[Solr] Remove breached class from log4j-core.jar (#4390)

master
Niklas Meyer 2021-12-17 12:43:05 +01:00 committed by GitHub
parent 3a94926913
commit e8ca588884
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 6 additions and 1 deletions

View File

@ -16,10 +16,15 @@ RUN dpkgArch="$(dpkg --print-architecture | awk -F- '{ print $NF }')" \
tzdata \ tzdata \
curl \ curl \
bash \ bash \
zip \
&& apt-get autoclean \ && apt-get autoclean \
&& rm -rf /var/lib/apt/lists/* \ && rm -rf /var/lib/apt/lists/* \
&& chmod +x /solr.sh \ && chmod +x /solr.sh \
&& sync \ && sync \
&& bash /solr.sh --bootstrap && bash /solr.sh --bootstrap
RUN zip -q -d /opt/solr/server/lib/ext/log4j-core-*.jar org/apache/logging/log4j/core/lookup/JndiLookup.class
RUN apt remove zip -y
CMD ["/solr.sh"] CMD ["/solr.sh"]

View File

@ -523,7 +523,7 @@ services:
- dockerapi - dockerapi
solr-mailcow: solr-mailcow:
image: mailcow/solr:1.8 image: mailcow/solr:1.8.1
restart: always restart: always
volumes: volumes:
- solr-vol-1:/opt/solr/server/solr/dovecot-fts/data:Z - solr-vol-1:/opt/solr/server/solr/dovecot-fts/data:Z