Re: Jmeter Log4J

2021-12-14 Thread Valery Zabawski
Thank you! Replacing files looks like the most easy way, so I’m going to give it a try. Thanks to everyone for the reply. > 14 дек. 2021 г., в 18:54, Philippe Mouawad > написал(а): > >  > Hello, > You can also read this: >

Re: Jmeter Log4J

2021-12-14 Thread Philippe Mouawad
Hello, You can also read this: https://www.ubik-ingenierie.com/blog/jmeter-and-the-log4j2-vulnerability/ Regards On Tue, Dec 14, 2021 at 4:45 PM Dmitri T wrote: > It should be sufficient to add the next line to *system.properties* file > (lives in "bin" folder of your JMeter installation) > >

Re: Jmeter Log4J

2021-12-14 Thread Dmitri T
It should be sufficient to add the next line to /system.properties/ file (lives in "bin" folder of your JMeter installation) *log4j2.formatMsgNoLookups=true* or pass this property via -D command-line argument like: *jmeter -Dlog4j2.formatMsgNoLookups=true -n -t .* More information: *

Re: Jmeter release with CVE-2021-44228 mitigation

2021-12-14 Thread Philippe Mouawad
Hello, You can read this blog which details how to proceed: - https://www.ubik-ingenierie.com/blog/jmeter-and-the-log4j2-vulnerability/ Regards Philippe M. On Tue, Dec 14, 2021 at 4:00 PM Smruti Ranjan Roul wrote: > I have just raised this recently. But from one of the forum, I came to

RE: Jmeter release with CVE-2021-44228 mitigation

2021-12-14 Thread Smruti Ranjan Roul
I have just raised this recently. But from one of the forum, I came to know that you can download the log4j jar files and replace on the JMeter package. The latest 2.16 version is readily available. https://logging.apache.org/log4j/2.x/download.html Thanks, Smruti -Original Message-

Jmeter release with CVE-2021-44228 mitigation

2021-12-14 Thread Valeriy Zabawski
Hello everyone. I've noticed a commit in Jmeter GitHub repo that mitigates a recently discovered vulnerability in log4j library used by Jmeter. As far as I can see, this fix was only added to the code and new builds with the updated library were made. Does anyone know when the new version with

Jmeter Log4J

2021-12-14 Thread Smruti Ranjan Roul
Hi Team, With the recent vulnerabilities identified on Apache Log4j on 10th December, I wanted to know if there will be a new version of the Apache JMeter planned with the latest log4j versions. With the organization security policy, there will be a scan on the log4j. We know this will not