From 4925948fa1df80814700f45bfadfe64715e71332 Mon Sep 17 00:00:00 2001
From: Lara <lara@uwu.is>
Date: Fri, 10 Dec 2021 09:56:36 +0000
Subject: [PATCH] nixos/jitsi-videobridge: Mitigate CVE-2021-44228

This commit mitigates a remote code execution vulnerability in the log4j
library.
---
 nixos/modules/services/networking/jitsi-videobridge.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/nixos/modules/services/networking/jitsi-videobridge.nix b/nixos/modules/services/networking/jitsi-videobridge.nix
index dd06ad98a973..abb0bd0a25e1 100644
--- a/nixos/modules/services/networking/jitsi-videobridge.nix
+++ b/nixos/modules/services/networking/jitsi-videobridge.nix
@@ -217,6 +217,8 @@ in
         "-Dnet.java.sip.communicator.SC_HOME_DIR_NAME" = "videobridge";
         "-Djava.util.logging.config.file" = "/etc/jitsi/videobridge/logging.properties";
         "-Dconfig.file" = pkgs.writeText "jvb.conf" (toHOCON jvbConfig);
+        # Mitigate CVE-2021-44228
+        "-Dlog4j2.formatMsgNoLookups" = true;
       } // (mapAttrs' (k: v: nameValuePair "-D${k}" v) cfg.extraProperties);
     in
     {