Skip to content

Update 5.0 to 5.0.34 and 6.0 to 6.0.29 - #773

Open
orgads wants to merge 2 commits into
docker-library:masterfrom
orgads:cve-2026-11933
Open

orgads wants to merge 2 commits into
docker-library:masterfrom
orgads:cve-2026-11933

Conversation

@orgads

@orgads orgads commented Oct 10, 2026 •

Copy link
Copy Markdown
Contributor

Closes #761

@orgads

orgads commented Oct 10, 2026

Copy link
Copy Markdown
Contributor Author

@yosifkit

@tianon

tianon commented Oct 12, 2026

Copy link
Copy Markdown
Member

See #761 for where this has been discussed prior -- FWIW, these versions were all EOL months ago. 😕

@orgads

orgads commented Oct 12, 2026

Copy link
Copy Markdown
Contributor Author

I know, we updated to 7 on our next release, but it will take time, and customers are chasing us with CVEs. Evidentially, mongo project did release past end of life, is there a reason not to follow it with docker release?

@tianon

tianon commented Oct 12, 2026

Copy link
Copy Markdown
Member

A combination of maintenance overhead, the annoyance of having to repeatedly revert/un-revert removals, a lack of visible interest signals, etc. Either these old versions are EOL, or they aren't, and upstream ought to commit one way or the other.

I'll take a look at this and see about getting a one-time rebuild in again.

Comment on lines +52 to +57
if ($2 == "ubuntu:focal") {
# temporary hack for EOL releases (TODO remove me)
# 2d96d3b45936c5e7784c4f56ae58d87d96267a35 is the last commit that contained ubuntu:focal in DOI
printf "https://github.com/docker-library/official-images/raw/2d96d3b45936c5e7784c4f56ae58d87d96267a35/library/%s\n", $2
next
}

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Oof, this is another great reason to not even bother doing this -- the base image for these older versions is EOL too.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Marvelous...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Re-release 4.4, 5.0, and 6.0?

2 participants