ejp-rd-vp / EJP-FiaB-Updates

A place to announce updates, security alerts, and patches to the FAIR-in-a-Box modules
Creative Commons Zero v1.0 Universal
4 stars 0 forks source link

IMPORTANT SECURITY PATCHES ON ALL IMAGES #27

Open markwilkinson opened 5 months ago

markwilkinson commented 5 months ago

Pretty much every image has been upgraded and/or patched. Many of them now report zero issues when audited by Trivy.

THIS IS NOT A NON_DESTRUCTIVE UPGRADE - Please read all of the instructions before you start.

MAKE BACKUPS OF THE TTL FILES FOR ALL RECORDS!

SEE NOTE AT BOTTOM RE: MONGODB!!

Highly recommended to update your docker-compose to:

fdp_client: image: markw/fdp_client:1.17.0

graphdb: image: ontotext/graphdb:10.4.4

fdp: image: markw/fdp:1.17.1

UPDATER HAS BEEN DEPRECATED

mongo: image: mongo:7.0

cde-box-daemon: image: markw/cde-box-daemon:0.5.4 # to use the CARE-SM models with teh care-sm-toolkit

caresm: image: pabloalarconm/care-sm-toolkit:0.0.17

yarrrml-rdfizer: image: markw/yarrrml-rml-ejp:0.1.0

beacon_count: image: pabloalarconm/beacon-api4care-sm:0.2.2

NOTA BENE... Unfortunately, the FDP configuration is stored in that mongodb! :-( (don't blame me, blame the FAIR Data Point team! ;-) )... You SHOULD NOT UPGRADE MONGO unless you are willing to re-install FiaB from scratch. You will find your FDP is unusable, and almost unsalvageable, if you do not follow this instruction!