You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@doris.apache.org by GitBox <gi...@apache.org> on 2021/12/13 07:38:54 UTC

[GitHub] [incubator-doris] zhouhoo opened a new issue #7381: log4j漏洞修复

zhouhoo opened a new issue #7381:
URL: https://github.com/apache/incubator-doris/issues/7381


   ### Search before asking
   
   - [X] I had searched in the [issues](https://github.com/apache/incubator-doris/issues?q=is%3Aissue) and found no similar issues.
   
   
   ### Description
   
   log4j最近暴露了比较严重的漏洞，目前官方给出了log4j的修复版本。咱们项目什么时候更新呢？
   
   ### Solution
   
   log4j给出了修复漏洞的版本https://github.com/apache/logging-log4j2/releases/tag/log4j-2.15.0-rc2。怎么修复到Doris？我直接替换fe目录下的lib文件夹内的旧jar，结果FE无法启动。
   
   ### Are you willing to submit PR?
   
   - [X] Yes I am willing to submit a PR!
   
   ### Code of Conduct
   
   - [X] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@doris.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@doris.apache.org
For additional commands, e-mail: commits-help@doris.apache.org

[GitHub] [incubator-doris] qidaye commented on issue #7381: log4j漏洞修复

Posted by GitBox <gi...@apache.org>.
qidaye commented on issue #7381:
URL: https://github.com/apache/incubator-doris/issues/7381#issuecomment-994242172


   You can refer to this article [ApacheDoris Security](https://mp.weixin.qq.com/s?src=11&timestamp=1639536577&ver=3497&signature=3viyIyREdBzrajzqu7LkohVfW6ulLxHJTMAxWgD3OQsHz0K2l-cu1V37ZnlgEqlx8YpVkmVCSxb7uzbDzpGg6bJr6ZGNBLphBM2Mz9Xkipst16QsEsH-7WVsSJoDK-GB&new=1)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@doris.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@doris.apache.org
For additional commands, e-mail: commits-help@doris.apache.org

[GitHub] [incubator-doris] zhouhoo closed issue #7381: log4j漏洞修复

Posted by GitBox <gi...@apache.org>.
zhouhoo closed issue #7381:
URL: https://github.com/apache/incubator-doris/issues/7381


   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@doris.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@doris.apache.org
For additional commands, e-mail: commits-help@doris.apache.org

[GitHub] [incubator-doris] hugengyong commented on issue #7381: log4j漏洞修复

Posted by GitBox <gi...@apache.org>.
hugengyong commented on issue #7381:
URL: https://github.com/apache/incubator-doris/issues/7381#issuecomment-998513588


   直接升级log4j-2.17.0吧


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@doris.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@doris.apache.org
For additional commands, e-mail: commits-help@doris.apache.org