search

teamatldocker / jira

Dockerized Atlassian Jira
https://hub.docker.com/r/teamatldocker/jira/
MIT License
445 stars 225 forks source link

Patch CVE 2022 26135 #151

Closed oyxnaut closed 2 years ago

oyxnaut commented 2 years ago

This updates Jira to 8.22.4, and Servicedesk to 4.22.4. Those releases fix CVE-2022-26135. Additionally, I took the liberty of updating the openjdk image to a supported version. (Alpine 3.12 is EOL)

P.S. May I suggest you look into using Dependabot, or Renovatebot to keep the openjdk image up to date?

oyxnaut commented 2 years ago

Hi, I don't want to seem too impatient, but is this going to be merged anytime soon? I can see the tests failed for some reason I cannot infer, but running ./buildscripts/buildDevelopmentImages.sh && ./buildscripts/testDevelopmentImages.sh locally runs as expected. I'd simply retry the pipeline, but obviously, I don't have permissions to do so.

Firefishy commented 2 years ago

Larger instance size did not help...

oyxnaut commented 2 years ago

Are you aware, that apparently, pushing the new version to docker hub failed?