Do you have any advice about the Log4j security issues?
Topic on Project:Support desk
Mediawiki does not use java so is not vulnerable.
However some extensions may use java components. You should make sure they and everything they use is up to date. In particular if using the CirrusSearch extension, make sure elasticsearch is up to date.
Thank you. I did not know that about CirrusSearch. Do we have a list somewhere of extensions that use Java?
The only other thing that comes to mind is if you're using wikibase and setting up blazegraph for querying.
Some of the other less popular search extensions also use java.
Java is pretty unpopular in mediawiki extensions because most are php. I'm not aware of any list.