<!-- 
RSS generated by JIRA (1001.0.0-SNAPSHOT#100246-sha1:7a5c50119eb0633d306e14180817ddef5e80c75d) at Thu Feb 08 23:27:34 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary add field=key&field=summary to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>FOLIO Jira</title>
    <link>https://folio-org.atlassian.net</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>1001.0.0-SNAPSHOT</version>
        <build-number>100246</build-number>
        <build-date>07-02-2024</build-date>
    </build-info>

<item>
            <title>[FOLIO-3366] Rebuild/upgrade folio-java-docker folioci/alpine-jre-openjdk11</title>
                <link>https://folio-org.atlassian.net/browse/FOLIO-3366</link>
                <project id="10290" key="FOLIO">FOLIO</project>
                    <description>&lt;p&gt;Rebuild and deploy a new version of &lt;a href=&quot;https://github.com/folio-org/folio-tools/tree/master/folio-java-docker/openjdk11&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/folio-org/folio-tools/tree/master/folio-java-docker/openjdk11&lt;/a&gt; to upgrade the versions used in folioci/alpine-jre-openjdk11 Docker container. No changes are needed in the Dockerfile.&lt;/p&gt;

&lt;p&gt;This upgrades alpine from 3.14 to 3.15&lt;/p&gt;</description>
                <environment></environment>
        <key id="82286">FOLIO-3366</key>
            <summary>Rebuild/upgrade folio-java-docker folioci/alpine-jre-openjdk11</summary>
                <type id="10003" iconUrl="https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10318?size=medium">Task</type>
                                            <priority id="10002" iconUrl="https://dev.folio.org/assets/jira-priority/jira-p3.svg">P3</priority>
                        <status id="6" iconUrl="https://folio-org.atlassian.net/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="green"/>
                                    <resolution id="10003">Done</resolution>
                                                        <assignee accountid="61cd0ca0bce5e00069e98be7">David Crossley</assignee>
                                                                <reporter accountid="61cd0ca0bce5e00069e98be7">David Crossley</reporter>
                                    <labels>
                            <label>security</label>
                            <label>security-reviewed</label>
                    </labels>
                <created>Tue, 14 Dec 2021 06:29:37 +0000</created>
                <updated>Thu, 23 Dec 2021 05:34:47 +0000</updated>
                            <resolved>Thu, 23 Dec 2021 05:34:47 +0000</resolved>
                                                                        <due></due>
                            <votes>0</votes>
                                    <watches>3</watches>
                                                                <comments>
                                                            <comment id="196996" author="5cf6c546b87c300f36eb7b9a" created="Thu, 16 Dec 2021 16:28:48 +0000"  >&lt;p&gt;The security team has reviewed this and feel that while it&apos;s not urgent, it would be nice to have this done soon.&lt;/p&gt;</comment>
                                                            <comment id="196997" author="5ee89462f7aa140abd82d11d" created="Tue, 21 Dec 2021 13:16:14 +0000"  >&lt;p&gt;Issues in folioci/alpine-jre-openjdk11:1.1.0 the that upgrade will remove:&lt;/p&gt;
&lt;div class=&quot;code panel&quot; style=&quot;border-width: 1px;&quot;&gt;&lt;div class=&quot;codeContent panelContent&quot;&gt;
&lt;pre class=&quot;code-java&quot;&gt;
NAME                    INSTALLED      FIXED-IN       VULNERABILITY   SEVERITY 
busybox                 1.33.1-r3      1.33.1-r4      CVE-2021-42374  Medium    
busybox                 1.33.1-r3      1.33.1-r5      CVE-2021-42375  Medium    
busybox                 1.33.1-r3      1.33.1-r6      CVE-2021-42378  High      
busybox                 1.33.1-r3      1.33.1-r6      CVE-2021-42379  High      
busybox                 1.33.1-r3      1.33.1-r6      CVE-2021-42380  High      
busybox                 1.33.1-r3      1.33.1-r6      CVE-2021-42381  High      
busybox                 1.33.1-r3      1.33.1-r6      CVE-2021-42382  High      
busybox                 1.33.1-r3      1.33.1-r6      CVE-2021-42383  High      
busybox                 1.33.1-r3      1.33.1-r6      CVE-2021-42384  High      
busybox                 1.33.1-r3      1.33.1-r6      CVE-2021-42385  High      
busybox                 1.33.1-r3      1.33.1-r6      CVE-2021-42386  High      
curl                    7.78.0-r0      7.79.0-r0      CVE-2021-22945  Critical  
curl                    7.78.0-r0      7.79.0-r0      CVE-2021-22946  High      
curl                    7.78.0-r0      7.79.0-r0      CVE-2021-22947  Medium    
libcrypto1.1            1.1.1k-r0      1.1.1l-r0      CVE-2021-3711   Critical  
libcrypto1.1            1.1.1k-r0      1.1.1l-r0      CVE-2021-3712   High      
libcurl                 7.78.0-r0      7.79.0-r0      CVE-2021-22945  Critical  
libcurl                 7.78.0-r0      7.79.0-r0      CVE-2021-22946  High      
libcurl                 7.78.0-r0      7.79.0-r0      CVE-2021-22947  Medium    
libssl1.1               1.1.1k-r0      1.1.1l-r0      CVE-2021-3711   Critical  
libssl1.1               1.1.1k-r0      1.1.1l-r0      CVE-2021-3712   High      
openjdk11-jre-headless  11.0.11_p9-r0  11.0.12_p7-r0  CVE-2021-2341   Low       
openjdk11-jre-headless  11.0.11_p9-r0  11.0.12_p7-r0  CVE-2021-2369   Medium    
openjdk11-jre-headless  11.0.11_p9-r0  11.0.12_p7-r0  CVE-2021-2388   High      
ssl_client              1.33.1-r3      1.33.1-r4      CVE-2021-42374  Medium
&lt;/pre&gt;
&lt;/div&gt;&lt;/div&gt;
&lt;p&gt;The issues are hard to exploit in FOLIO modules, though.&lt;/p&gt;</comment>
                                                            <comment id="197002" author="61cd0ca0bce5e00069e98be7" created="Tue, 21 Dec 2021 14:20:54 +0000"  >&lt;p&gt;Moving to Alpine 3.15 will bring Node.js 16 and PostgreSQL 14.&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5ee89462f7aa140abd82d11d&quot; class=&quot;user-hover&quot; rel=&quot;5ee89462f7aa140abd82d11d&quot; data-account-id=&quot;5ee89462f7aa140abd82d11d&quot; accountid=&quot;5ee89462f7aa140abd82d11d&quot; rel=&quot;noreferrer&quot;&gt;Julian Ladisch&lt;/a&gt; i gather that that is okay, as the purpose of this Docker image is to provide Java. Is that okay?&lt;/p&gt;</comment>
                                                            <comment id="197004" author="5ee89462f7aa140abd82d11d" created="Wed, 22 Dec 2021 13:49:12 +0000"  >&lt;p&gt;Yes, it is okay.&lt;/p&gt;

&lt;p&gt;The image neither uses node nor postgres: &lt;a href=&quot;https://github.com/folio-org/folio-tools/blob/master/folio-java-docker/openjdk11/Dockerfile&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/folio-org/folio-tools/blob/master/folio-java-docker/openjdk11/Dockerfile&lt;/a&gt;&lt;/p&gt;</comment>
                                                            <comment id="197006" author="61cd0ca0bce5e00069e98be7" created="Thu, 23 Dec 2021 05:34:30 +0000"  >&lt;p&gt;Built and pushed as &quot;1.2.0&quot; and &quot;latest&quot;.&lt;/p&gt;</comment>
                    </comments>
                <issuelinks>
                            <issuelinktype id="10003">
                    <name>Relates</name>
                                                                <inwardlinks description="relates to">
                                        <issuelink>
            <issuekey id="82180">FOLIO-3246</issuekey>
        </issuelink>
                            </inwardlinks>
                                    </issuelinktype>
                    </issuelinks>
                <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                <customfield id="customfield_10000" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummarycf">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10057" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>Development Team</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10155"><![CDATA[FOLIO DevOps]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                <customfield id="customfield_10063" key="com.atlassian.jira.plugin.system.customfieldtypes:float">
                        <customfieldname>PO Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>0.0</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                            <customfield id="customfield_10019" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>0|i03tgv:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_10020" key="com.pyxis.greenhopper.jira:gh-sprint">
                        <customfieldname>Sprint</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue id="288">DevOps Sprint 130</customfieldvalue>
    <customfieldvalue id="286">DevOps Sprint 129</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_10024" key="com.atlassian.jira.ext.charting:firstresponsedate">
                        <customfieldname>[CHART] Date of First Response</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>Thu, 16 Dec 2021 16:28:48 +0000</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10025" key="com.atlassian.jira.ext.charting:timeinstatus">
                        <customfieldname>[CHART] Time in Status</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                    </customfields>
    </item>
</channel>
</rss>