You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2021/12/17 14:24:00 UTC

[jira] [Work logged] (HADOOP-18050) Document Hadoop's stance on the log4jshell vulnerability

     [ https://issues.apache.org/jira/browse/HADOOP-18050?focusedWorklogId=697914&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-697914 ]

ASF GitHub Bot logged work on HADOOP-18050:
-------------------------------------------

                Author: ASF GitHub Bot
            Created on: 17/Dec/21 14:23
            Start Date: 17/Dec/21 14:23
    Worklog Time Spent: 10m 
      Work Description: jojochuang commented on pull request #34:
URL: https://github.com/apache/hadoop-site/pull/34#issuecomment-996760298


   Forgot to run hugo to update the content directory. Also want to add the update in the homepage news section.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Issue Time Tracking
-------------------

            Worklog Id:     (was: 697914)
    Remaining Estimate: 0h
            Time Spent: 10m

> Document Hadoop's stance on the log4jshell vulnerability
> --------------------------------------------------------
>
>                 Key: HADOOP-18050
>                 URL: https://issues.apache.org/jira/browse/HADOOP-18050
>             Project: Hadoop Common
>          Issue Type: Task
>          Components: documentation
>            Reporter: Wei-Chiu Chuang
>            Assignee: Wei-Chiu Chuang
>            Priority: Blocker
>              Labels: pull-request-available
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> As of today, Hadoop relies on log4j-1, not log4j2. It is understood that the log4jshell vulnerability (CVE-2021-44228) does not impact log4j-1. Given the widespread attention to the incidence, we should make it clear that Hadoop is not susceptible to the attack.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org