Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Rebase containerimage to a supported version of openJDK #75

Open
djpbessems opened this issue Dec 11, 2020 · 0 comments
Open

Rebase containerimage to a supported version of openJDK #75

djpbessems opened this issue Dec 11, 2020 · 0 comments

Comments

@djpbessems
Copy link

Currently the container image is based on openjdk:8-jre-alpine. The latest release of ma1uta/ma1sd contains ~65 vulnerabilities (all fixable):
image

I tried to add a RUN apk upgrade --update-cache --available to your Dockerfile, which brought down the amount of vulnerabilities to 42 (all fixable):
image

Examining these vulnerabilities shows that they are all caused by a (severely) outdated openjdk version:
image

I wondered why these fixes were not included in your base image and quickly found this post:
docker-library/openjdk#272

As you can see, openJDK 8 is not a good candidate to base your image on anymore.

I found an alternative base image adoptopenjdk/openjdk11:alpine, and when I use that (including RUN apk upgrade --update-cache --available) I get no vulnerabilities anymore:
image
(I have not actually run the image yet, so don't actually know if it's fully compatible)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant