Critical Log4j RCE bug (CVE-2021-44228)

xetus-oss / docker-archiva

A docker image for Apache Archiva

Apache License 2.0

55 stars 34 forks source link

Critical Log4j RCE bug (CVE-2021-44228) #32

Closed gionn closed 2 years ago

gionn commented 2 years ago

This image needs to be updated to archiva 2.2.6

ref https://issues.apache.org/jira/projects/MRM/issues/MRM-2023

tkent commented 2 years ago

@gionn - ~~thanks for the reminder! I'll check into it tomorrow.~~

Actually, this was both trivial to update and test, so I've done it now. The current v2 now includes the update and you can be sure by using tag v2.2.6 - see 151a305

michimau commented 2 years ago

Fix available https://github.com/apache/archiva/releases/tag/archiva-2.2.6