← Back to team overview

ubuntu-docker-images team mailing list archive

Re: cassandra contains outdated Ubuntu packages

 

On Saturday, December 18 2021, security-team-toolbox-bot@xxxxxxxxxxxxx wrote:

> A scan of this rock shows that it was built with packages from the Ubuntu
> archive that have since received security updates. The following lists new
> USNs for affected binary packages in each rock revision:
>
> Revision r2c516c0b52cc (s390x; channels: 4.0-20.04_edge, 4.0-20.04_beta)
>  * openjdk-8-jre-headless: 5202-1
>
> Revision r3e3536dfc7b3 (ppc64le; channels: 4.0-20.04_edge, 4.0-20.04_beta)
>  * openjdk-8-jre-headless: 5202-1
>
> Revision r45c25ab1fe6d (arm64; channels: 4.0-21.04_edge, 4.0-21.04_beta)
>  * openjdk-8-jre-headless: 5202-1
>
> Revision r4906bd316c4d (arm64; channels: latest, 4.0-21.10_beta, edge, 4.0-21.10_edge)
>  * openjdk-8-jre-headless: 5202-1
>
> Revision r918d2ef048da (amd64; channels: 4.0-20.04_edge, 4.0-20.04_beta)
>  * openjdk-8-jre-headless: 5202-1
>
> Revision ra6c9dd173427 (s390x; channels: latest, 4.0-21.10_beta, edge, 4.0-21.10_edge)
>  * openjdk-8-jre-headless: 5202-1
>
> Revision racfad1867bf7 (ppc64le; channels: 4.0-21.04_edge, 4.0-21.04_beta)
>  * openjdk-8-jre-headless: 5202-1
>
> Revision rb33a73ecad3c (amd64; channels: latest, 4.0-21.10_beta, edge, 4.0-21.10_edge)
>  * openjdk-8-jre-headless: 5202-1
>
> Revision rb65e14052a6c (ppc64le; channels: latest, 4.0-21.10_beta, edge, 4.0-21.10_edge)
>  * openjdk-8-jre-headless: 5202-1
>
> Revision rc45c52be7797 (s390x; channels: 4.0-21.04_edge, 4.0-21.04_beta)
>  * openjdk-8-jre-headless: 5202-1
>
> Revision rdda0cfa88290 (amd64; channels: 4.0-21.04_edge, 4.0-21.04_beta)
>  * openjdk-8-jre-headless: 5202-1
>
> Revision rf30d7159885e (arm64; channels: 4.0-20.04_edge, 4.0-20.04_beta)
>  * openjdk-8-jre-headless: 5202-1

On Saturday, December 18 2021, noreply wrote:

> A scan of this snap shows that it was built with packages from the Ubuntu
> archive that have since received security updates. The following lists new
> USNs for affected binary packages in each snap revision:
>
> Revision r1418 (ppc64el; channels: edge, 20.04/edge, 21.04/edge, 21.10/edge)
>  * openjdk-8-jre-headless: 5202-1
>
> Revision r1420 (arm64; channels: edge, 20.04/edge, 21.04/edge, 21.10/edge)
>  * openjdk-8-jre-headless: 5202-1
>
> Revision r1421 (amd64; channels: edge, 20.04/edge, 21.04/edge, 21.10/edge)
>  * openjdk-8-jre-headless: 5202-1
>
> Revision r1423 (s390x; channels: edge, 20.04/edge, 21.04/edge, 21.10/edge)
>  * openjdk-8-jre-headless: 5202-1

I've rebuilt the snap, the OCI images, and retagged them.

Thanks,

-- 
Sergio
GPG key ID: E92F D0B3 6B14 F1F4 D8E0  EB2F 106D A1C8 C3CB BF14