Announcement: Tagging issue that affected architecture-specific Alpine Linux floating tags

[lbussell]

Tagging issue that affected architecture-specific Alpine Linux floating tags

In February, Alpine floating tags were updated to Alpine 3.19 for .NET 7 and .NET 8.
However, this change contained an error and the arch-specific floating tags for Alpine still pointed to the previous Alpine release, 3.18.
None of the affected images (for either 3.18 or 3.19) were ever stale or unmonitored for CVEs.

Details

As of 2024-05-14, all affected Alpine floating tags have been updated to reference Alpine 3.19.

Alpine 3.18 images will be available for one additional month (until 2024-06-11) to allow a transition period for apps using the affected tags. This work is tracked in #5193.

Recommended action: If your app uses any of the affected image tags listed below, pull the tags again and make sure your application works on Alpine 3.19 before June 11.

Affected image repos

• mcr.microsoft.com/dotnet/sdk
• mcr.microsoft.com/dotnet/aspnet
• mcr.microsoft.com/dotnet/runtime
• mcr.microsoft.com/dotnet/runtime-deps
• mcr.microsoft.com/dotnet/nightly/sdk
• mcr.microsoft.com/dotnet/nightly/aspnet
• mcr.microsoft.com/dotnet/nightly/runtime
• mcr.microsoft.com/dotnet/nightly/runtime-deps

Affected image tags

Unaffected tags:

• 7.0-alpine
• 8.0-alpine

Affected tags:

• 7.0-alpine-amd64
• 7.0-alpine-arm32v7
• 7.0-alpine-arm64v8
• 8.0-alpine-amd64
• 8.0-alpine-arm32v7
• 8.0-alpine-arm64v8
• 8.0-alpine-extra-amd64
• 8.0-alpine-extra-arm32v7
• 8.0-alpine-extra-arm64v8
• 8.0-alpine-composite-amd64
• 8.0-alpine-composite-arm32v7
• 8.0-alpine-composite-arm64v8
• 8.0-alpine-aot-amd64 (nightly repos only)
• 8.0-alpine-aot-arm32v7 (nightly repos only)
• 8.0-alpine-aot-arm64v8 (nightly repos only)