[
https://issues.apache.org/jira/browse/ZOOKEEPER-4616?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
hang chen updated ZOOKEEPER-4616:
---------------------------------
Description:
The current docker image `maven:3.6.3-jdk-8` has many critical security issues.
[email protected] › [email protected] has
[CVE-2022-1664|https://www.cve.org/CVERecord?id=CVE-2022-1664]
[email protected] › [email protected]+deb10u6 has
[CVE-2021-3711|https://www.cve.org/CVERecord?id=CVE-2021-3711]
[email protected] › [email protected] has
[CVE-2022-1271|https://www.cve.org/CVERecord?id=CVE-2022-1271]
We need to upgrade the docker base image to version `maven:3.8.4-jdk-8`
The GitHub PR: https://github.com/apache/zookeeper/pull/1927
was:
The current docker image `maven:3.6.3-jdk-8` has many critical security issues.
[email protected] › [email protected] has
[CVE-2022-1664|https://www.cve.org/CVERecord?id=CVE-2022-1664]
[email protected] › [email protected]+deb10u6 has
[CVE-2021-3711|https://www.cve.org/CVERecord?id=CVE-2021-3711]
[email protected] › [email protected] has
[CVE-2022-1271|https://www.cve.org/CVERecord?id=CVE-2022-1271]
We need to upgrade the docker base image to version `maven:3.8.4-jdk-8`
> Upgrade docker image to resolve CVEs
> ------------------------------------
>
> Key: ZOOKEEPER-4616
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-4616
> Project: ZooKeeper
> Issue Type: Improvement
> Reporter: hang chen
> Priority: Major
> Labels: pull-request-available
> Time Spent: 10m
> Remaining Estimate: 0h
>
> The current docker image `maven:3.6.3-jdk-8` has many critical security
> issues.
> [email protected] › [email protected] has
> [CVE-2022-1664|https://www.cve.org/CVERecord?id=CVE-2022-1664]
> [email protected] › [email protected]+deb10u6 has
> [CVE-2021-3711|https://www.cve.org/CVERecord?id=CVE-2021-3711]
> [email protected] › [email protected] has
> [CVE-2022-1271|https://www.cve.org/CVERecord?id=CVE-2022-1271]
>
> We need to upgrade the docker base image to version `maven:3.8.4-jdk-8`
>
> The GitHub PR: https://github.com/apache/zookeeper/pull/1927
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
