Re: net/openfire update to 4.6.7 fix log4shell CVE-2021-44832

2022-01-28 Thread Stuart Henderson
On 2022/01/28 14:59, Ian Darwin wrote: > Ping? > > -MODJAVA_VER= 1.8 > > +MODJAVA_VER= 17 Is it 17-only? If not then it might be better to use MODJAVA_VER=11+ or 1.8+ (the latter would allow it to run on sparc64 too). (According to commit log the old version didn't run on 11 which is

Re: net/openfire update to 4.6.7 fix log4shell CVE-2021-44832

2022-01-28 Thread Ian Darwin
Ping? On 1/19/22 12:51, Ian Darwin wrote: Update to 4.6.7, which uses log4j 2.1.7. Use modern Java runtime. Drop some trivial sampled files. Use provided class files instead of compiling, to speed build. Take Maintainer in case I'm the only one still using it :-). OK? And yes, I know they rel

Re: net/openfire update to 4.6.7 fix log4shell CVE-2021-44832

2022-01-20 Thread Ian Darwin
On Wed, Jan 19, 2022 at 12:51:49PM -0500, Ian Darwin wrote: > Update to 4.6.7, which uses log4j 2.1.7. Use modern Java runtime. Drop > some trivial sampled files. Use provided class files instead > of compiling, to speed build. Take Maintainer in case I'm the only > one still using it :-). > Jus

net/openfire update to 4.6.7 fix log4shell

2022-01-19 Thread Ian Darwin
Update to 4.6.7, which uses log4j 2.1.7. Use modern Java runtime. Drop some trivial sampled files. Use provided class files instead of compiling, to speed build. Take Maintainer in case I'm the only one still using it :-). OK? And yes, I know they released 4.7.0 an hour ago, but (a) it's a brand