search

confluentinc / kafka-images

Confluent Docker images for Apache Kafka
Apache License 2.0
378 stars 134 forks source link

Java 11 kafka containers #257

Open coredump17 opened 5 months ago

coredump17 commented 5 months ago

Hi, Confluents site recommends java 17 for kafka 7.5 (https://docs.confluent.io/platform/current/installation/versions-interoperability.html#java) but the default UBI image used for your containers uses EL8's Java 11. Redhat also provide a ubi8 container with java 17. ubi8/openjdk-17:latest. Should this base image be used instead?

dixittanmay91 commented 5 months ago

We are also facing the same issue with both cp-kafka-connect-base:7.5.3 and cp-kafka-connect-base:7.5.3-1-ubi8 images.

Seems there is no confluent image with Java 17. Can anybody please advise on this.

arturbugaj commented 3 months ago

Java 11 used in those images has some vulnerabilities as well CVE-2024-20952 CVE-2024-20918

According to Oracle, "the next critical patch update (for Java 17) is scheduled for April 16, 2024"..

Bdegraaf1234 commented 2 months ago

We are experiencing the same issue as dixittanmay91. It is preventing us from updating other dependencies.

Is there a specific reason the confluent images are still built using Java 11?

coredump17 commented 2 days ago

Any update on this ?