Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade docker image version to fix CVEs #3640

Merged
merged 2 commits into from
Nov 15, 2022

Conversation

hangc0276
Copy link
Contributor

Motivation

There are a lot of critical CVEs in the maven:3.8.6-jdk-11 docker image
https://snyk.io/test/docker/maven%3A3.8.6-jdk-11

Changes

Use maven:3.8.3-eclipse-temurin-11 instead of maven:3.8.6-jdk-11 to fix it.

Copy link
Member

@shoothzj shoothzj left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

why don't we use 3.8.6-eclipse-temurin-11

@shoothzj shoothzj merged commit fbad323 into apache:master Nov 15, 2022
hangc0276 added a commit that referenced this pull request Nov 21, 2022
There are a lot of critical CVEs in the `maven:3.8.6-jdk-11` docker image
https://snyk.io/test/docker/maven%3A3.8.6-jdk-11

Use `maven:3.8.3-eclipse-temurin-11` instead of `maven:3.8.6-jdk-11` to fix it.

(cherry picked from commit fbad323)
nicoloboschi pushed a commit to datastax/bookkeeper that referenced this pull request Jan 11, 2023
There are a lot of critical CVEs in the `maven:3.8.6-jdk-11` docker image
https://snyk.io/test/docker/maven%3A3.8.6-jdk-11

Use `maven:3.8.3-eclipse-temurin-11` instead of `maven:3.8.6-jdk-11` to fix it.

(cherry picked from commit fbad323)
(cherry picked from commit d621e5d)
yaalsn pushed a commit to yaalsn/bookkeeper that referenced this pull request Jan 30, 2023
### Motivation
There are a lot of critical CVEs in the `maven:3.8.6-jdk-11` docker image
https://snyk.io/test/docker/maven%3A3.8.6-jdk-11

### Changes
Use `maven:3.8.3-eclipse-temurin-11` instead of `maven:3.8.6-jdk-11` to fix it.
zymap pushed a commit that referenced this pull request Feb 16, 2023
### Motivation
There are a lot of critical CVEs in the `maven:3.8.6-jdk-11` docker image
https://snyk.io/test/docker/maven%3A3.8.6-jdk-11

### Changes
Use `maven:3.8.3-eclipse-temurin-11` instead of `maven:3.8.6-jdk-11` to fix it.

(cherry picked from commit fbad323)
Ghatage pushed a commit to sijie/bookkeeper that referenced this pull request Jul 12, 2024
### Motivation
There are a lot of critical CVEs in the `maven:3.8.6-jdk-11` docker image
https://snyk.io/test/docker/maven%3A3.8.6-jdk-11

### Changes
Use `maven:3.8.3-eclipse-temurin-11` instead of `maven:3.8.6-jdk-11` to fix it.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants