Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the base Docker image from bullseye-slim to bookworm-slim #8211

Open
1 task done
sastorsl opened this issue Nov 23, 2023 · 0 comments · May be fixed by #8212
Open
1 task done

Bump the base Docker image from bullseye-slim to bookworm-slim #8211

sastorsl opened this issue Nov 23, 2023 · 0 comments · May be fixed by #8212

Comments

@sastorsl
Copy link

Is your feature request related to a problem? Please describe.

zaproxy currently use Debian 11, code name bullseye.
The new LTS - Long Term Support - release from Debian is bookworm, and has been in LTS since June 2023.

Describe the solution you'd like

Update the base image for zaproxy to the latest LTS release of Debian - code name bookworm.

NB! The default java version in bookworm is openjdk 17.

Describe alternatives you've considered

There are many small base images around, and evaluating all of them would require feature comparisons, licencing evaluation, etc. I've not undertaken this at this moment.

Screenshots

N/A

Additional context

There are quite a few CVE's in Debian Bullseye at the moment. Quite a few less in Bookworm. Now this may change, but staying current is a way to navigate this territory.

Would you like to help fix this issue?

  • Yes
@thc202 thc202 changed the title Bump the base image from bullseye-slim to bookworm-slim Bump the base Docker image from bullseye-slim to bookworm-slim Nov 23, 2023
sastorsl added a commit to sastorsl/zaproxy that referenced this issue Nov 23, 2023
Signed-off-by: Stein Arne Storslett <sastorsl@users.noreply.github.com>
sastorsl added a commit to sastorsl/zaproxy that referenced this issue Nov 23, 2023
Signed-off-by: Stein Arne Storslett <sastorsl@users.noreply.github.com>
@thc202 thc202 linked a pull request Nov 23, 2023 that will close this issue
sastorsl added a commit to sastorsl/zaproxy that referenced this issue Nov 29, 2023
sastorsl added a commit to sastorsl/zaproxy that referenced this issue Nov 29, 2023
sastorsl added a commit to sastorsl/zaproxy that referenced this issue Nov 29, 2023
…) with temurin-11-jdk.

Signed-off-by: Stein Arne Storslett <sastorsl@users.noreply.github.com>
sastorsl added a commit to sastorsl/zaproxy that referenced this issue Dec 6, 2023
This reverts commit 241ccdc.

Signed-off-by: Stein Arne Storslett <sastorsl@users.noreply.github.com>
sastorsl added a commit to sastorsl/zaproxy that referenced this issue Dec 6, 2023
…ebian 12)."

This reverts commit ec48a33.

Signed-off-by: Stein Arne Storslett <sastorsl@users.noreply.github.com>
sastorsl added a commit to sastorsl/zaproxy that referenced this issue Dec 6, 2023
…) with temurin-11-jdk.

Signed-off-by: Stein Arne Storslett <sastorsl@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Development

Successfully merging a pull request may close this issue.

2 participants