Two Busybox versions in OpenJDK 12 Alpine Image

Hi,

There are two Busybox libraries used in OpenJDK 12 Alpine version. One is busybox@1.29.3-r10 and other is busybox@1.29.3-r12.

May I know why two versions of same library used in it… It seems there is one vulnerability with 1.29.3-r12 version. Hence, would like to know which library would be used while running the appliation/code in it

Any information on this will be a great help.

Thanks