sjsaunde

Thanks for the root user access info, cataloging that. Yes it is the latest-23ai. I pulled the latest-23ai 4 days ago and it pulled down changes and came back up...

Current: # rpm -qa | grep jdk jdk-17-17.0.12-8.x86_64 Needs to be 17.0.15+, latest is 17.0.16.0.1, for current CVEs from April 2025 CPU (latest).

Tried to install latest jdk-17 but the repo's set from Oracle only have this version 17 available. So maybe repo(s) are missing in default configuration to find latest CPUs? From...

Last resort, downloaded jdk-17.0.16.0.1 RPM package file and installed with RPM. What I tried in summary: Tried addin oracle-java-jdk-release-el8 repository: `dnf install oracle-java-jdk-release-el8` But got errors and tried to modify...

@aosingh Okay, I will await that update and apply it once it is available and then it will get scanned soon after that automatically. Even though I did update it...

Hi @aosingh, This is not a minimally supported java version issue. The update needed is to use the latest CPU (Critical Patch Update) of Java from Oracle for the version...

Hi @aosingh , Previous container told to pull from was container-registry.oracle.com/database/adb-free:latest-23ai. I tried pulling adb-free:latest-23ai leaving the location it pull from alone an it didn't seem to pull an update....

Looks to be java 17 still in the container and in the user's podman container storage overlay directories: ``` ~/.local/share/containers/storage/overlay/7e2cb54d706d7d861a9c7bfecfff580ab5f6eb2b6bfbaba37a70578c78813379/diff/usr/lib/jvm/jdk-17.0.12-oracle-x64 ~/.local/share/containers/storage/overlay/7e2cb54d706d7d861a9c7bfecfff580ab5f6eb2b6bfbaba37a70578c78813379/diff/usr/java/jdk-17 ~//.local/share/containers/storage/overlay/420f1c4d39fbbcc4ccd04eb4671c346fcc17fd0971a475e6f530cca526a8c803/diff/usr/java/jdk-17 ~//.local/share/containers/storage/overlay/420f1c4d39fbbcc4ccd04eb4671c346fcc17fd0971a475e6f530cca526a8c803/diff/usr/java/jdk-17-oracle-x64 ~/.local/share/containers/storage/overlay/420f1c4d39fbbcc4ccd04eb4671c346fcc17fd0971a475e6f530cca526a8c803/diff/usr/lib/jvm/jdk-17.0.12-oracle-x64 ``` I do see a new...

Hi @aosingh , Do I need to report these jdk-17.0.12-oracle-x64 files left on disk when updating as vulnerabilities? They are showing as such in scans since they are on left...

Figured out that the cert was using default 'changeit' password. Probably should be passed in like the WALLET_PASSWORD or use WALLET_PASSWORD IMO. Got new exception after successfully importing the cert...