[FOLIO-3484] Rebuild all released alpine-jre-openjdk11 containers fixing ZipException Created: 27/Apr/22  Updated: 09/Jun/22  Resolved: 09/Jun/22

Status: Closed
Project: FOLIO
Components: None
Affects versions: None
Fix versions: None

Type: Umbrella Priority: TBD
Reporter: Julian Ladisch Assignee: Julian Ladisch
Resolution: Done Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original estimate: Not Specified

Issue links:
Defines
is defined by EDGINREACH-37 Release edge-inn-reach v1.0.5 fixing ... Closed
is defined by MODCONF-112 Release 5.7.8 fixing ZipException on ... Closed
is defined by MODEXPS-116 Release 1.3.5 fixing ZipException on ... Closed
is defined by MODEXPS-117 Release 1.2.4 fixing ZipException on ... Closed
is defined by MODFEE-260 Release mod-feesfines 17.1.2 fixing Z... Closed
is defined by MODUIMP-72 Release 3.6.6 fixing ZipException on ... Closed
is defined by MODUSERBL-144 mod-users-bl getting OOM-killed on re... Closed
is defined by OKAPI-1099 Release Okapi v4.12.4 fixing ZipExcep... Closed
Relates
relates to FOLIO-3487 folioci/alpine-jre-openjdk11: apk upg... Closed
relates to FOLIO-3480 folioci/alpine-jre-openjdk11:1.3.1 Zi... Closed
relates to FOLIO-3483 Rebuild all alpine-jre-openjdk11 base... Closed
Sprint: CP: sprint 138
Development Team: Core: Platform
Release: Lotus (R1 2022) Hot Fix #1
CSP Approved: Yes
RCA Group: Related dependency upgrade

 Description   

Rebuild all released containers that are based on the folioci/alpine-jre-openjdk11 container that were built on or after 2022-04-12 and before 2022-04-27. No code change is needed in the modules.

This affects some platform-complete Lotus containers.

Rebuilding will use the latest folioci/alpine-jre-openjdk11:1.3.2 with the zlib fix for "ZipException: Corrupt GZIP trailer"
https://folio-org.atlassian.net/browse/FOLIO-3480

folioci/alpine-jre-openjdk11/1.3.0 is not affected by the bug.

folioci/alpine-jre-openjdk11/1.3.1 is the first version with the bug and has been published on 2022-04-12.

folioci/alpine-jre-openjdk11/1.3.2 is not affected by the bug (zlib was downgraded) and has been published on 2022-04-27.

folioci/alpine-jre-openjdk11/1.3.3 is the second version with the bug and has been published on 2022-04-29.

folioci/alpine-jre-openjdk11/1.3.4 is not affected by the bug (zlib was upgraded to a fixed version) and has been published on 2022-05-01.

The bug is in the zlib library in the Alpine container and affects Java's zip code, but only on 64-bit systems.



 Comments   
Comment by Julian Ladisch [ 28/Apr/22 ]

https://hub.docker.com/search?q=folioorg&sort=updated_at&order=desc lists all affected containers:

They need a patch release to be included in the next hotfix release.

Comment by Julian Ladisch [ 09/Jun/22 ]

For Lotus all affected images have been rebuilt.

Comment by Julian Ladisch [ 09/Jun/22 ]

zlib-1.2.12-r0 has the bug.

zlib-1.2.12-r1 has the fix.

Run

docker run --rm -it --entrypoint /sbin/apk folioorg/mod-data-export-spring:1.3.5 list zlib

and get a result like

zlib-1.2.12-r1 x86_64 {zlib} (Zlib) [installed]

to check whether the image contains the buggy or the fixed zlib version.

Generated at Thu Feb 08 23:28:29 UTC 2024 using Jira 1001.0.0-SNAPSHOT#100246-sha1:7a5c50119eb0633d306e14180817ddef5e80c75d.