janusgraph-users@lists.lfaidata.foundation

Home Messages Hashtags Subgroups Calendar

Messages

Between

and

Re: Janusgraph-full-0.6.1: how to fix "WARNING: Critical severity vulnerabilities were found with Log4j!"

Hi Yingjie, OK, I tried for myself. From the initial log lines in the Gremlin Console: SLF4J: Class path contains multiple SLF4J bindings. SLF4J: Found binding in

By hadoopmarc@... · #6659 ·

Re: Janusgraph-full-0.6.1: how to fix "WARNING: Critical severity vulnerabilities were found with Log4j!"

Hello Marc, For this build, in directory janusgraph-full-1.0.0-SNAPSHOT/lib, there are log4j-1.2.17.jar , log4j-api-2.18.0.jar, log4j-core-2.18.0.jar, log4j-slf4j-impl-2.18.0.jar, but no

By Yingjie Li · #6657 ·

Re: Janusgraph-full-0.6.1: how to fix "WARNING: Critical severity vulnerabilities were found with Log4j!"

Hi Yingjie, See my earlier comment, with respect to janusgraph-0.6.2: >>My suggestion was incomplete. In addition to removing the log4j-1.2.17.jar file from the lib folder, you have to remove the

By hadoopmarc@... · #6656 ·

Re: Janusgraph-full-0.6.1: how to fix "WARNING: Critical severity vulnerabilities were found with Log4j!"

Hello Jan, Thanks for the pointers. I downloaded the last build based on the link you provided. I unzipped janusgraph-full-1.0.0-SNAPSHOT.zip and tried starting Janusgraph and gremlin.sh, both

By Yingjie Li · #6655 ·

Re: Operate with JMX metrics and measurements units. What metrics to observe for read queries?

Hi, Please can someone clarify the default unit for the time relates metrics? Couldnt find this from any of the docs or on the internet. Thanks! Ronnie

By Ronnie · #6654 ·

Re: Composite Indexing not working as expected for property on vertex in janusgraph 0.6.1

Hi Nikita, Can you please provide me with the complete steps to reproduce your issue? Preferably code lines that work in the Gremlin Console for the JanusGraph inmemory graph, including the schema and

By hadoopmarc@... · #6653 ·

Re: Composite Indexing not working as expected for property on vertex in janusgraph 0.6.1

Hi, There is one observation that, 1. I faced above issue when the data was loaded with graph.addVertex() method 2. I added sample data using graph traverser g.addV().property().property() and it

By Nikita Pande · #6652 ·

Re: Composite Indexing not working as expected for property on vertex in janusgraph 0.6.1

> Can the indexing work with property of single cardinality? Yes.

By hadoopmarc@... · #6651 ·

Re: Composite Indexing not working as expected for property on vertex in janusgraph 0.6.1

Hi hadoopmarc, Thanks for elaborate explanation. The cardinality is SINGLE for the property "newid". newid | SINGLE | class java.lang.String Can the indexing work with

By Nikita Pande · #6650 ·

Re: Required Capacity Error - JanusGraph on Cassandra

Hi Joe, With "an index on type and range" you really mean: mgmt.buildIndex('byTypeAndRange', Vertex.class).addKey(type).addKey(range).buildCompositeIndex() Indeed, supernodes have little value in

By hadoopmarc@... · #6649 ·

Re: Composite Indexing not working as expected for property on vertex in janusgraph 0.6.1

Hi Nikita, Indeed, the janusgraph query optimizer can not handle the has("newid",unfold().is("hash data")) construct in the right way and the index does not trigger. But then, this construct is not

By hadoopmarc@... · #6648 ·

Re: Janusgraph-full-0.6.1: how to fix "WARNING: Critical severity vulnerabilities were found with Log4j!"

Hi Yingjie, You can also download our latest artifacts from github action. https://github.com/JanusGraph/janusgraph/actions/workflows/ci-release.yml?query=branch%3Amaster+is%3Acompleted Just go to the

By Jansen, Jan · #6647 ·

Re: Janusgraph-full-0.6.1: how to fix "WARNING: Critical severity vulnerabilities were found with Log4j!"

Hi Yingjie, As edited in my previous reaction, the Cassandra jars in the JanusGraph distribution do not include the log4j jar. As to elasticsearch, your best choices are: not use mixed indices (check

By hadoopmarc@... · #6646 ·

Re: Janusgraph-full-0.6.1: how to fix "WARNING: Critical severity vulnerabilities were found with Log4j!"

Marc, Yes, we use Cassandra and Elasticsearch at the backend from janusgraph-full-0.6.2 . What are the steps to disable log4j? Thanks Yingjie Th

By Yingjie Li · #6645 ·

Re: Janusgraph-full-0.6.1: how to fix "WARNING: Critical severity vulnerabilities were found with Log4j!"

Hi Yingjie, As to the short term workaround with removing the log4j jars, from the lib folder you can still use the gremlin console if you edit the ext/plugins.txt file and remove the lines with the

By hadoopmarc@... · #6644 · Edited

Re: Janusgraph-full-0.6.1: how to fix "WARNING: Critical severity vulnerabilities were found with Log4j!"

Hello Jan, Yes, the only issue is the log4j2 that comes with janusgraph-full-0.6.2.zip installation. If there are some configurations that can be changed to fix this issue, that's all what we need.

By Yingjie Li · #6643 ·

Re: Janusgraph-full-0.6.1: how to fix "WARNING: Critical severity vulnerabilities were found with Log4j!"

Hi It won't be possible to backport without breaking change. We could work on release of janusgraph 1, after we finished upgrading to Tinkerpop 3.6. We have multiple libs with CVEs in 0.6. If your

By Jansen, Jan · #6642 ·

Re: Janusgraph-full-0.6.1: how to fix "WARNING: Critical severity vulnerabilities were found with Log4j!"

I see. Basically we got a violation notification from the IT dept of our company when running the Janusgraph and were asked to either fix or remove the application. As this is a relatively severe

By Yingjie Li · #6641 ·

Re: Janusgraph-full-0.6.1: how to fix "WARNING: Critical severity vulnerabilities were found with Log4j!"

Sorry I am not sure about that… Maybe Jan (CCed) could answer that?

By Boxuan Li · #6640 ·

Re: Janusgraph-full-0.6.1: how to fix "WARNING: Critical severity vulnerabilities were found with Log4j!"

Hello Boxuan, Does it mean there is no existing release version for full install with this issue being fixed? Would it be possible to have a release with the fix as the code seems available? The

By Yingjie Li · #6639 ·

81 - 100 of 6735

Home Hashtags Subgroups Calendar Terms