diff options
| author | Pierre Riteau <pierre@stackhpc.com> | 2022-01-13 22:35:27 +0100 |
|---|---|---|
| committer | Pierre Riteau <pierre@stackhpc.com> | 2022-01-27 09:42:27 +0000 |
| commit | fe9b3ccb645ebeffd7d84ef4fcc93b90a6661a4a (patch) | |
| tree | a9e0a17db7a6e8ae358e6a3004b880c90531baf3 /docker/openstack-base/Dockerfile.j2 | |
| parent | b22f8f63a33b5a7c0ee43fc8ee346d636bb2a896 (diff) | |
| download | kolla-fe9b3ccb645ebeffd7d84ef4fcc93b90a6661a4a.tar.gz kolla-fe9b3ccb645ebeffd7d84ef4fcc93b90a6661a4a.zip | |
Mitigate two Log4j vulnerabilities in Apache Storm
The Log4j version was bumped on GitHub [1] but it is still pending
inclusion in a release of Apache Storm.
Apply the alternative mitigation recommended by Log4j [2] of removing
the JndiLookup class from the classpath.
[1] https://github.com/apache/storm/pull/3427
[2] https://logging.apache.org/log4j/2.x/security.html
Change-Id: Ib3ecd73f9e39e320acb2c5f0962b8af9b1a817e9
(cherry picked from commit 448e4f56aa6218a66b0074329d322c0b6089b2e6)
Diffstat (limited to 'docker/openstack-base/Dockerfile.j2')
0 files changed, 0 insertions, 0 deletions