search

corretto / corretto-docker

Dockerfiles for Amazon Corretto Official images.
https://hub.docker.com/_/amazoncorretto
MIT No Attribution
152 stars 63 forks source link

Finding the unknown versions of mx4j and sjsxp #210

Open ananthram001 opened 3 months ago

ananthram001 commented 3 months ago

I am using a security scanner in my application which is running on amazoncorretto:11.0.23-alpine3.18 when I see the internal image I can see its using amazon-coretto-11.

My scanner is reporting it has unknown versions of mx4j and sjsxp available.

I am not able to find the version nor able to find any documentation relevant to that. Please add relevant details.

Path showing are: mx4j: usr/lib/jvm/java-11-amazon-corretto/jmods/java.management.jmod/classes/javax/management

sjsxp: usr/lib/jvm/java-11-amazon-corretto/jmods/java.xml.jmod/classes/com/sun

Autumn808 commented 3 months ago

We are looking into this thank you for the information.