Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Elasticsearch dependency. #386

Open
wants to merge 4 commits into
base: master
Choose a base branch
from
Open

Conversation

tmehlinger
Copy link
Member

This updates our Elasticsearch dependency in the dependency containers
to mitigate https://www.cve.org/CVERecord?id=CVE-2021-44228.

@Zozman
Copy link
Contributor

Zozman commented Dec 20, 2021

The same Docker update needs to be done on

ENV ES_PKG_NAME elasticsearch-7.8.0-linux-x86_64
ENV ES_FOLDER_NAME elasticsearch-7.8.0
as well, right?

@serapio
Copy link
Contributor

serapio commented Dec 20, 2021

@tmehlinger
Copy link
Member Author

@serapio Agree, we should put a note there about pulling down the latest. However, we also need to update the mindmeldworkbench/dep image referred to there. Could someone point me to where/how we push updates to that image?

@tmehlinger
Copy link
Member Author

Presently failing because I updated the code to use the latest ES releases... which don't have corresponding Docker images yet. I'll check again later.

@vrdn-23
Copy link
Contributor

vrdn-23 commented Mar 21, 2022

@tmehlinger The docker builds seem to be available now.
https://www.docker.elastic.co/r/elasticsearch
Do you want me to take a look at this issue?

@tmehlinger
Copy link
Member Author

Man, I've been living under a rock. I'd be thrilled if you look into this. :D

@Zozman
Copy link
Contributor

Zozman commented Jul 6, 2022

Man, I've been living under a rock. I'd be thrilled if you look into this. :D

Saw this and actually have some work on it so went ahead and filed #425 if y'all are interested.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants