CMR-9543: Snyk Vulnerability - CVE-2023-31418, SNYK-JAVA-ORGELASTICSE…

…ARCH-6039899 (update elasticsearch to 7.17.13) (#2007) * update elasticsearch and kibana from 7.16.2 to 7.17.13
nasa · Dec 7, 2023 · 2bf70bb · 2bf70bb
1 parent 98c8c86
commit 2bf70bb
Show file tree

Hide file tree

Showing 5 changed files with 7 additions and 7 deletions.
diff --git a/dev-system/resources/elasticsearch/Dockerfile.elasticsearch b/dev-system/resources/elasticsearch/Dockerfile.elasticsearch
@@ -1,4 +1,4 @@
-FROM docker.elastic.co/elasticsearch/elasticsearch:7.16.2
+FROM docker.elastic.co/elasticsearch/elasticsearch:7.17.13
 
 COPY es_libs /usr/share/elasticsearch/lib/
 COPY plugins /usr/share/elasticsearch/plugins/

diff --git a/elastic-utils-lib/project.clj b/elastic-utils-lib/project.clj
@@ -1,4 +1,4 @@
-(def elastic-version "7.16.2")
+(def elastic-version "7.17.13")
 
 (defproject nasa-cmr/cmr-elastic-utils-lib "0.1.0-SNAPSHOT"
   :description "A library containing utilities for dealing with Elasticsearch."

diff --git a/elastic-utils-lib/src/cmr/elastic_utils/embedded_elastic_server.clj b/elastic-utils-lib/src/cmr/elastic_utils/embedded_elastic_server.clj
@@ -12,11 +12,11 @@
 
 (def ^:private elasticsearch-official-docker-image
   "Official docker image."
-  "docker.elastic.co/elasticsearch/elasticsearch:7.16.2")
+  "docker.elastic.co/elasticsearch/elasticsearch:7.17.13")
 
 (def ^:private kibana-official-docker-image
   "Official kibana docker image."
-  "docker.elastic.co/kibana/kibana:7.16.2")
+  "docker.elastic.co/kibana/kibana:7.17.13")
 
 (defn- build-kibana
   "Build kibana in an embedded docker."

diff --git a/es-spatial-plugin/project.clj b/es-spatial-plugin/project.clj
@@ -33,7 +33,7 @@
                                            :suppression-file "resources/security/suppression.xml"}}
              :provided {:dependencies [[nasa-cmr/cmr-common-lib "0.1.1-SNAPSHOT"]
                                        [nasa-cmr/cmr-spatial-lib "0.1.0-SNAPSHOT"]
-                                       [org.elasticsearch/elasticsearch "7.16.2"]
+                                       [org.elasticsearch/elasticsearch "7.17.13"]
                                        [org.yaml/snakeyaml "1.31"]]}
              :es-deps {:dependencies [[nasa-cmr/cmr-spatial-lib "0.1.0-SNAPSHOT"
                                        ;; These exclusions will be provided by elasticsearch.
@@ -65,7 +65,7 @@
                    :dependencies [[criterium "0.4.4"]
                                   [nasa-cmr/cmr-common-lib "0.1.1-SNAPSHOT"]
                                   [nasa-cmr/cmr-spatial-lib "0.1.0-SNAPSHOT"]
-                                  [org.elasticsearch/elasticsearch "7.16.2"]
+                                  [org.elasticsearch/elasticsearch "7.17.13"]
                                   [org.clojars.gjahad/debug-repl "0.3.3"]
                                   [org.clojure/tools.nrepl "0.2.13"]
                                   [org.clojure/tools.namespace "0.2.11"]

diff --git a/es-spatial-plugin/resources/plugin/plugin-descriptor.properties b/es-spatial-plugin/resources/plugin/plugin-descriptor.properties
@@ -16,4 +16,4 @@ classname=cmr.elasticsearch.plugins.SpatialSearchPlugin
 java.version=1.8
 #
 # 'elasticsearch.version': version of elasticsearch compiled against
-elasticsearch.version=7.16.2
+elasticsearch.version=7.17.13