bell-sw / Liberica

Free and 100% open source Progressive Java Runtime for modern Java™ deployments supported by a leading OpenJDK contributor
https://bell-sw.com/pages/libericajdk/
GNU General Public License v2.0
299 stars 28 forks source link

Upgrade liberica-openjdk-alpine:20 to Alpine 3.18.3 to address OpenSSL CVEs #141

Closed frankgrimes97 closed 10 months ago

frankgrimes97 commented 11 months ago

https://alpinelinux.org/posts/Alpine-3.15.10-3.16.7-3.17.5-3.18.3-released.html

frankgrimes97 commented 11 months ago

@morgion Any chance you could rebuild/publish a new image? Thanks!

frankgrimes97 commented 10 months ago

For clarification, this issue was reported against bellsoft/liberica-openjdk-alpine:20:

$ docker run -it bellsoft/liberica-openjdk-alpine:20
Unable to find image 'bellsoft/liberica-openjdk-alpine:20' locally
20: Pulling from bellsoft/liberica-openjdk-alpine
31e352740f53: Already exists 
c7a74e07fe28: Already exists 
e54bc035902a: Already exists 
Digest: sha256:d167d993577dbbb40e21f4f7928df66196cd2cbf1e4d006bbcf94f0d610ab6ac
Status: Downloaded newer image for bellsoft/liberica-openjdk-alpine:20
/ # cat /etc/alpine-release 
3.18.2

I see that bellsoft/liberica-openjdk-alpine:21 is now available after https://github.com/bell-sw/Liberica/pull/143

We will look at upgrading to that release since it seems to be based on the latest patched Alpine release:

$ docker run -it bellsoft/liberica-openjdk-alpine:21
Unable to find image 'bellsoft/liberica-openjdk-alpine:21' locally
21: Pulling from bellsoft/liberica-openjdk-alpine
7264a8db6415: Pull complete 
f469834f723e: Pull complete 
1c59fcf13fb4: Pull complete 
Digest: sha256:c63c05eb5703d1b2b0345874d9bcb4fda91ef633d6d8580cd9ab0050051411a0
Status: Downloaded newer image for bellsoft/liberica-openjdk-alpine:21
/ # cat /etc/alpine-release 
3.18.3

Feel free to close/dismiss this if you have no plans to move bellsoft/liberica-openjdk-alpine:20 to Alpine 3.18.3.

Thanks!

morgion commented 10 months ago

Liberica JDK 20 is not supported now, please use Liberica JDK 21 (the latest LTS release).