git: ef15683d48c1 - main - security/bastillion: fix log4j vulnerablity
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Tue, 14 Dec 2021 12:48:46 UTC
The branch main has been updated by netchild: URL: https://cgit.FreeBSD.org/ports/commit/?id=ef15683d48c1f829a6b3c81a240fb884e9f9d2e2 commit ef15683d48c1f829a6b3c81a240fb884e9f9d2e2 Author: Alexander Leidinger <netchild@FreeBSD.org> AuthorDate: 2021-12-14 12:46:06 +0000 Commit: Alexander Leidinger <netchild@FreeBSD.org> CommitDate: 2021-12-14 12:46:06 +0000 security/bastillion: fix log4j vulnerablity Disable format msg lookup via shell variable on startup. Security: CVE-2021-44228 --- security/bastillion/Makefile | 4 +++- security/bastillion/files/bastillion.in | 6 ++++++ 2 files changed, 9 insertions(+), 1 deletion(-) diff --git a/security/bastillion/Makefile b/security/bastillion/Makefile index 329d15e0755f..30c08e8154f2 100644 --- a/security/bastillion/Makefile +++ b/security/bastillion/Makefile @@ -1,9 +1,11 @@ +# $FreeBSD: head/security/bastillion/Makefile 513677 2019-10-03 17:22:17Z glewis $ + PORTNAME= bastillion DISTVERSIONPREFIX= jetty-v DISTVERSION= 3.10_00 DISTFILES= ${DISTNAME}${EXTRACT_SUFX} \ ${PORTNAME}-upgrade-3.08.00.jar -PORTREVISION= 0 +PORTREVISION= 1 CATEGORIES= security www java MASTER_SITES= https://github.com/${GH_ACCOUNT}/${GH_PROJECT}/releases/download/v${PORTVERSION}/ diff --git a/security/bastillion/files/bastillion.in b/security/bastillion/files/bastillion.in index 2eb265413623..fed1b9cedefc 100644 --- a/security/bastillion/files/bastillion.in +++ b/security/bastillion/files/bastillion.in @@ -1,4 +1,7 @@ #!/bin/sh +# +# $FreeBSD +# # PROVIDE: bastillion # REQUIRE: NETWORKING SERVERS @@ -40,5 +43,8 @@ else fi export JAVA_HOME +LOG4J_FORMAT_MSG_NO_LOOKUPS=true +export LOG4J_FORMAT_MSG_NO_LOOKUPS + run_rc_command "$1"