Browse Source

[Solr] Remove breached class from log4j-core.jar (#4390)

Niklas Meyer 3 years ago
parent
commit
e8ca588884
2 changed files with 6 additions and 1 deletions
  1. 5 0
      data/Dockerfiles/solr/Dockerfile
  2. 1 1
      docker-compose.yml

+ 5 - 0
data/Dockerfiles/solr/Dockerfile

@@ -16,10 +16,15 @@ RUN dpkgArch="$(dpkg --print-architecture | awk -F- '{ print $NF }')" \
   tzdata \
   curl \
   bash \
+  zip \
   && apt-get autoclean \
   && rm -rf /var/lib/apt/lists/* \
   && chmod +x /solr.sh \
   && sync \
   && bash /solr.sh --bootstrap
+  
+RUN zip -q -d /opt/solr/server/lib/ext/log4j-core-*.jar org/apache/logging/log4j/core/lookup/JndiLookup.class
+
+RUN apt remove zip -y  
 
 CMD ["/solr.sh"]

+ 1 - 1
docker-compose.yml

@@ -523,7 +523,7 @@ services:
             - dockerapi
 
     solr-mailcow:
-      image: mailcow/solr:1.8
+      image: mailcow/solr:1.8.1
       restart: always
       volumes:
         - solr-vol-1:/opt/solr/server/solr/dovecot-fts/data:Z