cloudera-scripts-for-log4j

cloudera-scripts-for-log4j copied to clipboard

Backup of tar.gz files is not occurring at the correct path with '-b' option

1

Issue is in cloudera-scripts-for-log4j/hdp_support_scripts/delete_jndi.sh file, where we are not passing backupdir while patching tar.gz file. Actual code snippet with the issue: ` for tarfile in $(find -L $targetdir -name "*.tar.gz"...

sugandhaAggarwal2

code to backup for tar.gz is invalid

3

The code here is not working (cm_cdp_cdh_log4j_jndi_removal.sh line 139) ``` local backupdir=${2:-/opt/cloudera/log4shell-backup} mkdir -p "$backupdir/$(dirname $tarfile)" targetbackup="$backupdir/$tarfile.backup" if [ ! -f "$targetbackup" ]; then echo "Backing up to '$targetbackup'" cp...

starkjs

Files Can´t updated (cloudera-manager-daemons)

1

I need you help because after apply patches only 2 files from Cloudera Manager can´t updated, so is necessary restores both files (from backup"/opt/cloudera/log4shell-backup") because cloudera manager dont start again...

vciampa

Does this script mitigate the following CVE? - [CVE-2021-45105](https://nvd.nist.gov/vuln/detail/CVE-2021-45105) - [CVE-2021-45046](https://nvd.nist.gov/vuln/detail/CVE-2021-45046) Those CVE were found after the `CVE-2021-44228` was fixed. The Cloudera script removes the `.class` which is vulnerable and...

dignajar

missing parameter in find

3

https://github.com/cloudera/cloudera-scripts-for-log4j/blob/main/cm_cdp_cdh_log4j_jndi_removal.sh#L63 it's missing the -name parameter after -o line should read for tarfile in $(find -L $targetdir -name "*.tar.gz" -o -name "*.tgz"); do I fixed it locally and the find...

sigpet

akhadhri

For more infos see #2 , my original PR that got auto-closed due to earlier force pushes on the main branch (not nice) Since my original PR, not much changed,...

lhoss

Temporary directories not cleaned up

2

Some temporary directories are created but not cleaned up, causing the `/tmp` directories to be saturated after a while. Eg. https://github.com/cloudera/cloudera-scripts-for-log4j/blob/f207d1540af89523ba105e9525db4af392a1a778/cm_cdp_cdh_log4j_jndi_removal.sh#L264 **but the issue exists elsewhere**. This also exists with...

sbaudoin

add unzip overwrite param

1

Fixes #36 Issue: If a war file contains the same file twice the script will hang when it asks for a response from the user. This becomes an issue especially...

smenke

rzuidhof