tree 555f9b7f33f77b72ba416a7b071e1a1688a8b033
parent 9878980fd69b8e2d61d84066ab2556beba68d96f
author Luca Milanesio <luca.milanesio@gmail.com> 1640210059 +0000
committer Luca Milanesio <luca.milanesio@gmail.com> 1640230391 +0000

Remove support for vulnerable ES versions

ES has been updated to v7.16.2 for fixing the Log4J v2 vulnerability
CVE-2021-44228.

Remove support in Gerrit for any vulnerable ES version and keep
compatibility with v7.16.* versions only, testing only the
non-vulnerable v7.16.2.

Use the Docker image from GerritForge [3] because of the compatibility
issues with the Docker daemon used by the GCloud VMs made available by
Google for the Gerrit-CI.

[1] https://discuss.elastic.co/t/apache-log4j2-remote-code-execution-rce-vulnerability-cve-2021-44228-esa-2021-31/291476
[2] https://nvd.nist.gov/vuln/detail/CVE-2021-44228
[3] https://github.com/GerritForge/docker-elasticsearch-alpine/blob/master/7.16/Dockerfile

Bug: Issue 15481
Change-Id: I5bfb8971efea1be787de52addec5cab37d38133f