Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

openjdk:8-jre not built since December 12th 2017 #161

Closed
albuch opened this issue Jan 24, 2018 · 2 comments
Closed

openjdk:8-jre not built since December 12th 2017 #161

albuch opened this issue Jan 24, 2018 · 2 comments

Comments

@albuch
Copy link

albuch commented Jan 24, 2018

It seems the last time the image openjdk:8-jre was build is

        "Created": "2017-12-12T15:17:36.669292428Z",

(result of docker pull openjdk:8-jre && docker images inspect openjdk:8-jre)
And therefor no Debian security fixes were pulled in. Is there something wrong with the automatic build on base image/upstream changes?

@albuch
Copy link
Author

albuch commented Jan 24, 2018

Well I just saw that none of the reported CVEs have fixes yet so never mind.
I was basically referring to this issue (docker-library/buildpack-deps#46 (comment)) where a roughly 1 month rebuilt time of base images and dependent images was mentioned.

@qedrakmar
Copy link

Images with security fixes do get prioritized and built in a timely manner. The 1 month timeframe mentioned in the other thread is the "even if nothing major comes up, we still rebuild them, anyway" timeframe. Rest assured that if security fixes come in for a high importance CVE, there will be image rebuilds promptly.

Since this topic is otherwise explained in the comment you referenced above, I'm going to mark this as a duplicate of docker-library/buildpack-deps#46 and close the issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants