[Security]: java-1.8.0-amazon-corretto - 1:1.8.0_462.b08-1.amzn2023 introduces new vulnerabilities

[umittal-cc]

Product

Amazon Linux 2023

What is your question?

Hi Team,

The jdk8 currently available docker image 2023.8.20250715.0 has vulnerabilities so we update used dnf upgrade --releasever=2023.8.20250721 which introduced two more vulnerabilities as mentioned below.

1. libsoup3
2. libxslt

also the fix versions are not available on amazonlinux dnf repo.

would appreciate how this can be resolved or maybe the team can publish a new docker image.