         |    \--- com.fasterxml.jackson.core:jackson-core:2.11.2
|         \--- org.bouncycastle:bcprov-jdk15on:1.69
+--- com.google.dagger:dagger:2.40.5 (*)
+--- androidx.appcompat:appcompat:1.3.1 (*)
+--- androidx.recyclerview:recyclerview:1.2.1
|    +--- androidx.annotation:annotation:1.1.0 -> 1.2.0
|    +--- androidx.core:core:1.3.2 -> 1.6.0 (*)
|    \--- androidx.customview:customview:1.0.0 (*)
+--- com.google.android.material:material:1.4.0
|    +--- androidx.annotation:annotation:1.0.1 -> 1.2.0
|    +--- androidx.appcompat:appcompat:1.1.0 -> 1.3.1 (*)
|    +--- androidx.cardview:cardview:1.0.0
|    |    \--- androidx.annotation:annotation:1.0.0 -> 1.2.0
|    +--- androidx.coordinatorlayout:coordinatorlayout:1.1.0
|    |    +--- androidx.annotation:annotation:1.1.0 -> 1.2.0
|    |    +--- androidx.core:core:1.1.0 -> 1.6.0 (*)
|    |    +--- androidx.customview:customview:1.0.0 (*)
|    |    \--- androidx.collection:collection:1.0.0 -> 1.1.0 (*)
|    +--- androidx.constraintlayout:constraintlayout:2.0.1
|    |    +--- androidx.appcompat:appcompat:1.2.0 -> 1.3.1 (*)
|    |    +--- androidx.core:core:1.3.1 -> 1.6.0 (*)
|    |    \--- androidx.constraintlayout:constraintlayout-solver:2.0.1
|    +--- androidx.core:core:1.5.0 -> 1.6.0 (*)
|    +--- androidx.dynamicanimation:dynamicanimation:1.0.0
|    |    +--- androidx.core:core:1.0.0 -> 1.6.0 (*)
|    |    +--- androidx.collection:collection:1.0.0 -> 1.1.0 (*)
|    |    \--- androidx.legacy:legacy-support-core-utils:1.0.0
|    |         +--- androidx.annotation:annotation:1.0.0 -> 1.2.0
|    |         +--- androidx.core:core:1.0.0 -> 1.6.0 (*)
|    |         +--- androidx.documentfile:documentfile:1.0.0 -> 1.0.1
|    |         |    \--- androidx.annotation:annotation:1.0.2 -> 1.2.0
|    |         +--- androidx.loader:loader:1.0.0 (*)
|    |         +--- androidx.localbroadcastmanager:localbroadcastmanager:1.0.0
|    |         |    \--- androidx.annotation:annotation:1.0.0 -> 1.2.0
|    |         \--- androidx.print:print:1.0.0
|    |              \--- androidx.annotation:annotation:1.0.0 -> 1.2.0
|    +--- androidx.annotation:annotation-experimental:1.0.0 -> 1.1.0
|    +--- androidx.fragment:fragment:1.0.0 -> 1.3.6 (*)
|    +--- androidx.lifecycle:lifecycle-runtime:2.0.0 -> 2.3.1 (*)
|    +--- androidx.recyclerview:recyclerview:1.0.0 -> 1.2.1 (*)
|    +--- androidx.transition:transition:1.2.0
|    |    +--- androidx.annotation:annotation:1.1.0 -> 1.2.0
|    |    +--- androidx.core:core:1.0.1 -> 1.6.0 (*)
|    |    \--- androidx.collection:collection:1.0.0 -> 1.1.0 (*)
|    +--- androidx.vectordrawable:vectordrawable:1.1.0 (*)
|    \--- androidx.viewpager2:viewpager2:1.0.0
|         +--- androidx.annotation:annotation:1.1.0 -> 1.2.0
|         +--- androidx.fragment:fragment:1.1.0 -> 1.3.6 (*)
|         +--- androidx.recyclerview:recyclerview:1.1.0 -> 1.2.1 (*)
|         +--- androidx.core:core:1.1.0 -> 1.6.0 (*)
|         \--- androidx.collection:collection:1.1.0 (*)
+--- project :subsampling-image-view
+--- com.simplecityapps:recyclerview-fastscroll:2.0.1
+--- androidx.core:core-ktx:1.6.0
|    +--- org.jetbrains.kotlin:kotlin-stdlib:1.5.10 -> 1.6.0 (*)
|    +--- androidx.annotation:annotation:1.1.0 -> 1.2.0
|    \--- androidx.core:core:1.6.0 (*)
+--- androidx.fragment:fragment-ktx:1.3.6
|    +--- androidx.fragment:fragment:1.3.6 (*)
|    +--- androidx.activity:activity-ktx:1.2.2
|    |    +--- androidx.activity:activity:1.2.2 -> 1.2.4 (*)
|    |    +--- androidx.core:core-ktx:1.1.0 -> 1.6.0 (*)
|    |    +--- androidx.lifecycle:lifecycle-runtime-ktx:2.3.1
|    |    |    +--- androidx.lifecycle:lifecycle-runtime:2.3.1 (*)
|    |    |    +--- org.jetbrains.kotlin:kotlin-stdlib:1.4.20 -> 1.6.0 (*)
|    |    |    +--- org.jetbrains.kotlinx:kotlinx-coroutines-android:1.4.1
|    |    |    |    +--- org.jetbrains.kotlinx:kotlinx-coroutines-core:1.4.1
|    |    |    |    |    \--- org.jetbrains.kotlinx:kotlinx-coroutines-core-jvm:1.4.1
|    |    |    |    |         +--- org.jetbrains.kotlin:kotlin-stdlib:1.4.0 -> 1.6.0 (*)
|    |    |    |    |         \--- org.jetbrains.kotlin:kotlin-stdlib-common:1.4.0 -> 1.6.0
|    |    |    |    \--- org.jetbrains.kotlin:kotlin-stdlib:1.4.0 -> 1.6.0 (*)
|    |    |    \--- androidx.annotation:annotation:1.0.0 -> 1.2.0
|    |    +--- androidx.lifecycle:lifecycle-viewmodel-ktx:2.3.1
|    |    |    +--- androidx.lifecycle:lifecycle-viewmodel:2.3.1 (*)
|    |    |    +--- org.jetbrains.kotlin:kotlin-stdlib:1.4.20 -> 1.6.0 (*)
|    |    |    \--- org.jetbrains.kotlinx:kotlinx-coroutines-android:1.4.1 (*)
|    |    +--- androidx.savedstate:savedstate-ktx:1.1.0
|    |    |    +--- androidx.savedstate:savedstate:1.1.0 (*)
|    |    |    \--- org.jetbrains.kotlin:kotlin-stdlib:1.4.20 -> 1.6.0 (*)
|    |    \--- org.jetbrains.kotlin:kotlin-stdlib:1.4.20 -> 1.6.0 (*)
|    +--- androidx.core:core-ktx:1.1.0 -> 1.6.0 (*)
|    +--- androidx.collection:collection-ktx:1.1.0
|    |    +--- org.jetbrains.kotlin:kotlin-stdlib:1.3.20 -> 1.6.0 (*)
|    |    \--- androidx.collection:collection:1.1.0 (*)
|    +--- androidx.lifecycle:lifecycle-livedata-core-ktx:2.3.1
|    |    +--- androidx.lifecycle:lifecycle-livedata-core:2.3.1 (*)
|    |    \--- org.jetbrains.kotlin:kotlin-stdlib:1.4.20 -> 1.6.0 (*)
|    +--- androidx.lifecycle:lifecycle-viewmodel-ktx:2.3.1 (*)
|    +--- androidx.savedstate:savedstate-ktx:1.1.0 (*)
|    \--- org.jetbrains.kotlin:kotlin-stdlib:1.4.20 -> 1.6.0 (*)
+--- androidx.viewpager:viewpager:1.0.0 (*)
+--- androidx.swiperefreshlayout:swiperefreshlayout:1.1.0
|    +--- androidx.annotation:annotation:1.1.0 -> 1.2.0
|    +--- androidx.core:core:1.1.0 -> 1.6.0 (*)
|    \--- androidx.interpolator:interpolator:1.0.0 (*)
+--- androidx.preference:preference:1.1.1
|    +--- androidx.appcompat:appcompat:1.1.0 -> 1.3.1 (*)
|    +--- androidx.core:core:1.1.0 -> 1.6.0 (*)
|    +--- androidx.fragment:fragment:1.2.4 -> 1.3.6 (*)
|    +--- androidx.recyclerview:recyclerview:1.0.0 -> 1.2.1 (*)
|    +--- androidx.annotation:annotation:1.1.0 -> 1.2.0
|    \--- androidx.collection:collection:1.0.0 -> 1.1.0 (*)
+--- androidx.biometric:biometric:1.1.0
|    +--- androidx.annotation:annotation:1.1.0 -> 1.2.0
|    +--- androidx.core:core:1.3.2 -> 1.6.0 (*)
|    \--- androidx.fragment:fragment:1.2.5 -> 1.3.6 (*)
+--- com.dropbox.core:dropbox-core-sdk:5.0.0
|    \--- com.fasterxml.jackson.core:jackson-core:2.7.4 -> 2.11.2
+--- com.microsoft.graph:microsoft-graph:2.10.0
|    +--- com.google.code.gson:gson:2.8.6 -> 2.8.9
|    \--- com.microsoft.graph:microsoft-graph-core:1.0.9
|         \--- com.squareup.okhttp3:okhttp:3.12.1 -> 5.0.0-alpha.3 (*)
+--- io.reactivex.rxjava2:rxjava:2.2.21 (*)
+--- io.reactivex.rxjava2:rxandroid:2.1.1
|    \--- io.reactivex.rxjava2:rxjava:2.2.6 -> 2.2.21 (*)
+--- com.nulab-inc:zxcvbn:1.5.2
+--- com.jakewharton.rxbinding2:rxbinding:2.2.0
|    +--- io.reactivex.rxjava2:rxjava:2.2.2 -> 2.2.21 (*)
|    +--- io.reactivex.rxjava2:rxandroid:2.1.0 -> 2.1.1 (*)
|    \--- androidx.annotation:annotation:1.0.0 -> 1.2.0
+--- androidx.multidex:multidex:2.0.1
+--- org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.6.0 (*)
+--- com.google.apis:google-api-services-drive:v3-rev20210919-1.32.1
|    \--- com.google.api-client:google-api-client:1.32.1
|         +--- com.google.oauth-client:google-oauth-client:1.31.5
|         |    \--- com.google.guava:guava:30.1-android -> 30.1.1-jre (*)
|         +--- com.google.http-client:google-http-client-gson:1.39.2
|         |    \--- com.google.code.gson:gson:2.8.6 -> 2.8.9
|         +--- com.google.guava:guava:30.1.1-android -> 30.1.1-jre (*)
|         +--- com.google.http-client:google-http-client-apache-v2:1.39.2
|         |    \--- org.apache.httpcomponents:httpcore:4.4.14 -> 4.4.15
|         \--- org.apache.httpcomponents:httpcore:4.4.14 -> 4.4.15
+--- com.google.api-client:google-api-client-android:1.32.1
+--- org.jetbrains.kotlin:kotlin-android-extensions-runtime:{strictly 1.6.0} -> 1.6.0 (c)
+--- com.google.dagger:dagger:{strictly 2.40.5} -> 2.40.5 (c)
+--- androidx.appcompat:appcompat:{strictly 1.3.1} -> 1.3.1 (c)
+--- androidx.viewpager:viewpager:{strictly 1.0.0} -> 1.0.0 (c)
+--- androidx.preference:preference:{strictly 1.1.1} -> 1.1.1 (c)
+--- androidx.recyclerview:recyclerview:{strictly 1.2.1} -> 1.2.1 (c)
+--- org.jetbrains.kotlin:kotlin-stdlib-jdk8:{strictly 1.6.0} -> 1.6.0 (c)
+--- io.reactivex.rxjava2:rxjava:{strictly 2.2.21} -> 2.2.21 (c)
+--- com.dropbox.core:dropbox-core-sdk:{strictly 5.0.0} -> 5.0.0 (c)
+--- com.microsoft.graph:microsoft-graph:{strictly 2.10.0} -> 2.10.0 (c)
+--- io.reactivex.rxjava2:rxandroid:{strictly 2.1.1} -> 2.1.1 (c)
+--- com.google.apis:google-api-services-drive:{strictly v3-rev20210919-1.32.1} -> v3-rev20210919-1.32.1 (c)
+--- com.google.api-client:google-api-client-android:{strictly 1.32.1} -> 1.32.1 (c)
+--- com.google.android.material:material:{strictly 1.4.0} -> 1.4.0 (c)
+--- com.simplecityapps:recyclerview-fastscroll:{strictly 2.0.1} -> 2.0.1 (c)
+--- androidx.core:core-ktx:{strictly 1.6.0} -> 1.6.0 (c)
+--- androidx.fragment:fragment-ktx:{strictly 1.3.6} -> 1.3.6 (c)
+--- androidx.swiperefreshlayout:swiperefreshlayout:{strictly 1.1.0} -> 1.1.0 (c)
+--- androidx.biometric:biometric:{strictly 1.1.0} -> 1.1.0 (c)
+--- com.nulab-inc:zxcvbn:{strictly 1.5.2} -> 1.5.2 (c)
+--- com.jakewharton.rxbinding2:rxbinding:{strictly 2.2.0} -> 2.2.0 (c)
+--- androidx.multidex:multidex:{strictly 2.0.1} -> 2.0.1 (c)
+--- org.jetbrains.kotlin:kotlin-stdlib:{strictly 1.6.0} -> 1.6.0 (c)
+--- org.cryptomator:cryptolib:{strictly 2.0.2} -> 2.0.2 (c)
+--- com.jakewharton.timber:timber:{strictly 5.0.1} -> 5.0.1 (c)
+--- androidx.annotation:annotation:{strictly 1.2.0} -> 1.2.0 (c)
+--- io.jsonwebtoken:jjwt-api:{strictly 0.11.2} -> 0.11.2 (c)
+--- org.greenrobot:greendao:{strictly 3.3.0} -> 3.3.0 (c)
+--- io.minio:minio:{strictly 8.3.4} -> 8.3.4 (c)
+--- javax.inject:javax.inject:{strictly 1} -> 1 (c)
+--- androidx.core:core:{strictly 1.6.0} -> 1.6.0 (c)
+--- androidx.cursoradapter:cursoradapter:{strictly 1.0.0} -> 1.0.0 (c)
+--- androidx.activity:activity:{strictly 1.2.4} -> 1.2.4 (c)
+--- androidx.fragment:fragment:{strictly 1.3.6} -> 1.3.6 (c)
+--- androidx.appcompat:appcompat-resources:{strictly 1.3.1} -> 1.3.1 (c)
+--- androidx.drawerlayout:drawerlayout:{strictly 1.0.0} -> 1.0.0 (c)
+--- androidx.savedstate:savedstate:{strictly 1.1.0} -> 1.1.0 (c)
+--- androidx.customview:customview:{strictly 1.0.0} -> 1.0.0 (c)
+--- androidx.cardview:cardview:{strictly 1.0.0} -> 1.0.0 (c)
+--- androidx.coordinatorlayout:coordinatorlayout:{strictly 1.1.0} -> 1.1.0 (c)
+--- androidx.constraintlayout:constraintlayout:{strictly 2.0.1} -> 2.0.1 (c)
+--- androidx.dynamicanimation:dynamicanimation:{strictly 1.0.0} -> 1.0.0 (c)
+--- androidx.annotation:annotation-experimental:{strictly 1.1.0} -> 1.1.0 (c)
+--- androidx.lifecycle:lifecycle-runtime:{strictly 2.3.1} -> 2.3.1 (c)
+--- androidx.transition:transition:{strictly 1.2.0} -> 1.2.0 (c)
+--- androidx.vectordrawable:vectordrawable:{strictly 1.1.0} -> 1.1.0 (c)
+--- androidx.viewpager2:viewpager2:{strictly 1.0.0} -> 1.0.0 (c)
+--- androidx.activity:activity-ktx:{strictly 1.2.2} -> 1.2.2 (c)
+--- androidx.collection:collection-ktx:{strictly 1.1.0} -> 1.1.0 (c)
+--- androidx.lifecycle:lifecycle-livedata-core-ktx:{strictly 2.3.1} -> 2.3.1 (c)
+--- androidx.lifecycle:lifecycle-viewmodel-ktx:{strictly 2.3.1} -> 2.3.1 (c)
+--- androidx.savedstate:savedstate-ktx:{strictly 1.1.0} -> 1.1.0 (c)
+--- androidx.interpolator:interpolator:{strictly 1.0.0} -> 1.0.0 (c)
+--- androidx.collection:collection:{strictly 1.1.0} -> 1.1.0 (c)
+--- com.fasterxml.jackson.core:jackson-core:{strictly 2.11.2} -> 2.11.2 (c)
+--- com.google.code.gson:gson:{strictly 2.8.9} -> 2.8.9 (c)
+--- com.microsoft.graph:microsoft-graph-core:{strictly 1.0.9} -> 1.0.9 (c)
+--- org.reactivestreams:reactive-streams:{strictly 1.0.3} -> 1.0.3 (c)
+--- org.jetbrains.kotlin:kotlin-stdlib-jdk7:{strictly 1.6.0} -> 1.6.0 (c)
+--- com.google.api-client:google-api-client:{strictly 1.32.1} -> 1.32.1 (c)
+--- org.jetbrains:annotations:{strictly 20.1.0} -> 20.1.0 (c)
+--- org.jetbrains.kotlin:kotlin-stdlib-common:{strictly 1.6.0} -> 1.6.0 (c)
+--- org.cryptomator:siv-mode:{strictly 1.4.3} -> 1.4.3 (c)
+--- com.google.guava:guava:{strictly 30.1.1-jre} -> 30.1.1-jre (c)
+--- org.slf4j:slf4j-api:{strictly 1.7.31} -> 1.7.31 (c)
+--- org.greenrobot:greendao-api:{strictly 3.3.0} -> 3.3.0 (c)
+--- com.carrotsearch.thirdparty:simple-xml-safe:{strictly 2.7.1} -> 2.7.1 (c)
+--- com.squareup.okhttp3:okhttp:{strictly 5.0.0-alpha.3} -> 5.0.0-alpha.3 (c)
+--- com.fasterxml.jackson.core:jackson-annotations:{strictly 2.11.2} -> 2.11.2 (c)
+--- com.fasterxml.jackson.core:jackson-databind:{strictly 2.11.2} -> 2.11.2 (c)
+--- org.bouncycastle:bcprov-jdk15on:{strictly 1.69} -> 1.69 (c)
+--- androidx.versionedparcelable:versionedparcelable:{strictly 1.1.1} -> 1.1.1 (c)
+--- androidx.lifecycle:lifecycle-viewmodel:{strictly 2.3.1} -> 2.3.1 (c)
+--- androidx.lifecycle:lifecycle-viewmodel-savedstate:{strictly 2.3.1} -> 2.3.1 (c)
+--- androidx.loader:loader:{strictly 1.0.0} -> 1.0.0 (c)
+--- androidx.lifecycle:lifecycle-livedata-core:{strictly 2.3.1} -> 2.3.1 (c)
+--- androidx.vectordrawable:vectordrawable-animated:{strictly 1.1.0} -> 1.1.0 (c)
+--- androidx.constraintlayout:constraintlayout-solver:{strictly 2.0.1} -> 2.0.1 (c)
+--- androidx.legacy:legacy-support-core-utils:{strictly 1.0.0} -> 1.0.0 (c)
+--- androidx.lifecycle:lifecycle-common:{strictly 2.3.1} -> 2.3.1 (c)
+--- androidx.arch.core:core-common:{strictly 2.1.0} -> 2.1.0 (c)
+--- androidx.lifecycle:lifecycle-runtime-ktx:{strictly 2.3.1} -> 2.3.1 (c)
+--- org.jetbrains.kotlinx:kotlinx-coroutines-android:{strictly 1.4.1} -> 1.4.1 (c)
+--- com.google.oauth-client:google-oauth-client:{strictly 1.31.5} -> 1.31.5 (c)
+--- com.google.http-client:google-http-client-gson:{strictly 1.39.2} -> 1.39.2 (c)
+--- com.google.http-client:google-http-client-apache-v2:{strictly 1.39.2} -> 1.39.2 (c)
+--- org.apache.httpcomponents:httpcore:{strictly 4.4.15} -> 4.4.15 (c)
+--- com.google.guava:failureaccess:{strictly 1.0.1} -> 1.0.1 (c)
+--- com.google.code.findbugs:jsr305:{strictly 3.0.2} -> 3.0.2 (c)
+--- org.checkerframework:checker-qual:{strictly 3.8.0} -> 3.8.0 (c)
+--- com.google.errorprone:error_prone_annotations:{strictly 2.5.1} -> 2.5.1 (c)
+--- com.google.j2objc:j2objc-annotations:{strictly 1.3} -> 1.3 (c)
+--- com.squareup.okio:okio:{strictly 3.0.0} -> 3.0.0 (c)
+--- androidx.lifecycle:lifecycle-livedata:{strictly 2.0.0} -> 2.0.0 (c)
+--- androidx.documentfile:documentfile:{strictly 1.0.1} -> 1.0.1 (c)
+--- androidx.localbroadcastmanager:localbroadcastmanager:{strictly 1.0.0} -> 1.0.0 (c)
+--- androidx.print:print:{strictly 1.0.0} -> 1.0.0 (c)
+--- org.jetbrains.kotlinx:kotlinx-coroutines-core:{strictly 1.4.1} -> 1.4.1 (c)
+--- com.squareup.okio:okio-jvm:{strictly 3.0.0} -> 3.0.0 (c)
+--- androidx.arch.core:core-runtime:{strictly 2.1.0} -> 2.1.0 (c)
\--- org.jetbrains.kotlinx:kotlinx-coroutines-core-jvm:{strictly 1.4.1} -> 1.4.1 (c)
3 Likes

Great! I was for a moment worried! Thanks!

FYI iCloud has been patched by Apple on Dec 11th.

Does it mean that, prior to patching, hackers could hack into iCloud?

Another reason to encrypt client side.

IDK and if it happened Apple will never tell anyway.