Remove xmlsec deletion (DataBiosphere/azul-private#107, DataBiosphere…

…/azul#6570) xmlsec was updated to 2.2.6 in elasticsearch 7.17.24, and no longer has the CVE-2021-40690 vulnerability that xmlsec 2.1.4 had
DataBiosphere · Sep 17, 2024 · c7234ed · c7234ed
1 parent 86d38b8
commit c7234ed
Showing 1 changed file with 0 additions and 3 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -6,9 +6,6 @@ ARG azul_docker_elasticsearch_internal_version
 
 RUN apt-get update && apt-get upgrade -y
 
-# https://nvd.nist.gov/vuln/detail/CVE-2021-40690
-RUN rm /usr/share/elasticsearch/modules/x-pack-{identity-provider,security}/xmlsec-2.1.4.jar
-
 # https://nvd.nist.gov/vuln/detail/CVE-2023-1370
 RUN rm /usr/share/elasticsearch/modules/x-pack-security/nimbus-jose-jwt-9.23.jar