mindmeld icon indicating copy to clipboard operation
mindmeld copied to clipboard

Update Elasticsearch dependency.

Open tmehlinger opened this issue 3 years ago • 7 comments

This updates our Elasticsearch dependency in the dependency containers to mitigate https://www.cve.org/CVERecord?id=CVE-2021-44228.

tmehlinger avatar Dec 20 '21 18:12 tmehlinger

The same Docker update needs to be done on https://github.com/cisco/mindmeld/blob/1ff40df9863d627b16031f5897e28786ac83d06b/docker_containers/mindmeld_docker/Dockerfile#L13-L14 as well, right?

Zozman avatar Dec 20 '21 19:12 Zozman

We should fix references in the docs too https://github.com/cisco/mindmeld/blob/master/source/userguide/getting_started.rst#1-install-prerequisites

serapio avatar Dec 20 '21 19:12 serapio

@serapio Agree, we should put a note there about pulling down the latest. However, we also need to update the mindmeldworkbench/dep image referred to there. Could someone point me to where/how we push updates to that image?

tmehlinger avatar Dec 20 '21 20:12 tmehlinger

Presently failing because I updated the code to use the latest ES releases... which don't have corresponding Docker images yet. I'll check again later.

tmehlinger avatar Dec 20 '21 20:12 tmehlinger

@tmehlinger The docker builds seem to be available now. https://www.docker.elastic.co/r/elasticsearch Do you want me to take a look at this issue?

vrdn-23 avatar Mar 21 '22 18:03 vrdn-23

Man, I've been living under a rock. I'd be thrilled if you look into this. :D

tmehlinger avatar Jun 29 '22 18:06 tmehlinger

Man, I've been living under a rock. I'd be thrilled if you look into this. :D

Saw this and actually have some work on it so went ahead and filed #425 if y'all are interested.

Zozman avatar Jul 06 '22 03:07 Zozman