ubuntu-docker-images team mailing list archive

[Athos Ribeiro <athos.ribeiro@xxxxxxxxxxxxx>]

On Thu, Nov 25, 2021 at 09:09:35AM -0300, Emilia Torino wrote:
> ---------- Forwarded message ---------
> From: <security-team-toolbox-bot@xxxxxxxxxxxxx>
> Date: Thu, Nov 25, 2021 at 2:10 AM
> Subject: postgres contains outdated Ubuntu packages
> To: <ubuntu-docker-images@xxxxxxxxxxxxxxxxxxx>, <
> sergio.durigan@xxxxxxxxxxxxx>
>
>
> A scan of this rock shows that it was built with packages from the Ubuntu
> archive that have since received security updates. The following lists new
> USNs for affected binary packages in each rock revision:
>
> Revision r36a9ed9efb98 (s390x; channels: 12-20.04_beta, 12-20.04_edge)
> * libicu66: 5156-1
>
> Revision r64176a3c3f3c (s390x; channels: 13-21.04_beta, 13-21.04_edge)
> * libicu67: 5156-1
>
> Revision r730549817190 (arm64; channels: 13-21.04_beta, 13-21.04_edge)
> * libicu67: 5156-1
>
> Revision rba2d3f2b37bc (arm64; channels: 12-20.04_beta, 12-20.04_edge)
> * libicu66: 5156-1
>
> Revision rd341c488f7b0 (ppc64le; channels: 12-20.04_beta, 12-20.04_edge)
> * libicu66: 5156-1
>
> Revision rdbdcd5e30cad (amd64; channels: 13-21.04_beta, 13-21.04_edge)
> * libicu67: 5156-1
>
> Revision re0a34ef2b209 (ppc64le; channels: 13-21.04_beta, 13-21.04_edge)
> * libicu67: 5156-1
>
> Revision rfd64be982caf (amd64; channels: 12-20.04_beta, 12-20.04_edge)
> * libicu66: 5156-1
>
> Simply rebuilding the rock will pull in the new security updates and
> resolve this. If your rock also contains vendored code, now might be a
> good time to review it for any needed updates.
>
> Thank you for your rock and for attending to this matter.

Hi Emilia,

Thanks for forwarding this one!

These have all been re-built and re-tagged
> References:
> * https://ubuntu.com/security/notices/USN-5156-1/

> --
> Mailing list: https://launchpad.net/~ubuntu-docker-images
> Post to     : ubuntu-docker-images@xxxxxxxxxxxxxxxxxxx
> Unsubscribe : https://launchpad.net/~ubuntu-docker-images
> More help   : https://help.launchpad.net/ListHelp


--
Athos Ribeiro