Error during initialization of Container with rolling logs - CVE-2021-44228

[madduci]

Describe the problem

I am running the 2026.1.1-java25 Image and i get the error that the rolling logs are not possible due to the mentioned CVE.

It worked previously with the version 2025.12.1-java25.

I have the environment Variable ENABLE_ROLLING_LOGS set to true

I couldn't find any mention of the change in the release notes.

Container logs

[init] Image info: buildtime=2026-01-08T13:44:49.316Z,version=2026.1.1,revision=f8ff8a7b8a09d6db52b74e5db2be9bcb3fad9eb9
[init] Autopause functionality enabled
[init] Starting RCON commands
[init] Rcon cmds functionality enabled
[init] Resolving type given PAPER
[mc-image-helper] 20:33:38.493 INFO  : The file /data/plugins/Geyser-Spigot.jar is already up to date
[mc-image-helper] 20:33:38.493 INFO  : The file /data/plugins/floodgate-spigot.jar is already up to date
[init] Copying any plugins from /plugins to /data/plugins
[init] Copying any configs from /config to /data/config
[init] Setting mode
[mc-image-helper] 20:34:04.708 INFO  : Created/updated 1 property in /data/server.properties
[init] [ERROR] Using rolling logs is currently not possible in the selected version due to CVE-2021-44228

[shawb5]

You need to set the environment variable GENERATE_LOG4J2_CONFIG to true .

Set the environment variable GENERATE_LOG4J2_CONFIG to "true" to enable the following features.

Would've been nice if this was listed as a breaking change in the release notes.

[madduci]

thanks @shawb5 for pointing me to the documentation!

[itzg]

Ah, I see this conditional and log brought over from the original code was misleading in this case:

docker-minecraft-server/scripts/start-finalExec

Line 177 in f8ff8a7

logError "Using rolling logs is currently not possible in the selected version due to CVE-2021-44228"

I think I'll incorporate the setting ofENABLE_ROLLING_LOGS as a legacy fallback.

[itzg]

Would've been nice if this was listed as a breaking change in the release notes.

It was mentioned in the release notes, but I do acknowledge it didn't have enough verbiage to mention the impact of ENABLE_ROLLING_LOGS.

[madduci]

@itzg i totally missed it, but thanks for your rapid feedback!