This is an automated email from the ASF dual-hosted git repository. knaufk pushed a commit to branch asf-site in repository https://gitbox.apache.org/repos/asf/flink-web.git
commit f00f0e87be5cb9bfe1935611667da7ba42e616ce Author: Konstantin Knauf <knauf.konstan...@gmail.com> AuthorDate: Fri Dec 10 17:37:00 2021 +0100 rebuild website --- content/2021/12/10/log4j-cve.html | 4 ++-- content/blog/feed.xml | 4 ++-- content/blog/index.html | 2 +- content/index.html | 2 +- content/zh/index.html | 2 +- 5 files changed, 7 insertions(+), 7 deletions(-) diff --git a/content/2021/12/10/log4j-cve.html b/content/2021/12/10/log4j-cve.html index bf61d5e..e7f27e9 100644 --- a/content/2021/12/10/log4j-cve.html +++ b/content/2021/12/10/log4j-cve.html @@ -204,8 +204,8 @@ <p>Yesterday, a new Zero Day for Apache Log4j was <a href="https://www.cyberkendra.com/2021/12/apache-log4j-vulnerability-details-and.html">reported</a>. It is by now tracked under <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-44228">CVE-2021-44228</a>.</p> -<p>Apache Flink is bundling a version of Log4j that is affeced by this vulnerability. -We recommend users to follow the <a href="https://logging.apache.org/log4j/2.x/security.html">adivsory</a> of the Apache Log4j Community. +<p>Apache Flink is bundling a version of Log4j that is affected by this vulnerability. +We recommend users to follow the <a href="https://logging.apache.org/log4j/2.x/security.html">advisory</a> of the Apache Log4j Community. For Apache Flink this currently translates to “setting system property <code>log4j2.formatMsgNoLookups</code> to <code>true</code>” until Log4j has been upgraded to 2.15.0 in Apache Flink.</p> <p>This effort is tracked in <a href="https://issues.apache.org/jira/browse/FLINK-25240">FLINK-25240</a>. diff --git a/content/blog/feed.xml b/content/blog/feed.xml index 56e5931..daa45f3 100644 --- a/content/blog/feed.xml +++ b/content/blog/feed.xml @@ -11,8 +11,8 @@ <description><p>Yesterday, a new Zero Day for Apache Log4j was <a href="https://www.cyberkendra.com/2021/12/apache-log4j-vulnerability-details-and.html">reported</a>. It is by now tracked under <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-44228">CVE-2021-44228</a>.</p> -<p>Apache Flink is bundling a version of Log4j that is affeced by this vulnerability. -We recommend users to follow the <a href="https://logging.apache.org/log4j/2.x/security.html">adivsory</a> of the Apache Log4j Community. +<p>Apache Flink is bundling a version of Log4j that is affected by this vulnerability. +We recommend users to follow the <a href="https://logging.apache.org/log4j/2.x/security.html">advisory</a> of the Apache Log4j Community. For Apache Flink this currently translates to “setting system property <code>log4j2.formatMsgNoLookups</code> to <code>true</code>” until Log4j has been upgraded to 2.15.0 in Apache Flink.</p> <p>This effort is tracked in <a href="https://issues.apache.org/jira/browse/FLINK-25240">FLINK-25240</a>. diff --git a/content/blog/index.html b/content/blog/index.html index a47d95c..f7c959d 100644 --- a/content/blog/index.html +++ b/content/blog/index.html @@ -206,7 +206,7 @@ <p>10 Dec 2021 Konstantin Knauf </p> - <p>Advise on Apache Log4j Zero Day (CVE-2021-44228)</p> + <p>Apache Flink is affected by an Apache Log4j Zero Day (CVE-2021-44228). This blog post contains advise for users on how to address this.</p> <p><a href="/2021/12/10/log4j-cve.html">Continue reading »</a></p> </article> diff --git a/content/index.html b/content/index.html index fcc6015..a6ee695 100644 --- a/content/index.html +++ b/content/index.html @@ -366,7 +366,7 @@ <dl> <dt> <a href="/2021/12/10/log4j-cve.html">Advise on Apache Log4j Zero Day (CVE-2021-44228)</a></dt> - <dd>Advise on Apache Log4j Zero Day (CVE-2021-44228)</dd> + <dd>Apache Flink is affected by an Apache Log4j Zero Day (CVE-2021-44228). This blog post contains advise for users on how to address this.</dd> <dt> <a href="/2021/11/03/flink-backward.html">Flink Backward - The Apache Flink Retrospective</a></dt> <dd>A look back at the development cycle for Flink 1.14</dd> diff --git a/content/zh/index.html b/content/zh/index.html index 1007408..655d399 100644 --- a/content/zh/index.html +++ b/content/zh/index.html @@ -363,7 +363,7 @@ <dl> <dt> <a href="/2021/12/10/log4j-cve.html">Advise on Apache Log4j Zero Day (CVE-2021-44228)</a></dt> - <dd>Advise on Apache Log4j Zero Day (CVE-2021-44228)</dd> + <dd>Apache Flink is affected by an Apache Log4j Zero Day (CVE-2021-44228). This blog post contains advise for users on how to address this.</dd> <dt> <a href="/2021/11/03/flink-backward.html">Flink Backward - The Apache Flink Retrospective</a></dt> <dd>A look back at the development cycle for Flink 1.14</dd>