ubuntu-docker-images team mailing list archive

[Athos Ribeiro <athos.ribeiro@xxxxxxxxxxxxx>]

On Fri, Aug 13, 2021 at 09:39:19AM -0300, Emilia Torino wrote:
> FYI

Hi Emilia,

Thanks for forwarding the message here :)

I re-built and tagged those images.

> ---------- Forwarded message ---------
> From: <security-team-toolbox-bot@xxxxxxxxxxxxx>
> Date: Fri, Aug 13, 2021 at 2:26 AM
> Subject: postgres contains outdated Ubuntu packages
> To: <ubuntu-docker-images@xxxxxxxxxxxxxxxxxxx>, <
> sergio.durigan@xxxxxxxxxxxxx>
>
>
> A scan of this rock shows that it was built with packages from the Ubuntu
> archive that have since received security updates. The following lists new
> USNs for affected binary packages in each rock revision:
>
> Revision r2713038a40ea (amd64; channels: edge, 13-21.04_beta, latest,
> 13-21.04_edge)
> * postgresql-13: 5038-1
> * postgresql-client-13: 5038-1
>
> Revision r38786e4b0d78 (s390x; channels: 12-20.04_edge, 12-20.04_beta)
> * postgresql-12: 5038-1
> * postgresql-client-12: 5038-1
>
> Revision r50d6b97c7c15 (arm64; channels: 12-20.04_edge, 12-20.04_beta)
> * postgresql-12: 5038-1
> * postgresql-client-12: 5038-1
>
> Revision r787071fa0c88 (ppc64le; channels: 12-20.04_edge, 12-20.04_beta)
> * postgresql-12: 5038-1
> * postgresql-client-12: 5038-1
>
> Revision r9f38f0177f4d (amd64; channels: 12-20.04_edge, 12-20.04_beta)
> * postgresql-12: 5038-1
> * postgresql-client-12: 5038-1
>
> Revision rc40c6808ac65 (ppc64le; channels: edge, 13-21.04_beta, latest,
> 13-21.04_edge)
> * postgresql-13: 5038-1
> * postgresql-client-13: 5038-1
>
> Revision rc9fd0c73b14c (s390x; channels: edge, 13-21.04_beta, latest,
> 13-21.04_edge)
> * postgresql-13: 5038-1
> * postgresql-client-13: 5038-1
>
> Revision re9467ef3e45d (arm64; channels: edge, 13-21.04_beta, latest,
> 13-21.04_edge)
> * postgresql-13: 5038-1
> * postgresql-client-13: 5038-1
>
> Simply rebuilding the rock will pull in the new security updates and
> resolve this. If your rock also contains vendored code, now might be a
> good time to review it for any needed updates.
>
> Thank you for your rock and for attending to this matter.
>
> References:
> * https://ubuntu.com/security/notices/USN-5038-1/

> --
> Mailing list: https://launchpad.net/~ubuntu-docker-images
> Post to     : ubuntu-docker-images@xxxxxxxxxxxxxxxxxxx
> Unsubscribe : https://launchpad.net/~ubuntu-docker-images
> More help   : https://help.launchpad.net/ListHelp


--
Athos Ribeiro