stackabletech / docker-images

Apache License 2.0

14 stars 2 forks source link

Move the Log4j ENV variable to the java-base image #727

Closed lfrancke closed 2 weeks ago

lfrancke commented 2 weeks ago

Description

ENV variables are inherited by images if they come from a parent image. This ENV variable disables the Log4j feature that caused CVE-2021-4428 (Log4Shell). Even though this probably has been disabled everywhere already it doesn't hurt to set this variable

lfrancke commented 2 weeks ago

Will do

lfrancke commented 2 weeks ago

95d3cc5 (#727)