Pentaho

 View Only
  • 1.  How to remove JMSAppender & SocketAppender from log4j

    Posted 01-18-2022 03:05
    Please kindly help me on this.

    ------------------------------
    Sielaah Suppiah
    HelpDesk Support
    Maxeon Solar Technologies
    ------------------------------


  • 2.  RE: How to remove JMSAppender & SocketAppender from log4j

    Posted 01-18-2022 10:52

    Hi Sielaah ,

    Extract the jar file and then search for the above files and remove those and convert the folder to jar again.

    But make sure after making these changes, your penatho server starts.

    Since I made the same changes to the data-integartion/lib/log4j file , but the server didn't run properly.

    Let me know if it works for you.

    The best option seems to migrate to log4j-2.17 version



    ------------------------------
    Saket Kumar
    Data Service Manager
    Tibersoft
    ------------------------------



  • 3.  RE: How to remove JMSAppender & SocketAppender from log4j

    Posted 02-10-2022 18:45
    See https://support.pentaho.com/hc/en-us/articles/4416229254541-log4j-1-and-log4j-2-vulnerabilities-found-in-CVE-2021-4104-CVE-2021-44228-CVE-2021-45046-CVE-2021-45105-and-CVE-2021-44832-

    ------------------------------
    Benny Chow
    Pentaho Analyzer Architect
    Hitachi Vantara
    ------------------------------