[GitHub] [solr-operator] plumdog commented on issue #384: How to apply mitigation for CVE-2021-44228

2021-12-14 Thread GitBox
plumdog commented on issue #384: URL: https://github.com/apache/solr-operator/issues/384#issuecomment-993654549 Can someone with more Java config confidence than me verify that I should not be concerned that I, as in @nosvalds screenshot above have: ``` -Dlog4j.configurationFile=/var/

[GitHub] [solr-operator] plumdog commented on issue #384: How to apply mitigation for CVE-2021-44228

2021-12-11 Thread GitBox
plumdog commented on issue #384: URL: https://github.com/apache/solr-operator/issues/384#issuecomment-991251103 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscri

[GitHub] [solr-operator] plumdog commented on issue #384: How to apply mitigation for CVE-2021-44228

2021-12-11 Thread GitBox
plumdog commented on issue #384: URL: https://github.com/apache/solr-operator/issues/384#issuecomment-991615749 Ok, from https://github.com/pravega/zookeeper-operator/issues/422#issuecomment-991602681, believe Zookeeper not impacted, so I think the mitigation above is sufficient. -- Thi

[GitHub] [solr-operator] plumdog commented on issue #384: How to apply mitigation for CVE-2021-44228

2021-12-11 Thread GitBox
plumdog commented on issue #384: URL: https://github.com/apache/solr-operator/issues/384#issuecomment-991569350 Have opened https://github.com/pravega/zookeeper-operator/issues/422 to try to work out how zookeeper-operator is impacted and how to mitigate. -- This is an automated message

[GitHub] [solr-operator] plumdog commented on issue #384: How to apply mitigation for CVE-2021-44228

2021-12-10 Thread GitBox
plumdog commented on issue #384: URL: https://github.com/apache/solr-operator/issues/384#issuecomment-991251103 @HoustonPutman another thing I have just thought of: should we also be concerned about the Zookeeper that is created for a SolrCloud? -- This is an automated message from the A