ibmruntimes / Semeru-Runtimes

Issue repo for all things IBM Semeru Runtimes
14 stars 3 forks source link

Update to the latest UBI 8 image (8.8-1067.1697633337 or later) #63

Closed leochr closed 10 months ago

leochr commented 11 months ago

Base UBI 8 image was updated recently and includes the fixes for some critical CVEs. It includes the fixes for some critical CVEs.

Please refresh the Semeru images to update to the latest UBI

@narkedi @AdamBrousseau

leochr commented 11 months ago

Red Hat has published another update for UBI 8 base image. It includes the fix for the critical HTTP/2 Rapid Reset (CVE-2023-44487) Most recent base image (as of October 19th, 9:45 AM EDT): registry.access.redhat.com/ubi8/ubi:8.8-1067.1697633337

Please refresh the Semeru images to include the critical fixes. Liberty images use the following as the base: icr.io/appcafe/ibm-semeru-runtimes:open-17-jdk-ubi icr.io/appcafe/ibm-semeru-runtimes:open-11-jdk-ubi icr.io/appcafe/ibm-semeru-runtimes:open-8-jdk-ubi

jayasg12 commented 11 months ago

Below Semeru images in ICR are updated with latest UBI 8 version icr.io/appcafe/ibm-semeru-runtimes:open-17-jdk-ubi icr.io/appcafe/ibm-semeru-runtimes:open-11-jdk-ubi icr.io/appcafe/ibm-semeru-runtimes:open-8-jdk-ubi

leochr commented 10 months ago

I confirmed that the new UBI version (8.8-1067.1697633337) is now included with Semeru images. Thank you!

Are Semeru images still being updated automatically weekly? If yes, on which day of the week - so we can align Liberty builds with that to pick up updates?

Do you know why they weren't updated automatically last week?

jayasg12 commented 10 months ago

Hi @leochr Semeru images will be updated every Friday. Last week we had plans to update it on Friday before which we got a request to update the images. And we got them updated on Friday.

It is going to be End of Friday IST , And if there is any server issue which blocks the update then it might move right.

leochr commented 10 months ago

@jayasg12 thank you. Closing as completed.