Mitigating CVE-2021-44228. https://solr.apache.org/security.html#apac…

…he-solr-affected-by-apache-log4j-cve-2021-44228
primeroIMS · Dec 11, 2021 · 0599df8 · 0599df8
1 parent 9a01cb9
commit 0599df8
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/config/version.rb b/config/version.rb
@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 class Primero::Application
-  VERSION = '2.2.0.1'
+  VERSION = '2.2.0.2'
 end
diff --git a/docker/solr/Dockerfile b/docker/solr/Dockerfile
@@ -18,7 +18,11 @@ RUN bin/bash -c set -euox pipefail \
         ; apt install -y $SOLR_PACKAGES \
         ; chown -R $SOLR_USER:$SOLR_GROUP /var/solr/data \
         ; chmod -R 700 /var/solr/data \
-        ; chmod +x /sub.sh
+        ; chmod +x /sub.sh \
+        ; cp /opt/solr/bin/solr.in.sh.orig /opt/solr/bin/solr.in.sh \
+        ; echo 'Defending against CVE-2021-44228' \
+        ; echo 'SOLR_OPTS="$SOLR_OPTS -Dlog4j2.formatMsgNoLookups=true"' >> /opt/solr/bin/solr.in.sh \
+        ; mv /opt/solr/bin/solr.in.sh /etc/default/solr.in.sh
 
 USER $SOLR_USER
 # This could also be put in the compose file.