Regenerate Docker images after CVE-2022-21449 (#20)

Activities

Wojciech Kapcia (Tigase) opened 3 years ago

https://neilmadden.blog/2022/04/19/psychic-signatures-in-java/ https://openjdk.java.net/groups/vulnerability/advisories/2022-04-19

In general it's up to system administrator to keep JVM version up to date but we should regenerate docker images with updated JVM version as we provide them.

Wojciech Kapcia (Tigase) commented 3 years ago

After investigation it turns out that there are no updated docker images that fixes the issue. There is for example jdk-11.0.15+10 from 22 April 2022 (https://adoptium.net/temurin/releases/) but no relevant docker image: https://hub.docker.com/_/eclipse-temurin?tab=tags&page=1&name=11.0.15

Putting this on hold for a couple of days.

Wojciech Kapcia (Tigase) commented 3 years ago

Images regenerated.

Wojciech Kapcia (Tigase) moved 1 year ago

Previous Value	Current Value
tigase-private/Docker support	tigase/_server/tigase-xmpp-server-docker

Type	Task
Priority	Normal
Assignee	Wojciech Kapcia (Tigase)
Version	tigase-server-8.3.0

Issue Votes (0)

Watchers (0)

Reference

tigase/_server/tigase-xmpp-server-docker#20