[Bug]: Can we update the base image version to the latest version without lots of CVEs?

[weiZhenkun]

Is there an existing issue for this?

• I have searched the existing issues

https://github.com/milvus-io/milvus/blob/master/build/docker/milvus/ubuntu20.04/Dockerfile#L12

why we keep the version in the 20220426 and not update to the latest for 8 months?
can we update ubuntu:focal-20220426 to ubuntu:focal or the latest version?

https://github.com/milvus-io/milvus/blob/master/build/docker/milvus/amazonlinux2023/Dockerfile#L12
for amazonlinux:2023, we are use it without date, but for ubuntu,we are use it with date?

[xiaofan-luan]

is there a special reason we need to update it?

[weiZhenkun]

when you keep the version in a fixed version, it will bring lots of CVEs.

For https://github.com/milvus-io/milvus/blob/master/build/docker/milvus/amazonlinux2023/Dockerfile#L12, you are using a big version, but for ubuntu, you are using the fixed verson. It does not make sence.

[weiZhenkun]

[LoveEachDay]

@weiZhenkun We're making sure there is no critical cve vulnerabilities.

[yanliang567]

/assign @LoveEachDay
/unassign

[weiZhenkun]

@weiZhenkun We're making sure there is no critical cve vulnerabilities.

@LoveEachDay any update?

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
Rotten issues close after 30d of inactivity. Reopen the issue with /reopen.

[yanliang567]

keep it