ubuntu-docker-images team mailing list archive

Thread
Date

Re: nginx contains outdated Ubuntu packages

To: ubuntu-docker-images@xxxxxxxxxxxxxxxxxxx
From: Sergio Durigan Junior <sergio.durigan@xxxxxxxxxxxxx>
Date: Wed, 26 May 2021 10:49:39 -0400
In-reply-to: <60add7ba.1c69fb81.3c2d.ca17SMTPIN_ADDED_MISSING@mx.google.com> (noreply@canonical.com's message of "Tue, 25 May 2021 22:08:10 -0700 (PDT)")
User-agent: Gnus/5.13 (Gnus v5.13) Emacs/26.3 (gnu/linux)

On Wednesday, May 26 2021, noreply@xxxxxxxxxxxxx wrote:

> A scan of this rock shows that it was built with packages from the Ubuntu
> archive that have since received security updates. The following lists new
> USNs for affected binary packages in each rock revision:
>
> Revision r836b863eb09b (arm64; channels: 1.18-20.04_edge, 1.18-20.04_beta)
>  * libx11-data: 4966-1
>
> Revision ra854378cf553 (s390x; channels: 1.18-20.04_edge, 1.18-20.04_beta)
>  * libx11-data: 4966-1
>
> Revision raa2cfed28d5b (amd64; channels: 1.18-20.04_edge, 1.18-20.04_beta)
>  * libx11-data: 4966-1
>
> Revision rcd139a404285 (ppc64el; channels: 1.18-20.04_edge, 1.18-20.04_beta)
>  * libx11-data: 4966-1
>
> Simply rebuilding the rock will pull in the new security updates and
> resolve this. If your rock also contains vendored code, now might be a
> good time to review it for any needed updates.
>
> Thank you for your rock and for attending to this matter.
>
> References:
>  * https://ubuntu.com/security/notices/USN-4966-1/

I've just requested new builds of the 20.04 nginx image and will retag
ASAP.

Thanks,

-- 
Sergio
GPG key ID: E92F D0B3 6B14 F1F4 D8E0  EB2F 106D A1C8 C3CB BF14