Hi Pietro,
You may need to be in EXIST_HOME/lib to run the command for removing the JNDI class. Sorry for the omission!
~Ash
________________________________
From: Pietro Liuzzo <pie...@gm...>
Sent: Wednesday, December 15, 2021 2:16 AM
To: Clark, Ash <as....@no...>
Cc: Mathias G?bel <go...@su...>; exist-open <exi...@li...>
Subject: Re: [Exist-open] log4j2 vulnerability
Thanks!
I have tried to do this as well but I am told that there is nothing to do.
perhaps the location of that class depends on the system?
all best
Pietro
Pietro Maria Liuzzo (egli/lui,he/him,er/ihn)
cel (DE): +49 (0) 176 61 000 606
Skype: pietro.liuzzo (Quingentole)
ORCID: https://orcid.org/0000-0001-5714-4011<https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Forcid.org%2F0000-0001-5714-4011&data=04%7C01%7Cas.clark%40northeastern.edu%7C2eb1ce62a2784ef8e6f408d9bf9ac92e%7Ca8eec281aaa34daeac9b9a398b9215e7%7C0%7C0%7C637751493786672648%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=HZhH7eXC4889BdwieyX1sVuXRB84GUXMwXUQPxFSQaw%3D&reserved=0>
Academia: https://uni-hamburg.academia.edu/PietroMariaLiuzzo<https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Funi-hamburg.academia.edu%2FPietroMariaLiuzzo&data=04%7C01%7Cas.clark%40northeastern.edu%7C2eb1ce62a2784ef8e6f408d9bf9ac92e%7Ca8eec281aaa34daeac9b9a398b9215e7%7C0%7C0%7C637751493786672648%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=s0hJ5cNM1mBSc5v%2Fa7SNm1HcvSHBPsl%2BRIbzFWsBdd4%3D&reserved=0>
Il giorno 14 dic 2021, alle ore 22:27, Clark, Ash <as....@no...<mailto:as....@no...>> ha scritto:
zip -q -d log4j-core-*.jar org/apache/logging/log4j/core/lookup/JndiLookup.class
|
