confluentinc/kafka-images

Java 11 kafka containers

coredump17 opened this issue · 5 comments

coredump17 commented

Hi, Confluents site recommends java 17 for kafka 7.5 (https://docs.confluent.io/platform/current/installation/versions-interoperability.html#java) but the default UBI image used for your containers uses EL8's Java 11. Redhat also provide a ubi8 container with java 17. ubi8/openjdk-17:latest. Should this base image be used instead?

dixittanmay91 commented

We are also facing the same issue with both cp-kafka-connect-base:7.5.3 and cp-kafka-connect-base:7.5.3-1-ubi8 images.

Seems there is no confluent image with Java 17. Can anybody please advise on this.

  • 👍1
arturbugaj commented

Java 11 used in those images has some vulnerabilities as well
CVE-2024-20952
CVE-2024-20918

According to Oracle, "the next critical patch update (for Java 17) is scheduled for April 16, 2024"..

Bdegraaf1234 commented

We are experiencing the same issue as dixittanmay91. It is preventing us from updating other dependencies.

Is there a specific reason the confluent images are still built using Java 11?