Amazonlinux Base Image has security vulnerabilities

[albuch]

Hi, it seems the used base image amazonlinux:2 has publicly known vulnerabilities since at least Sep 19th that have fixes available that are not yet part of the latest image which was published 25days ago.
See upstream issue at https://forums.aws.amazon.com/thread.jspa?threadID=310554&tstart=0

Do you monitor corretto images for security issues? Is there something that should be improved in the publishing process?

[TianminShi]

Hi Alex, thank you for rasing your concern. however I think your concern is may already been addressed in here. #26

[albuch]

Hi @TianminShi
thanks, I've already created an issue with upstream amazonlinux. See amazonlinux/container-images#30