Track upstreams for OpenSSL 1.1.1 End of Life

[tobybellwood]

as per https://www.openssl.org/blog/blog/2023/03/28/1.1.1-EOL/, this is an issue to track the current versions of OpenSSL in use in the published lagoon-images, prior to it's EOL date (11th September 2023)

The following images are running versions of OpenSSL that will no longer be supported, and a transition plan should be sought.

kibana-7 ( 1:1.1.1g-12.el8_3) DEPRECATED
logstash-7 (1:1.0.2k-21.el7_9) DEPRECATED
php-8.0-* (1.1.1t-r0) DEPRECATED
solr-7-* (1.1.1n-0+deb11u1) DEPRECATED

The following images are already running supported versions of OpenSSL

• nginx-* (3.0.8-r1 )
• node-14-* node-16-, node-18- (3.0.8-r1)
• php-8.1-, php-8.2- (3.0.8-r0)
• ruby-3.0 (2.2.2)
• ruby-3.1 (3.0.1)
• ruby-3.2 (3.1.0)
• commons (3.1.4-r5)
• opensearch-2 ( 1:3.0.8-1.amzn2023.0.11)

The following packages are running a patched version of OpenSSL supported by the underlying distribution

• solr-8-* (1.1.1f-1ubuntu2.22)
• varnish-6-* (1.1.1w-0+deb11u1)

Last updated at https://github.com/uselagoon/lagoon-images/releases/tag/24.5.0 SBOM ref