This is an automated email from the ASF dual-hosted git repository.
shoothzj pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/bookkeeper.git
The following commit(s) were added to refs/heads/master by this push:
new fbad323775 Upgrade docker image version to fix CVEs (#3640)
fbad323775 is described below
commit fbad323775f72ae2e8154892b489801305860bb1
Author: Hang Chen <[email protected]>
AuthorDate: Tue Nov 15 16:29:14 2022 +0800
Upgrade docker image version to fix CVEs (#3640)
### Motivation
There are a lot of critical CVEs in the `maven:3.8.6-jdk-11` docker image
https://snyk.io/test/docker/maven%3A3.8.6-jdk-11
### Changes
Use `maven:3.8.3-eclipse-temurin-11` instead of `maven:3.8.6-jdk-11` to fix
it.
---
dev/docker/Dockerfile | 2 +-
dev/release/Dockerfile | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/dev/docker/Dockerfile b/dev/docker/Dockerfile
index 09a1186fd1..63102a939c 100644
--- a/dev/docker/Dockerfile
+++ b/dev/docker/Dockerfile
@@ -17,7 +17,7 @@
# under the License.
#
-FROM maven:3.8.6-jdk-11
+FROM maven:3.8.6-eclipse-temurin-11
RUN apt-get update
RUN apt-get install -y g++ cmake
diff --git a/dev/release/Dockerfile b/dev/release/Dockerfile
index 2bcd90a40b..0c349d9b5f 100644
--- a/dev/release/Dockerfile
+++ b/dev/release/Dockerfile
@@ -17,7 +17,7 @@
# under the License.
#
-FROM maven:3.8.6-jdk-8
+FROM maven:3.8.6-eclipse-temurin-8
RUN apt-get update
RUN apt-get install -y g++ cmake gnupg2 vim subversion