Re: Apache Ant: Log4j 1.x Vulnerabilities

2022-01-13 Thread Stefan Bodewig
On 2022-01-13, Christopher Schultz wrote: > On 1/12/22 15:57, Stefan Bodewig wrote: >> On 2022-01-12, wrote: >>>1. Do you have any mitigation options available for addressing both >>> CVE-2019-17571 and CVE-2021-4104? >>> https://nvd.nist.gov/vuln/detail/CVE-2019-17571 >>> https://nvd.nist

Re: Need Input to resolve error

2022-01-13 Thread Stefan Bodewig
On 2022-01-13, Manjunath S wrote: > Path to, File ant-contrib-1.0b3.jar file is valid and it is downloaded from > Git via jenkins script. The same is working on the Windows platform. could still be corrupted locally. Can you open it with your ZIP tool of choice (JARs are ZIPs after all). zip -Tv

Re: Need Input to resolve error

2022-01-13 Thread Jaikiran Pai
Hello Manjunath, Are you sure you are referring to the right jar and build.xml file? The error mentions b2.jar whereas your build.xml is referring to b3.jar. -Jaikiran On 13/01/22 4:00 pm, Manjunath S wrote: Issue was in Initiated mail ( https://markmail.org/thread/al5hvuxmpqtbg6xy) since

Need Input to resolve error

2022-01-13 Thread Manjunath S
Issue was in Initiated mail ( https://markmail.org/thread/al5hvuxmpqtbg6xy) since i did not mail when Stefan replied to my query, I will continue the query in this mail. Hi Stefan Bodewig, Path to, File ant-contrib-1.0b3.jar file is valid and it is downloaded from Git via jenkins script. The sa