nixos/jitsi-videobridge: Mitigate CVE-2021-44228 (#150021)

This commit mitigates a remote code execution vulnerability in the log4j library.
3 years ago · c2b79874a7
parent 1b0334540f
commit c2b79874a7
1 changed files with 2 additions and 0 deletions
--- a/nixos/modules/services/networking/jitsi-videobridge.nix
+++ b/nixos/modules/services/networking/jitsi-videobridge.nix
@ -217,6 +217,8 @@ in
        "-Dnet.java.sip.communicator.SC_HOME_DIR_NAME" = "videobridge";
        "-Djava.util.logging.config.file" = "/etc/jitsi/videobridge/logging.properties";
        "-Dconfig.file" = pkgs.writeText "jvb.conf" (toHOCON jvbConfig);
+        # Mitigate CVE-2021-44228
+        "-Dlog4j2.formatMsgNoLookups" = true;
      } // (mapAttrs' (k: v: nameValuePair "-D${k}" v) cfg.extraProperties);
    in
    {