Update Alpine derivatives to include latest security fixes

[marthjod]

According to https://justi.cz/security/2018/09/13/alpine-apk-rce.html, "Alpine base images have been updated – you may want to rebuild your Alpine-derived images". Are you planning on updating the Alpine-derived official images, and if so, how can I verify it has been re-built (maybe it's already taken care of)? Thanks a lot.

[pete-woods]

As of right now, it's still on 3.8.0, and not 3.8.1 (which includes the fix):

$ docker run -it openjdk:jre-alpine cat /etc/alpine-release
3.8.0

Alpine have already updated their 3.8 series:

$ docker run -it alpine:3.8 cat /etc/alpine-release
3.8.1

[tianon]

They were automatically rebuilt as soon as the new images became available.

[deitch]

So all of the images from 2 days ago are updated?

[tianon]

https://doi-janky.infosiftr.net/job/multiarch/job/amd64/job/openjdk/138/console is the build which should've picked up the Alpine releases from last week.

[tianon]

openjdk:jre-alpine is an older tag that isn't actually updated (since Alpine isn't supported for OpenJDK 10, which is the current "latest" release for OpenJDK), so you really wanted 8-jre-alpine or 8-jre-alpine3.8.

[tianon]

(See also #211.)