Project

General

Profile

Actions
Copy link

Bug #23641

closed

Bug #23608: Several low impact CVE in Jetty 10.0.12

Bug #23622: Some jetty patches don't apply to 10.0.17

parent ticket break rudder-jetty

Added by Nicolas CHARLES 7 months ago. Updated 6 months ago.

Status:
Rejected
Priority:
N/A
Assignee:
Alexis Mousset
Category:
Packaging
Target version:
7.3.9
Pull Request:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
0
Name check:
To do
Fix check:
To do
Regression:
No

Description

long lines are truncated, and it breaks rudder-jetty.sh

once truncation is fixed, I have 

Oct 24 16:56:34 rudder-snapshot rudder-jetty.sh[53760]: Starting Jetty: Setting umask to 0007
Oct 24 16:56:34 rudder-snapshot rudder-jetty.sh[53841]: start-stop-daemon: invalid option -- 'D'
Oct 24 16:56:34 rudder-snapshot rudder-jetty.sh[53841]: Try 'start-stop-daemon --help' for more information.
Oct 24 16:56:34 rudder-snapshot rudder-jetty.sh[53842]: /opt/rudder/bin/rudder-jetty.sh: line 617: --make-pidfile: command not found
Oct 24 16:58:32 rudder-snapshot systemd[1]: rudder-jetty.service: start operation timed out. Terminating.
Oct 24 16:58:32 rudder-snapshot rudder-jetty.sh[53760]: .......................................................................................................>
Oct 24 16:58:32 rudder-snapshot systemd[1]: rudder-jetty.service: Failed with result 'timeout'.
Oct 24 16:58:32 rudder-snapshot systemd[1]: Failed to start Jetty Web Application Server.

Actions
Copy link
 #1

Updated by Nicolas CHARLES 7 months ago

  • Status changed from New to In progress
Actions
Copy link
 #2

Updated by Nicolas CHARLES 7 months ago

  • Description updated (diff)
Actions
Copy link
 #4

Updated by Nicolas CHARLES 7 months ago

the rudder-jetty.sh contains

      echo ${RUN_ARGS[@]} --start-log-file="$JETTY_START_LOG" | xargs start-stop-daemon \
       -k ${UMASK} \
       --start $CH_USER \
       --pidfile "$JETTY_PID" \
       --chdir "$JETTY_BASE" \
       --background \
       --output "${JETTY_RUN}/start-stop.log" 
       --make-pidfile \
       --startas "$JAVA" \
       --
      (( DEBUG )) && echo "Starting: start-stop-daemon"

ransforming it to 
      echo ${RUN_ARGS[@]} --start-log-file="$JETTY_START_LOG" | xargs start-stop-daemon \
       -k ${UMASK} \
       --start $CH_USER \
       --pidfile "$JETTY_PID" \
       --chdir "$JETTY_BASE" \
       --background \
       --output "${JETTY_RUN}/start-stop.log" \
       --make-pidfile \
       --startas "$JAVA" \
       --

      (( DEBUG )) && echo "Starting: start-stop-daemon"

solves the issue, on top of the WIP attached

Actions
Copy link
 #5

Updated by Alexis Mousset 7 months ago

  • Assignee changed from Nicolas CHARLES to Alexis Mousset
Actions
Copy link
 #6

Updated by Vincent MEMBRÉ 7 months ago

  • Target version changed from 7.3.8 to 7.3.9
Actions
Copy link
 #7

Updated by Alexis Mousset 6 months ago

  • Status changed from In progress to Rejected
Actions
Copy link

Also available in: Atom PDF