Bug 2136185

Summary:	log4j contains glyphicons with unacceptable licenses [rhel-9]
Product:	Red Hat Enterprise Linux 9	Reporter:	Marián Konček <mkoncek>
Component:	log4j	Assignee:	Marián Konček <mkoncek>
Status:	CLOSED ERRATA	QA Contact:	Martin Kyral <mkyral>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	unspecified	CC:	mkyral
Target Milestone:	rc	Keywords:	Triaged
Target Release:	---	Flags:	pm-rhel: mirror+
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	log4j-2.17.2-1.el9	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2023-05-09 07:32:28 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Marián Konček 2022-10-19 14:31:19 UTC

This bug was initially created as a copy of Bug #2136182

I am copying this bug because: 
Different version of RHEL


See: https://pagure.io/releng/issue/11083

Log4j versions 2.13 and later started including glyphicons.zip file (used for building the project website, not needed for package build) and additional png files. These files were also present in Fedora and therefore is also present in any already released version in RHEL.

The files are present in source rpms and are not required for package build.

Comment 10 errata-xmlrpc 2023-05-09 07:32:28 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (log4j bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:2197