This is an automated email from the ASF dual-hosted git repository.
btellier pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/james-project.git
commit cdfef0d8dd5b492e64f21cda5e9bc8fcb070f5cb
Author: Rene Cordier <rcord...@linagora.com>
AuthorDate: Wed Sep 25 11:45:57 2019 +0700
JAMES-2855 Upgrade tika server image from 1.20 -> 1.22
To fix:
- [CVE-2019-10088] OOM from a crafted Zip File in Apache Tika's
RecursiveParserWrapper
- [CVE-2019-10093] Denial of Service in Apache Tika's 2003ml and 2006ml
Parsers
- [CVE-2019-10094] StackOverflow from Crafted Package/Compressed Files in
Apache Tika's RecursiveParserWrapper
---
JenkinsfileStressTests.groovy | 2 +-
dockerfiles/run/docker-compose.yml | 2 +-
server/testing/src/main/java/org/apache/james/util/docker/Images.java | 2 +-
3 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/JenkinsfileStressTests.groovy b/JenkinsfileStressTests.groovy
index df048a1..3d1087f 100644
--- a/JenkinsfileStressTests.groovy
+++ b/JenkinsfileStressTests.groovy
@@ -57,7 +57,7 @@ pipeline {
sh "cd /srv && sudo btrfs subvolume snapshot
bench-snapshot bench-running-docker"
sh 'docker run -d --name=cassandra -p 9042:9042 -v
/srv/bench-running-docker/cassandra:/var/lib/cassandra cassandra:3.11.3'
sh 'docker run -d --name=elasticsearch -p
9200:9200 -v
/srv/bench-running-docker/elasticsearch:/usr/share/elasticsearch/data/elasticsearch
--env "discovery.type=single-node"
docker.elastic.co/elasticsearch/elasticsearch:6.3.2'
- sh 'docker run -d --name=tika
logicalspark/docker-tikaserver:1.19.1'
+ sh 'docker run -d --name=tika
linagora/docker-tikaserver:1.22'
sh 'docker run -d --name=swift -p 8080:8080 -v
/srv/bench-running-docker/swift:/srv/1/node/sdb1
jeantil/openstack-keystone-swift:pike'
sh 'docker run -d --name=rabbitmq -p 15672:15672
-p 5672:5672 rabbitmq:3.7.7-management'
diff --git a/dockerfiles/run/docker-compose.yml
b/dockerfiles/run/docker-compose.yml
index 2904eec..fd221f0 100644
--- a/dockerfiles/run/docker-compose.yml
+++ b/dockerfiles/run/docker-compose.yml
@@ -34,7 +34,7 @@ services:
- "9042:9042"
tika:
- image: logicalspark/docker-tikaserver:1.20
+ image: linagora/docker-tikaserver:1.22
rabbitmq:
image: rabbitmq:3.7.7-management
diff --git
a/server/testing/src/main/java/org/apache/james/util/docker/Images.java
b/server/testing/src/main/java/org/apache/james/util/docker/Images.java
index cba0c10..48b004e 100644
--- a/server/testing/src/main/java/org/apache/james/util/docker/Images.java
+++ b/server/testing/src/main/java/org/apache/james/util/docker/Images.java
@@ -25,6 +25,6 @@ public interface Images {
String ELASTICSEARCH_2 = "elasticsearch:2.4.6";
String ELASTICSEARCH_6 =
"docker.elastic.co/elasticsearch/elasticsearch:6.3.2";
String NGINX = "nginx:1.15.1";
- String TIKA = "logicalspark/docker-tikaserver:1.20";
+ String TIKA = "linagora/docker-tikaserver:1.22";
String SPAMASSASSIN = "dinkel/spamassassin:3.4.0";
}
---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscr...@james.apache.org
For additional commands, e-mail: server-dev-h...@james.apache.org
