exploit found in log4j

Question

exploit found in log4j

mfmatos opened this issue 3 years ago · comments

mfmatos commented 3 years ago

Details referenced at elastic/elasticsearch#81618

mfmatos · Answer 1 · Tue Dec 14 2021 01:21:15 GMT+0800 (China Standard Time)

Ref.: https://logging.apache.org/log4j/log4j-2.11.1/manual/configuration.html#formatMsgNoLookups

mfmatos · Answer 2 · Tue Dec 14 2021 02:01:47 GMT+0800 (China Standard Time)

Imagem já foi reconstruída e publicada

https://hub.docker.com/repository/docker/ligero/elasticsearch

para atualizar o LigeroSmart OpenSource
dentro da pasta do projeto:

docker-compose pull elasticsearch && docker-compose up -d elasticsearch

Para o OnPremise, basta acessar o portainer e atualizar o serviço elasticsearch na stack ligerosmart, marcando a opção para baixar a imagem nova (Pull latest image version).