unifi-docker/hotfixes
Jacob Alberty 1ff12739f8 Update to log4j 2.17.1 2021-12-30 14:40:30 -06:00
..
README.md Add hotfixes folder with a readme 2021-12-11 10:46:02 -06:00
cve-2021-45105 Update to log4j 2.17.1 2021-12-30 14:40:30 -06:00
cve-2021-45105-validate.md5sum Update to log4j 2.17.1 2021-12-30 14:40:30 -06:00

README.md

This folder should normally remain empty, but just in case there's a hot fix for a major vulnerability the hotfix can be applied in the folder

run-parts will be executed to apply any hotfixes in the folder so hotfixes should be in the form of a shellscript named after the relevant cve with no extension. IE the recent log4j would have a shell script named cve-2021-44228 containing the fix. Then to verify the hotfix applied before launching you could also add a md5sum file with the name cve-2021-44228-validate.md5sum. The docker-entrypoint.sh will not let execution proceed without those md5sums passing.