Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Track upstreams for OpenSSL 1.1.1 End of Life #715

Open
10 tasks done
tobybellwood opened this issue Mar 30, 2023 · 0 comments
Open
10 tasks done

Track upstreams for OpenSSL 1.1.1 End of Life #715

tobybellwood opened this issue Mar 30, 2023 · 0 comments

Comments

@tobybellwood
Copy link
Member

tobybellwood commented Mar 30, 2023

as per https://www.openssl.org/blog/blog/2023/03/28/1.1.1-EOL/, this is an issue to track the current versions of OpenSSL in use in the published lagoon-images, prior to it's EOL date (11th September 2023)

The following images are running versions of OpenSSL that will no longer be supported, and a transition plan should be sought.

kibana-7 ( 1:1.1.1g-12.el8_3) DEPRECATED
logstash-7 (1:1.0.2k-21.el7_9) DEPRECATED
php-8.0-* (1.1.1t-r0) DEPRECATED
solr-7-* (1.1.1n-0+deb11u1) DEPRECATED

The following images are already running supported versions of OpenSSL

  • nginx-* (3.0.8-r1 )
  • node-14-* node-16-, node-18- (3.0.8-r1)
  • php-8.1-, php-8.2- (3.0.8-r0)
  • ruby-3.0 (2.2.2)
  • ruby-3.1 (3.0.1)
  • ruby-3.2 (3.1.0)
  • commons (3.1.4-r5)
  • opensearch-2 ( 1:3.0.8-1.amzn2023.0.11)

The following packages are running a patched version of OpenSSL supported by the underlying distribution

  • solr-8-* (1.1.1f-1ubuntu2.22)
  • varnish-6-* (1.1.1w-0+deb11u1)

Last updated at https://github.com/uselagoon/lagoon-images/releases/tag/24.5.0 SBOM ref

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant