Skip to content
This repository was archived by the owner on Jul 28, 2026. It is now read-only.

Update Elasticsearch dependency. - #386

Open
tmehlinger wants to merge 4 commits into
masterfrom
update-es-dependency
Open

Update Elasticsearch dependency.#386
tmehlinger wants to merge 4 commits into
masterfrom
update-es-dependency

Conversation

@tmehlinger

Copy link
Copy Markdown
Member

This updates our Elasticsearch dependency in the dependency containers
to mitigate https://www.cve.org/CVERecord?id=CVE-2021-44228.

Travis Mehlinger added 3 commits December 20, 2021 12:08
@Zozman

Zozman commented Dec 20, 2021

Copy link
Copy Markdown
Contributor

The same Docker update needs to be done on

ENV ES_PKG_NAME elasticsearch-7.8.0-linux-x86_64
ENV ES_FOLDER_NAME elasticsearch-7.8.0
as well, right?

@serapio

serapio commented Dec 20, 2021

Copy link
Copy Markdown
Contributor

@tmehlinger

Copy link
Copy Markdown
Member Author

@serapio Agree, we should put a note there about pulling down the latest. However, we also need to update the mindmeldworkbench/dep image referred to there. Could someone point me to where/how we push updates to that image?

@tmehlinger

Copy link
Copy Markdown
Member Author

Presently failing because I updated the code to use the latest ES releases... which don't have corresponding Docker images yet. I'll check again later.

@vrdn-23

vrdn-23 commented Mar 21, 2022

Copy link
Copy Markdown
Contributor

@tmehlinger The docker builds seem to be available now.
https://www.docker.elastic.co/r/elasticsearch
Do you want me to take a look at this issue?

@tmehlinger

Copy link
Copy Markdown
Member Author

Man, I've been living under a rock. I'd be thrilled if you look into this. :D

@Zozman

Zozman commented Jul 6, 2022

Copy link
Copy Markdown
Contributor

Man, I've been living under a rock. I'd be thrilled if you look into this. :D

Saw this and actually have some work on it so went ahead and filed #425 if y'all are interested.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants