Skip to content

Conversation

@DmitriyStoyanov
Copy link
Contributor

@DmitriyStoyanov DmitriyStoyanov commented Apr 18, 2023

Bump nexus to 3.68.1 version
According to GHSA-6cgv-69mq-8w7x - https://support.sonatype.com/hc/en-us/articles/29416509323923-CVE-2024-4956-Nexus-Repository-3-Path-Traversal-2024-05-16

Release notes can be found here: 3.68.1-release-notes

Also updated alpine version to 3.18
Used java8 version of nexus

@DmitriyStoyanov
Copy link
Contributor Author

DmitriyStoyanov commented Apr 19, 2023

ha, they released new version 3.52.0 yesterday, so better to change this MR to newer version :) I will do it
https://help.sonatype.com/repomanager3/product-information/release-notes/2023-release-notes/sonatype-nexus-repository-3.52.0-release-notes

@DmitriyStoyanov DmitriyStoyanov changed the title Bump nexus to 3.51.0 version Bump nexus to 3.52.0 version Apr 19, 2023
@DmitriyStoyanov
Copy link
Contributor Author

MR was updated with new version 3.52.0

@DmitriyStoyanov
Copy link
Contributor Author

We already have 3.59.0 release, so need to update it to that version
release notes - https://help.sonatype.com/repomanager3/product-information/release-notes/2023-release-notes/sonatype-nexus-repository-3.59.0-release-notes

@DmitriyStoyanov DmitriyStoyanov changed the title Bump nexus to 3.52.0 version Bump nexus to 3.59.0 version Aug 31, 2023
@DmitriyStoyanov
Copy link
Contributor Author

Updated this PR with 3.59.0 version of Nexus

@DmitriyStoyanov DmitriyStoyanov changed the title Bump nexus to 3.59.0 version Bump nexus to 3.68.1 version May 17, 2024
@DmitriyStoyanov
Copy link
Contributor Author

Please do not merge yet, there are also changes in urls now
Will prepare fix for that

@DmitriyStoyanov DmitriyStoyanov changed the title Bump nexus to 3.68.1 version Draft: Bump nexus to 3.68.1 version May 17, 2024
@DmitriyStoyanov
Copy link
Contributor Author

There are two versions now with Java8 and Java11
image

@DmitriyStoyanov
Copy link
Contributor Author

Support of Java11 was appeared from 3.67.0 version https://help.sonatype.com/en/sonatype-nexus-repository-3-67-0-release-notes.html

From 3.67.0 version, there are support of Java11 version, because of that urls changed with two variants. Right now, to not change java 8, we will use urls with java8 support. In future we can upgrade to java11
@DmitriyStoyanov DmitriyStoyanov changed the title Draft: Bump nexus to 3.68.1 version Bump nexus to 3.68.1 version May 17, 2024
@DmitriyStoyanov
Copy link
Contributor Author

After no updates from this repo owner, I've created one MR in my forked repo: DmitriyStoyanov#1
Created autobuild image on every push to check if container can be build, also created autopublish image on every tag, so If someone needs latest images, you can use images build on my own and published into dockerhub https://hub.docker.com/r/scorpio2002/docker-nexus

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant