[GitHub] [jmeter] edw013 commented on pull request #680: Update log4j2 to 2.15.0 to fix CVE-2021-44228: Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

[GitBox <gi...@apache.org>]

edw013 commented on pull request #680:
URL: https://github.com/apache/jmeter/pull/680#issuecomment-994101915


   hi all, I'm getting the following error when replacing the log4j JAR files:
   `2021-12-14 22:06:27,876 WARN o.a.j.r.ClassFinder: Can not open the jar /opt/apache-jmeter-5.4.1-PATCH/lib/ext/._ApacheJMeter_functions.jar, message: zip END header not found
   java.util.zip.ZipException: zip END header not found`
   
   This happens for all the files in the /lib/ext/ folder, any idea why they might be affected? The steps I did were: 
   1. Download and extract JMeter 5.4.1 tgz
   2. Download and extract log4j 2.16.0 tgz
   3. Replace the 4 jars in jmeter/lib/
   4. Create a new tgz from there (I host it elsewhere, and this issue comes from downloading this file again and extracting it then running)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@jmeter.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org