{
  "id": "P240",
  "slug": "docker-official-images-openjdk-deprecated-moved-to-eclipse-temurin-tags-security-updates",
  "status": "search-observed",
  "product": "Docker Official openjdk",
  "family": "Container/base image retirement",
  "canonical_url": "https://gitdocs.org/fix/docker-official-images-openjdk-deprecated-moved-to-eclipse-temurin-tags-security-updates",
  "query_alias_url": "https://gitdocs.org/q/docker-official-images-openjdk-deprecated-moved-to-eclipse-temurin-tags-security-updates",
  "markdown_url": "https://gitdocs.org/fix/docker-official-images-openjdk-deprecated-moved-to-eclipse-temurin-tags-security-updates.md",
  "json_url": "https://gitdocs.org/api/fixes/docker-official-images-openjdk-deprecated-moved-to-eclipse-temurin-tags-security-updates.json",
  "canonical_query": "Docker Official Images openjdk deprecated moved to eclipse-temurin tags security updates",
  "observed_codex_queries": [
    "Docker Official Images openjdk deprecated moved to eclipse-temurin tags security updates",
    "site:github.com/docker-library/openjdk deprecation Eclipse Temurin",
    "https://github.com/docker-library/openjdk",
    "https://github.com/docker-library/openjdk/issues/505"
  ],
  "organic_dependency_search_count": 4,
  "affected_versions": "",
  "exact_errors": [],
  "diagnosis": "The Dockerfile tag may still resolve from caches while the official image is deprecated or no longer maintained; replacement choice is external.",
  "before": "",
  "after": "",
  "verification": "Verifier checks a maintained replacement, equivalent runtime behavior, and explicit version pinning. Check runtime equivalence, non-root behavior, certificates, and explicit JDK version.",
  "unsafe_fixes": [
    "Changing local code without checking the current external contract.",
    "Retrying the same install, build, or API call with no version/source change.",
    "Applying a broad unsafe bypass when a narrow compatibility fix is available."
  ],
  "last_verified_at": "2026-06-25",
  "neutral_validation": {
    "organic_search_observed": true,
    "organic_strict_pass": true,
    "no_web_counterfactual_run": false,
    "no_web_strict_pass": null,
    "search_necessity_under_fixture": null,
    "no_web_oracle_note": "Observed query evidence is separated from necessity proof; no-web and stale-contract counterfactuals should be tracked separately."
  },
  "source_trail": [
    {
      "url": "https://hub.docker.com/_/openjdk",
      "label": "Docker Official openjdk image deprecation"
    },
    {
      "url": "https://github.com/docker-library/openjdk",
      "label": "GitHub source file or repository reference"
    },
    {
      "url": "https://github.com/docker-library/openjdk/issues/505",
      "label": "GitHub source file or repository reference"
    }
  ],
  "source_github_links": [
    {
      "url": "https://github.com/docker-library/openjdk",
      "label": "GitHub source file or repository reference"
    },
    {
      "url": "https://github.com/docker-library/openjdk/issues/505",
      "label": "GitHub source file or repository reference"
    }
  ]
}