[jetty-users] Jetty: Apache Log4j Tool : Zero Day in Ubiquitous Under Active Attack (CVE-2021-44228)

[Kumar, Amit (Noida) via jetty-users]

Hi Team,

We are using Below jar provided by you. We want to ensure and know if it is 
impacted by "Apache Log4j Tool : Zero Day in Ubiquitous Under Active Attack 
(CVE-2021-44228)". If it's impacted please let us know about the security 
recommendation. To know we are looking for following answer

Jars:
jetty-4.2.19 4.2.19
jetty-continuation-7.5.4.v20111024 7.5.4
jetty-http-7.5.4.v20111024 7.5.4
jetty-security-7.5.4.v20111024 7.5.4
jetty-util-7.5.4.v20111024 7.5.4
jetty-io-7.5.4.v20111024 7.5.4
jetty-server-7.5.4.v20111024 7.5.4


Are you using log4J?
If you are using log4j 1.x version, are you using JMSAppender class
if you are using log4j 2.x are , what is your security recommendation to fix 
the issue


Thanks and regards,

Amit Kumar
Tech Lead, Software Development Engineering
Financial & Risk Management Solutions
Mobile: +91-9990094588
Upcoming R:
Fiserv
Helping Small Businesses Get 
Back2Business
Fiserv
 | Join Our 
Team
 | 
Twitter
 | 
LinkedIn
 | 
Facebook
FORTUNE World's Most Admired Companies(r)
2014 | 2015 | 2016 | 2017 | 2018 | 2019 | 2020 | 2021
(c) 2021 Fiserv Inc. or its affiliates. Fiserv is a registered trademark of 
Fiserv Inc. Privacy 
Notice
(c) 2021 Fortune Media IP Limited. Used under license.

___
jetty-users mailing list
jetty-users@eclipse.org
To unsubscribe from this list, visit 
https://www.eclipse.org/mailman/listinfo/jetty-users

Re: [jetty-users] Deploying Multiple Webapps to a Jetty Server

[Joakim Erdfelt]

Simple adding/removing the war file itself from the
`${jetty.base}/webapps/` directory will essentially "undeploy" that webapp
on the running server.

Having separate log files on a single JVM usually requires a powerful
logging library that can sift log files based on context. (logback 1.x and
log4j2 can)

Joakim Erdfelt / joa...@webtide.com


On Wed, Dec 15, 2021 at 3:00 PM Greg Wilkins  wrote:

>
> Patrick,
>
> If you want to start applications individually and have separate log
> files, then you probably need to have different jetty-bases for them and
> different server ports.
>
> Alternately, you can hot deploy multiple webapps to a single running
> server.
>
> Or if you really need fine grained control, you could write your own
> deployer variation that start/stops the applications as you need.
>
>
>
>
>
>
> On Thu, 16 Dec 2021 at 03:15, Patrick Buchheit  wrote:
>
>> I'm getting ready to deploy an application with jetty 9.4 but there are
>> some configuration aspects I'm struggling to wrap my head around. How do I
>> layout my files in JETTY_BASE to allow the startup and shutdown of
>> individual applications if there are multiple wars in webapps? Is there a
>> command line option to specify which applications to start? How do I
>> configure the logging to have a separate log file for each application?
>> ___
>> jetty-users mailing list
>> jetty-users@eclipse.org
>> To unsubscribe from this list, visit
>> https://www.eclipse.org/mailman/listinfo/jetty-users
>>
>
>
> --
> Greg Wilkins  CTO http://webtide.com
> ___
> jetty-users mailing list
> jetty-users@eclipse.org
> To unsubscribe from this list, visit
> https://www.eclipse.org/mailman/listinfo/jetty-users
>
___
jetty-users mailing list
jetty-users@eclipse.org
To unsubscribe from this list, visit 
https://www.eclipse.org/mailman/listinfo/jetty-users

Re: [jetty-users] Deploying Multiple Webapps to a Jetty Server

[Greg Wilkins]

Patrick,

If you want to start applications individually and have separate log files,
then you probably need to have different jetty-bases for them and different
server ports.

Alternately, you can hot deploy multiple webapps to a single running server.

Or if you really need fine grained control, you could write your own
deployer variation that start/stops the applications as you need.






On Thu, 16 Dec 2021 at 03:15, Patrick Buchheit  wrote:

> I'm getting ready to deploy an application with jetty 9.4 but there are
> some configuration aspects I'm struggling to wrap my head around. How do I
> layout my files in JETTY_BASE to allow the startup and shutdown of
> individual applications if there are multiple wars in webapps? Is there a
> command line option to specify which applications to start? How do I
> configure the logging to have a separate log file for each application?
> ___
> jetty-users mailing list
> jetty-users@eclipse.org
> To unsubscribe from this list, visit
> https://www.eclipse.org/mailman/listinfo/jetty-users
>


-- 
Greg Wilkins  CTO http://webtide.com
___
jetty-users mailing list
jetty-users@eclipse.org
To unsubscribe from this list, visit 
https://www.eclipse.org/mailman/listinfo/jetty-users

[jetty-users] Deploying Multiple Webapps to a Jetty Server

[Patrick Buchheit]

I'm getting ready to deploy an application with jetty 9.4 but there are
some configuration aspects I'm struggling to wrap my head around. How do I
layout my files in JETTY_BASE to allow the startup and shutdown of
individual applications if there are multiple wars in webapps? Is there a
command line option to specify which applications to start? How do I
configure the logging to have a separate log file for each application?
___
jetty-users mailing list
jetty-users@eclipse.org
To unsubscribe from this list, visit 
https://www.eclipse.org/mailman/listinfo/jetty-users