Logo Cineca Logo SCAI
MARCONI status
GALILEO100 status
LEONARDO status

You are here

IMPORTANT UPDATE: ADA Cloud vulnerability issue

Error message

Deprecated function: unserialize(): Passing null to parameter #1 ($data) of type string is deprecated in css_injector_init() (line 53 of /prod_service02/web-prod/hpc-web/sites/all/modules/css_injector/css_injector.module).
20/12/2021

Dear CINECA cloud users,

this is an update about previous communication
https://www.hpc.cineca.it/center_news/ada-cloud-important-vulnerability-...

Unfortunately, the solutions proposed in previous HPC-news is found to be not sufficient since other vulnerabilities have been discovered in the meanwhile.
https://www.lunasec.io/docs/blog/log4j-zero-day/#who-is-impacted

In order to solve the vulnerability, you need to update log4j up to version 2.17.0

Best regards,

HPC User Support @ CINECA