Bug 1033343

Summary: Do not log passwords at any level
Product: [JBoss] JBoss Enterprise Application Platform 6 Reporter: Justin Bertram <jbertram>
Component: HornetQAssignee: Justin Bertram <jbertram>
Status: CLOSED WONTFIX QA Contact: Miroslav Novak <mnovak>
Severity: unspecified Docs Contact: Russell Dickenson <rdickens>
Priority: unspecified    
Version: 6.1.1CC: jawilson, msvehla
Target Milestone: ---   
Target Release: One-off release   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
PATCH NAME: BZ-1033343 PRODUCT NAME: JBoss Enterprise Application Platform (EAP) VERSION: 6.1.1 SHORT DESCRIPTION: HornetQ 2.3.5.Final needs the fix for HORNETQ-1281 LONG DESCRIPTION: Currently HornetQ logs passwords for Netty keystore/trustore and message inflow under certain conditions. MANUAL INSTALL INSTRUCTIONS: Backup and remove the following files: $JBOSS_HOME/modules/system/layers/base/org/hornetq/main/hornetq-core-client-2.3.5.Final-redhat-2.jar $JBOSS_HOME/modules/system/layers/base/org/hornetq/ra/main/hornetq-ra-2.3.5.Final-redhat-2.jar $JBOSS_HOME/modules/system/layers/base/org/hornetq/main/module.xml $JBOSS_HOME/modules/system/layers/base/org/hornetq/ra/main/module.xml $JBOSS_HOME/bin/client/jboss-client.jar Extract the patched files by either: Using unzip: unzip -d $JBOSS_HOME/ bz-1033343.zip Or by extracting the files from the zip to the following locations: $JBOSS_HOME/mffffodules/system/layers/base/org/hornetq/main/hornetq-core-client-2.3.5.BZ1033343.jar $JBOSS_HOME/modules/system/layers/base/org/hornetq/ra/main/hornetq-ra-2.3.5.BZ1033343.jar $JBOSS_HOME/modules/system/layers/base/org/hornetq/main/module.xml $JBOSS_HOME/modules/system/layers/base/org/hornetq/ra/main/module.xml $JBOSS_HOME/bin/client/jboss-client.jar Instructions to uninstall: Restore the following files that were backed up before the patch was installed: $JBOSS_HOME/modules/system/layers/base/org/hornetq/main/hornetq-core-client-2.3.5.Final-redhat-2.jar $JBOSS_HOME/modules/system/layers/base/org/hornetq/ra/main/hornetq-ra-2.3.5.Final-redhat-2.jar $JBOSS_HOME/modules/system/layers/base/org/hornetq/main/module.xml $JBOSS_HOME/modules/system/layers/base/org/hornetq/ra/main/module.xml $JBOSS_HOME/bin/client/jboss-client.jar COMPATIBILITY: N/A DEPENDENCIES: N/A SUPERSEDES: N/A SUPERSEDED BY: N/A CREATOR: Justin Bertram DATE: 21 of November 2013
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-09-02 13:19:34 UTC Type: Support Patch
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Attachments:
Description Flags
initial patch distribution none

Description Justin Bertram 2013-11-21 21:52:16 UTC
This is a patch incorporating https://bugzilla.redhat.com/show_bug.cgi?id=1031816

Comment 1 Justin Bertram 2013-11-21 22:50:31 UTC
Created attachment 827476 [details]
initial patch distribution