-
Notifications
You must be signed in to change notification settings - Fork 209
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Mitigate: RCE 0-day exploit found in log4j, a popular Java logging package https://github.com/elastic/elasticsearch/issues/81618 #2992
Conversation
…ckage elastic/elasticsearch#81618 Signed-off-by: Prajakta Purohit <prajakta@chef.io>
👷 Deploy Preview for chef-server processing. 🔨 Explore the source changes: 768f12d 🔍 Inspect the deploy log: https://app.netlify.com/sites/chef-server/deploys/61b3c447fd637100074bdecf |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good. Is there anything showing this working?
I'm using chef-server-core v14.9.23 on RHEL 7. I manually added this into the Chef Infra Server (
You see it try to start with this:
and after that it doesn't actually successfully start the service. It ends up executing the above over and over and over. How to reproduce
p.s. I used viddy at 200ms to capture the following command retrying:
|
I am currently testing the build off of this PR and it elasticsearch service comes up ok. I will try the manual steps by editing the config after testing the upgrades. |
@PrajaktaPurohit What version of elastic is used in the latest version of Chef Infra Server? I'm obviously running on a bit older version of Chef Infra Server so maybe that's why I'm getting different results. |
@PrajaktaPurohit in parallel I'm going to try to edit |
@PrajaktaPurohit it worked! No idea why that's different, but it works!
|
14.9.23 and the latest 14.15.11 on chef-server uses elasticsearch 6.8.18 (internally) |
yep - that would be the path I would test out to see if the config works! Glad to hear that is working! Thank you for checking! |
Closing this out since we went to Elasticsearch 6.8.21 which does the same thing out of the box |
Signed-off-by: Prajakta Purohit prajakta@chef.io