dokku / dokku-elasticsearch

an elasticsearch plugin for dokku
MIT License
94 stars 35 forks source link

Upgrade Elasticsearch version to 7.16.2 #99

Closed duffn closed 2 years ago

duffn commented 2 years ago

Description of problem

The plugin is using a vulnerable version of Elasticsearch. It should be upgraded to version 7.16.2 as per this Dependabot update: https://github.com/dokku/dokku-elasticsearch/pull/98

How reproducible

Steps to Reproduce

  1. Install the plugin

Actual Results

Version 7.14.2 is running: https://github.com/dokku/dokku-elasticsearch/blob/master/Dockerfile

Screen Shot 2021-12-31 at 7 41 07 AM

Expected Results

The plugin should run Log4j patched version 7.16.2.

Screen Shot 2021-12-31 at 7 41 16 AM

Environment Information

dokku report APP_NAME output

Affected in all apps that use the plugin.

How (deb/make/rpm) and where (AWS, VirtualBox, physical, etc.) was Dokku installed?:

Additional information

josegonzalez commented 2 years ago

This is done. Thanks for reporting.