Based on too old JDK, with security issues - Githubissues

cptactionhank / docker-atlassian-jira-software

Atlassian JIRA Software wrapped in a Docker image

https://cptactionhank.github.io/docker-atlassian-jira-software

MIT License

270 stars 168 forks source link

Based on too old JDK, with security issues #78

Open rschulz-scisys opened 4 years ago

rschulz-scisys commented 4 years ago

Since we scan the docker images we use via harbor, please be aware, that the current images all share the same vulnerabilities:

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000654 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2816 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2842 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2762 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14498

This is mainly caused by using a cached base image instead of forcing a recent one for the openjdk.