diff --git a/HOTFIX b/HOTFIX index c8afc65ee..8152b3425 100644 --- a/HOTFIX +++ b/HOTFIX @@ -1 +1 @@ -WAZUH AIRGAPFIX 20211206 +WAZUH AIRGAPFIX 20211206 20211210 diff --git a/README.md b/README.md index 0739efec5..1e13a35ed 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,6 @@ -## Security Onion 2.3.90-20211206 +## Security Onion 2.3.90-20211210 -Security Onion 2.3.90-20211206 is here! +Security Onion 2.3.90-20211210 is here! ## Screenshots diff --git a/VERIFY_ISO.md b/VERIFY_ISO.md index 7dfb372cf..524d468d3 100644 --- a/VERIFY_ISO.md +++ b/VERIFY_ISO.md @@ -1,18 +1,18 @@ -### 2.3.90-20211206 ISO image built on 2021/12/06 +### 2.3.90-20211210 ISO image built on 2021/12/10 ### Download and Verify -2.3.90-20211206 ISO image: -https://download.securityonion.net/file/securityonion/securityonion-2.3.90-20211206.iso +2.3.90-20211210 ISO image: +https://download.securityonion.net/file/securityonion/securityonion-2.3.90-20211210.iso -MD5: 8A5FDF731D548E27D123E5B711890AEC -SHA1: B4AF33FE1D64592D46C780AF0C5E7FBD21A22BDE -SHA256: 091DA2D06C82447639D324EE32DBC385AE407078B3A55F4E0704B22DB6B29A7E +MD5: 512C13089060EE17BC3FA275D62152DC +SHA1: A70D3A3C4B74AD2EE9B1353BDE7E5DD327248511 +SHA256: 271DA7617FBA3549B1E496C60E9AD743B13CC8D0468DF3F7AC9A76B6D496D212 Signature for ISO image: -https://github.com/Security-Onion-Solutions/securityonion/raw/master/sigs/securityonion-2.3.90-20211206.iso.sig +https://github.com/Security-Onion-Solutions/securityonion/raw/master/sigs/securityonion-2.3.90-20211210.iso.sig Signing key: https://raw.githubusercontent.com/Security-Onion-Solutions/securityonion/master/KEYS @@ -26,22 +26,22 @@ wget https://raw.githubusercontent.com/Security-Onion-Solutions/securityonion/ma Download the signature file for the ISO: ``` -wget https://github.com/Security-Onion-Solutions/securityonion/raw/master/sigs/securityonion-2.3.90-20211206.iso.sig +wget https://github.com/Security-Onion-Solutions/securityonion/raw/master/sigs/securityonion-2.3.90-20211210.iso.sig ``` Download the ISO image: ``` -wget https://download.securityonion.net/file/securityonion/securityonion-2.3.90-20211206.iso +wget https://download.securityonion.net/file/securityonion/securityonion-2.3.90-20211210.iso ``` Verify the downloaded ISO image using the signature file: ``` -gpg --verify securityonion-2.3.90-20211206.iso.sig securityonion-2.3.90-20211206.iso +gpg --verify securityonion-2.3.90-20211210.iso.sig securityonion-2.3.90-20211210.iso ``` The output should show "Good signature" and the Primary key fingerprint should match what's shown below: ``` -gpg: Signature made Mon 06 Dec 2021 10:14:29 AM EST using RSA key ID FE507013 +gpg: Signature made Fri 10 Dec 2021 02:52:08 PM EST using RSA key ID FE507013 gpg: Good signature from "Security Onion Solutions, LLC " gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. diff --git a/salt/elasticsearch/init.sls b/salt/elasticsearch/init.sls index 84ce545b8..b5d61a6a5 100644 --- a/salt/elasticsearch/init.sls +++ b/salt/elasticsearch/init.sls @@ -258,7 +258,7 @@ so-elasticsearch: {% if TRUECLUSTER is sameas false or (TRUECLUSTER is sameas true and not salt['pillar.get']('nodestab', {})) %} - discovery.type=single-node {% endif %} - - ES_JAVA_OPTS=-Xms{{ esheap }} -Xmx{{ esheap }} -Des.transport.cname_in_publish_address=true + - ES_JAVA_OPTS=-Xms{{ esheap }} -Xmx{{ esheap }} -Des.transport.cname_in_publish_address=true -Dlog4j2.formatMsgNoLookups=true ulimits: - memlock=-1:-1 - nofile=65536:65536 diff --git a/salt/logstash/etc/jvm.options b/salt/logstash/etc/jvm.options new file mode 100644 index 000000000..5af9281fc --- /dev/null +++ b/salt/logstash/etc/jvm.options @@ -0,0 +1 @@ +-Dlog4j2.formatMsgNoLookups=true diff --git a/salt/thehive/init.sls b/salt/thehive/init.sls index d7050e226..7cbe34c90 100644 --- a/salt/thehive/init.sls +++ b/salt/thehive/init.sls @@ -95,7 +95,7 @@ so-thehive-es: - /opt/so/conf/thehive/etc/es/log4j2.properties:/usr/share/elasticsearch/config/log4j2.properties:ro - /opt/so/log/thehive:/var/log/elasticsearch:rw - environment: - - ES_JAVA_OPTS=-Xms512m -Xmx512m + - ES_JAVA_OPTS=-Xms512m -Xmx512m -Dlog4j2.formatMsgNoLookups=true - port_bindings: - 0.0.0.0:9400:9400 - 0.0.0.0:9500:9500 diff --git a/sigs/securityonion-2.3.90-20211210.iso.sig b/sigs/securityonion-2.3.90-20211210.iso.sig new file mode 100644 index 000000000..4fb061626 Binary files /dev/null and b/sigs/securityonion-2.3.90-20211210.iso.sig differ