update message for other CVE

uselagoon · Dec 15, 2021 · 9d6cb96 · 9d6cb96
1 parent eb43fe0
commit 9d6cb96
Show file tree

Hide file tree

Showing 7 changed files with 7 additions and 7 deletions.
diff --git a/images/elasticsearch/6.Dockerfile b/images/elasticsearch/6.Dockerfile
@@ -37,7 +37,7 @@ ENV TMPDIR=/tmp \
 
 RUN yum -y install zip && yum -y clean all  && rm -rf /var/cache
 
-# Mitigation for CVE-2021-45046 (already removed from first jar file)
+# Mitigation for CVE-2021-45046 and CVE-2021-44228 (already removed from first jar file)
 # RUN zip -q -d /usr/share/elasticsearch/lib/log4j-core-2.11.1.jar org/apache/logging/log4j/core/lookup/JndiLookup.class
 RUN zip -q -d /usr/share/elasticsearch/bin/elasticsearch-sql-cli-6.8.21.jar org/apache/logging/log4j/core/lookup/JndiLookup.class
 

diff --git a/images/elasticsearch/7.Dockerfile b/images/elasticsearch/7.Dockerfile
@@ -37,7 +37,7 @@ ENV TMPDIR=/tmp \
 
 RUN yum -y install zip && yum -y clean all  && rm -rf /var/cache
 
-# Mitigation for CVE-2021-45046
+# Mitigation for CVE-2021-45046 and CVE-2021-44228
 RUN zip -q -d /usr/share/elasticsearch/lib/log4j-core-2.11.1.jar org/apache/logging/log4j/core/lookup/JndiLookup.class \
     && zip -q -d /usr/share/elasticsearch/bin/elasticsearch-sql-cli-7.8.1.jar org/apache/logging/log4j/core/lookup/JndiLookup.class
 

diff --git a/images/logstash/6.Dockerfile b/images/logstash/6.Dockerfile
@@ -41,7 +41,7 @@ RUN fix-permissions /usr/share/logstash/data \
 
 RUN yum -y install zip && yum -y clean all  && rm -rf /var/cache
 
-# Mitigation for CVE-2021-45046
+# Mitigation for CVE-2021-45046 and CVE-2021-44228
 RUN zip -q -d /usr/share/logstash/logstash-core/lib/jars/log4j-core-2.15.0.jar org/apache/logging/log4j/core/lookup/JndiLookup.class \
     && zip -q -d /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-tcp-5.2.3-java/vendor/jar-dependencies/org/logstash/inputs/logstash-input-tcp/5.2.3/logstash-input-tcp-5.2.3.jar org/apache/logging/log4j/core/lookup/JndiLookup.class
 

diff --git a/images/logstash/7.Dockerfile b/images/logstash/7.Dockerfile
@@ -39,7 +39,7 @@ RUN fix-permissions /usr/share/logstash/data \
 
 RUN yum -y install zip && yum -y clean all  && rm -rf /var/cache
 
-# Mitigation for CVE-2021-45046
+# Mitigation for CVE-2021-45046 and CVE-2021-44228
 RUN zip -q -d /usr/share/logstash/logstash-core/lib/jars/log4j-core-2.12.1.jar org/apache/logging/log4j/core/lookup/JndiLookup.class \
     && zip -q -d /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-tcp-6.0.6-java/vendor/jar-dependencies/org/logstash/inputs/logstash-input-tcp/6.0.6/logstash-input-tcp-6.0.6.jar org/apache/logging/log4j/core/lookup/JndiLookup.class
 

diff --git a/images/solr/7.7.Dockerfile b/images/solr/7.7.Dockerfile
@@ -35,7 +35,7 @@ RUN fix-permissions /var/solr \
 
 RUN apk add --no-cache zip
 
-# Mitigation for CVE-2021-45046
+# Mitigation for CVE-2021-45046 and CVE-2021-44228
 RUN zip -q -d /opt/solr/server/lib/ext/log4j-core-2.11.0.jar org/apache/logging/log4j/core/lookup/JndiLookup.class \
     && zip -q -d /opt/solr/contrib/prometheus-exporter/lib/log4j-core-2.11.0.jar org/apache/logging/log4j/core/lookup/JndiLookup.class
 

diff --git a/images/solr/7.Dockerfile b/images/solr/7.Dockerfile
@@ -32,7 +32,7 @@ RUN apt-get -y update && apt-get -y install \
     zip \
     && rm -rf /var/lib/apt/lists/*
 
-# Mitigation for CVE-2021-45046
+# Mitigation for CVE-2021-45046 and CVE-2021-44228
 RUN zip -q -d /opt/solr/server/lib/ext/log4j-core-2.11.0.jar org/apache/logging/log4j/core/lookup/JndiLookup.class \
     && zip -q -d /opt/solr/contrib/prometheus-exporter/lib/log4j-core-2.11.0.jar org/apache/logging/log4j/core/lookup/JndiLookup.class
 

diff --git a/images/solr/8.Dockerfile b/images/solr/8.Dockerfile
@@ -34,7 +34,7 @@ RUN apt-get -y update && apt-get -y install \
     zip \
     && rm -rf /var/lib/apt/lists/*
 
-# Mitigation for CVE-2021-45046
+# Mitigation for CVE-2021-45046 and CVE-2021-44228
 RUN zip -q -d /opt/solr-8.10.1/server/lib/ext/log4j-core-2.14.1.jar org/apache/logging/log4j/core/lookup/JndiLookup.class \
     && zip -q -d /opt/solr-8.10.1/contrib/prometheus-exporter/lib/log4j-core-2.14.1.jar org/apache/logging/log4j/core/lookup/JndiLookup.class