Browse Source

ZOOKEEPER-4616: Upgrade docker image to resolve CVEs

The current docker image `maven:3.6.3-jdk-8` has many critical security issues.

maven3.6.3-jdk-8 › dpkg1.19.7 has [CVE-2022-1664](https://www.cve.org/CVERecord?id=CVE-2022-1664)

maven3.6.3-jdk-8 › openssl1.1.1d-0+deb10u6 has [CVE-2021-3711](https://www.cve.org/CVERecord?id=CVE-2021-3711)

maven3.6.3-jdk-8 › gzip1.9-3 has [CVE-2022-1271](https://www.cve.org/CVERecord?id=CVE-2022-1271)

We need to upgrade the docker base image to version `maven:3.8.4-jdk-8`

See [ZOOKEEPER-4616](https://issues.apache.org/jira/browse/ZOOKEEPER-4616) for full details.

Author: chenhang <chenhang@apache.org>

Reviewers: Enrico Olivelli <eolivelli@apache.org>

Closes #1927 from hangc0276/chenhang/ZOOKEEPER-4616
chenhang 2 năm trước cách đây
mục cha
commit
e2bc3dd161
1 tập tin đã thay đổi với 1 bổ sung1 xóa
  1. 1 1
      dev/docker/Dockerfile

+ 1 - 1
dev/docker/Dockerfile

@@ -17,7 +17,7 @@
 # under the License.
 #
 
-FROM maven:3.6.3-jdk-8
+FROM maven:3.8.4-jdk-8
 
 RUN apt-get update
 RUN apt-get install -y \