ibmruntimes / Semeru-Runtimes

Issue repo for all things IBM Semeru Runtimes
14 stars 4 forks source link

Update to the latest UBI 8 image (8.8-1067.1697633337 or later) #63

Closed leochr closed 1 year ago

leochr commented 1 year ago

Base UBI 8 image was updated recently and includes the fixes for some critical CVEs. It includes the fixes for some critical CVEs.

Please refresh the Semeru images to update to the latest UBI

@narkedi @AdamBrousseau

leochr commented 1 year ago

Red Hat has published another update for UBI 8 base image. It includes the fix for the critical HTTP/2 Rapid Reset (CVE-2023-44487) Most recent base image (as of October 19th, 9:45 AM EDT): registry.access.redhat.com/ubi8/ubi:8.8-1067.1697633337

Please refresh the Semeru images to include the critical fixes. Liberty images use the following as the base: icr.io/appcafe/ibm-semeru-runtimes:open-17-jdk-ubi icr.io/appcafe/ibm-semeru-runtimes:open-11-jdk-ubi icr.io/appcafe/ibm-semeru-runtimes:open-8-jdk-ubi

jayasg12 commented 1 year ago

Below Semeru images in ICR are updated with latest UBI 8 version icr.io/appcafe/ibm-semeru-runtimes:open-17-jdk-ubi icr.io/appcafe/ibm-semeru-runtimes:open-11-jdk-ubi icr.io/appcafe/ibm-semeru-runtimes:open-8-jdk-ubi

leochr commented 1 year ago

I confirmed that the new UBI version (8.8-1067.1697633337) is now included with Semeru images. Thank you!

Are Semeru images still being updated automatically weekly? If yes, on which day of the week - so we can align Liberty builds with that to pick up updates?

Do you know why they weren't updated automatically last week?

jayasg12 commented 1 year ago

Hi @leochr Semeru images will be updated every Friday. Last week we had plans to update it on Friday before which we got a request to update the images. And we got them updated on Friday.

It is going to be End of Friday IST , And if there is any server issue which blocks the update then it might move right.

leochr commented 1 year ago

@jayasg12 thank you. Closing as completed.