You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@zookeeper.apache.org by "Enrico Olivelli (Jira)" <ji...@apache.org> on 2022/09/29 14:39:00 UTC

[jira] [Resolved] (ZOOKEEPER-4616) Upgrade docker image to resolve CVEs

     [ https://issues.apache.org/jira/browse/ZOOKEEPER-4616?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Enrico Olivelli resolved ZOOKEEPER-4616.
----------------------------------------
    Resolution: Fixed

> Upgrade docker image to resolve CVEs
> ------------------------------------
>
>                 Key: ZOOKEEPER-4616
>                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-4616
>             Project: ZooKeeper
>          Issue Type: Improvement
>            Reporter: hang chen
>            Assignee: Enrico Olivelli
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 3.9.0, 3.8.1, 3.7.2
>
>          Time Spent: 0.5h
>  Remaining Estimate: 0h
>
> The current docker image `maven:3.6.3-jdk-8` has many critical security issues.
> maven@3.6.3-jdk-8 › dpkg@1.19.7 has [CVE-2022-1664|https://www.cve.org/CVERecord?id=CVE-2022-1664]
> maven@3.6.3-jdk-8 › openssl@1.1.1d-0+deb10u6 has [CVE-2021-3711|https://www.cve.org/CVERecord?id=CVE-2021-3711]
> maven@3.6.3-jdk-8 › gzip@1.9-3 has [CVE-2022-1271|https://www.cve.org/CVERecord?id=CVE-2022-1271]
>  
> We need to upgrade the docker base image to version `maven:3.8.4-jdk-8`
>  
> The GitHub PR: https://github.com/apache/zookeeper/pull/1927



--
This message was sent by Atlassian Jira
(v8.20.10#820010)