Update base images for KIE Sandbox images to fix CVEs reported in Quay.io

[baldimir]

There are some security vulnerabilities reported on Quay.io in the BAMOE Canvas images. Canvas is a rebuild of KIE Sandbox images, so it applies to Sandbox images too. Based on the reports, it looks like a base image update is needed. CVEs are reported here:

• Canvas: https://quay.io/repository/bamoe/canvas/manifest/sha256:28828e2a2005e41a9e522f7a822efa910972dc9b32ed153e1fa58af6dbe05929?tab=vulnerabilities
• git-cors-proxy: https://quay.io/repository/bamoe/git-cors-proxy/manifest/sha256:225584d657e55572c48908fb4f8094d715ea8db3b9ac467f98c8097505f7a772?tab=vulnerabilities
• extended-services: https://quay.io/repository/bamoe/extended-services/manifest/sha256:135f872133781[…]e30ce4ebc558ef0984eaab80b53808f2948a0d17d3fc0?tab=vulnerabilities

Acceptance criteria:

• Quay.io doesn't report any images vulnerabilities.

[thiagoelg]

Seems like a new ubi9 version was released under the same tag (9.2), so newer image builds should already have those issues fixed:

• https://quay.io/repository/kie-tools/kie-sandbox-extended-services-image/manifes[…]71896c7895fd2668456ca02a0f0a673f768089c1f5532?tab=vulnerabilities
• https://quay.io/repository/kie-tools/kie-sandbox-image/manifest/sha256:f28bb5d58[…]701b00573d6eab23b4de7cfeab38a2ab2acdbd530f639?tab=vulnerabilities
• https://quay.io/repository/kie-tools/git-cors-proxy-image/manifest/sha256:d76659[…]4d0519fdd4258eef51a9d230be92e57905e3d1ade6022?tab=vulnerabilities

[baldimir]

Thank you, closing the issue then.