Funnelback patch 15.10.0.41

Upgrades log4j2 to version 2.16 to fix the security vulnerability where log4j2 JNDI features do not protect against attacker-controlled LDAP and other JNDI related endpoints.

lib/java/all/admin-api-client-swagger-generated.jar

lib/java/all/funnelback-api-client-core.jar

lib/java/all/funnelback-collection-update.jar

lib/java/all/funnelback-common.jar

lib/java/all/funnelback-data-api-connector-padre.jar

lib/java/all/funnelback-mediator-core.jar

lib/java/all/funnelback-push-api-client.jar

lib/java/all/funnelback-push-core.jar

lib/java/all/funnelback-reporting-api-client.jar

lib/java/all/funnelback-reporting.jar

lib/java/all/funnelback-social-media.jar

lib/java/all/funnelback-springmvc-common.jar

lib/java/all/funnelback-squizapi.jar

lib/java/all/funnelback-store.jar

lib/java/all/funnelback-warc-library.jar

lib/java/all/funnelback-wca-api-client.jar

lib/java/all/funnelback-wca-checker.jar

lib/java/all/log4j-1.2-api-2.6.2.jar: This is now a empty jar for easy patch application.

lib/java/all/log4j-1.2-api-2.16.0.jar

lib/java/all/log4j-api-2.6.2.jar: This is now a empty jar for easy patch application.

lib/java/all/log4j-api-2.16.0.jar

lib/java/all/log4j-core-2.6.2.jar: This is now a empty jar for easy patch application.

lib/java/all/log4j-core-2.16.0.jar

lib/java/all/log4j-iostreams-2.6.2.jar: This is now a empty jar for easy patch application.

lib/java/all/log4j-iostreams-2.16.0.jar

lib/java/all/log4j-jcl-2.6.2.jar: This is now a empty jar for easy patch application.

lib/java/all/log4j-jcl-2.16.0.jar

lib/java/all/log4j-jul-2.6.2.jar: This is now a empty jar for easy patch application.

lib/java/all/log4j-jul-2.16.0.jar

lib/java/all/log4j-slf4j-impl-2.6.2.jar: This is now a empty jar for easy patch application.

lib/java/all/log4j-slf4j-impl-2.16.0.jar

lib/java/all/log4j-web-2.6.2.jar: This is now a empty jar for easy patch application.

lib/java/all/log4j-web-2.16.0.jar

lib/java/all/publicui-core.jar

lib/java/all/publicui-form-converter.jar

tools/manifoldcf-funnelback-connector.zip

web/server/funnelback-jetty-launcher.jar

web/webapps/funnelback-wca-reporter.war

web/webapps/funnelback-admin-api.war

web/webapps/funnelback-analytics.war

web/webapps/funnelback-classic-admin.war

web/webapps/funnelback-data-api-restful-central.war

web/webapps/funnelback-mediator-endpoint-http.war

web/webapps/funnelback-publicui.war

web/webapps/funnelback-push-api.war

web/webapps/funnelback-redirector.war

web/webapps/funnelback-squizapi-server.war

(Windows) Stop currently running crawls.

Stop the Jetty web server and the Funnelback daemon.

If bin/delete-collection.pl is called directly on the command line, take note of the perl referenced in the #! line.

Deploy the provided files on top of an existing install, backing up all replaced files.

(15.10.0.41) It is recommended that the following (empty) files are deleted: lib/java/all/log4j-1.2-api-2.6.2.jar, lib/java/all/log4j-api-2.6.2.jar, lib/java/all/log4j-core-2.6.2.jar, lib/java/all/log4j-iostreams-2.6.2.jar, lib/java/all/log4j-jcl-2.6.2.jar, lib/java/all/log4j-jul-2.6.2.jar, lib/java/all/log4j-slf4j-impl-2.6.2.jar, lib/java/all/log4j-web-2.6.2.jar.

If bin/delete-collection.pl is called directly on the command line, update the perl referenced in the #! line.

To support extended tweets, add "cb.setTweetModeExtended(true);" after the "ConfigurationBuilder cb = new ConfigurationBuilder();" line in the twitter custom_gather.groovy script.

(15.10.0.41) Run $SEARCH_HOME/bin/setup/start_funnelback_on_boot.pl - Please note that this will cause Funnelback services to be restarted.

Start the Jetty web server and the Funnelback daemon (if they weren’t already started by the previous step)

(15.10.0.32) The conf/<collection>/custom_gather.groovy of each Facebook collection that are failing to update due to Facebook API changes should be updated to have the content provided in share/custom_collection_templates/custom_gather.groovy.facebook. The customer will need to provide a never-expiring page access token to replace the app access token.

(15.10.0.8) If the installation has Facebook collections, the Version given to the DefaultFacebookClient should be changed to Version.Latest e.g. new DefaultFacebookClient(Version.LATEST).

(Windows) Start crawls as needed.

Collections suffering from the issue with instant updates and external metadata will need to be updated before instant updates will work.