Run manually for releases

Build: #7 was successful Manual run by daryl herzmann

Build result summary

Details

Completed
Queue duration
2 seconds
Duration
3 minutes
Labels
None
Agent
Default Agent
Revision
1bcb80f9f23d70fbd7ee8a833abe02b2305f848e
Total tests
396
Successful since
#1 ()

Tests

Code commits

Author Commit Message Commit date
daryl herzmann <akrherz@iastate.edu> daryl herzmann <akrherz@iastate.edu> 1bcb80f9f23d70fbd7ee8a833abe02b2305f848e Merge pull request #1951 from guusdk/release_4.5.5
Denote Openfire 4.5.5 release
Guus der Kinderen Guus der Kinderen c24b118dbebe0618522315d05a0c28fd1416e90f Denote Openfire 4.5.5 release
Guus der Kinderen Guus der Kinderen 5e297ed4de793342e53f33cbc54694e0d48f979b OF-2353: Upgrade log4j2 from 2.11.2 to 2.16.0
Guus der Kinderen Guus der Kinderen 15d3f6fe890655d4aea69bed3e16dc4ba0df7d6d OF-2353: Add log4j2.formatMsgNoLookups system property to startup scripts
As another mitigation for CVE-2021-4428, add the log4j2.formatMsgNoLookups system property to all Openfire start scripts that we provide.
Guus der Kinderen Guus der Kinderen e764a0dfa65a95a4906c6d4f43e940b96c2c881f OF-2353: Disable lookups in log4j2 message converter
This adds the {nolookups} directive to the log4j message directive, which disables lookups on another level (CVE-2021-44228).

Note that after upgrading to log4j2 2.16.0, this directive will be ignored by log4j2, as the lookup functionality has been removed completely in that version. A message might be logged to that effect when starting up.

Jira issues

IssueDescriptionStatus
Unknown Issue TypeCVE-2021Could not obtain issue details from Jira
Unknown Issue TypeOF-2353Could not obtain issue details from Jira

Shared artifacts

Artifact File size
.rpm files 250 MB