Closed leochr closed 1 year ago
Red Hat has published another update for UBI 8 base image. It includes the fix for the critical HTTP/2 Rapid Reset (CVE-2023-44487)
Most recent base image (as of October 19th, 9:45 AM EDT): registry.access.redhat.com/ubi8/ubi:8.8-1067.1697633337
Please refresh the Semeru images to include the critical fixes. Liberty images use the following as the base:
icr.io/appcafe/ibm-semeru-runtimes:open-17-jdk-ubi
icr.io/appcafe/ibm-semeru-runtimes:open-11-jdk-ubi
icr.io/appcafe/ibm-semeru-runtimes:open-8-jdk-ubi
Below Semeru images in ICR are updated with latest UBI 8 version icr.io/appcafe/ibm-semeru-runtimes:open-17-jdk-ubi icr.io/appcafe/ibm-semeru-runtimes:open-11-jdk-ubi icr.io/appcafe/ibm-semeru-runtimes:open-8-jdk-ubi
I confirmed that the new UBI version (8.8-1067.1697633337) is now included with Semeru images. Thank you!
Are Semeru images still being updated automatically weekly? If yes, on which day of the week - so we can align Liberty builds with that to pick up updates?
Do you know why they weren't updated automatically last week?
Hi @leochr Semeru images will be updated every Friday. Last week we had plans to update it on Friday before which we got a request to update the images. And we got them updated on Friday.
It is going to be End of Friday IST , And if there is any server issue which blocks the update then it might move right.
@jayasg12 thank you. Closing as completed.
Base UBI 8 image was updated recently and includes the fixes for some critical CVEs. It includes the fixes for some critical CVEs.
Please refresh the Semeru images to update to the latest UBI
@narkedi @AdamBrousseau