ubuntu-docker-images team mailing list archive

[Athos Ribeiro <athos.ribeiro@xxxxxxxxxxxxx>]

On Fri, Jan 07, 2022 at 09:45:20AM -0300, Emilia Torino wrote:
> ---------- Forwarded message ---------
> From: <security-team-toolbox-bot@xxxxxxxxxxxxx>
> Date: Fri, Jan 7, 2022 at 2:08 AM
> Subject: apache2 contains outdated Ubuntu packages
> To: <ubuntu-docker-images@xxxxxxxxxxxxxxxxxxx>, <
> sergio.durigan@xxxxxxxxxxxxx>

Hi Emilia,

> A scan of this rock shows that it was built with packages from the Ubuntu
> archive that have since received security updates. The following lists new
> USNs for affected binary packages in each rock revision:
>
> Revision r0bbe7a63ff88 (s390x; channels: 2.4-21.04_edge, 2.4-21.04_beta)
> * apache2: 5212-1
> * apache2-bin: 5212-1
> * apache2-data: 5212-1
> * apache2-utils: 5212-1
>
> Revision r0e75dec2f31a (ppc64le; channels: 2.4-21.04_edge, 2.4-21.04_beta)
> * apache2: 5212-1
> * apache2-bin: 5212-1
> * apache2-data: 5212-1
> * apache2-utils: 5212-1
>
> Revision r2c653e511f49 (amd64; channels: 2.4-21.04_edge, 2.4-21.04_beta)
> * apache2: 5212-1
> * apache2-bin: 5212-1
> * apache2-data: 5212-1
> * apache2-utils: 5212-1
>
> Revision r3763f5df1134 (arm64; channels: 2.4-21.04_edge, 2.4-21.04_beta)
> * apache2: 5212-1
> * apache2-bin: 5212-1
> * apache2-data: 5212-1
> * apache2-utils: 5212-1
>
> Revision r73174aa067ed (arm64; channels: 2.4-21.10_beta, 2.4-21.10_edge,
> latest, edge)
> * apache2: 5212-1
> * apache2-bin: 5212-1
> * apache2-data: 5212-1
> * apache2-utils: 5212-1
>
> Revision r90b442248709 (s390x; channels: 2.4-20.04_edge, 2.4-20.04_beta)
> * apache2: 5212-1
> * apache2-bin: 5212-1
> * apache2-data: 5212-1
> * apache2-utils: 5212-1
>
> Revision rac88fed2d287 (ppc64le; channels: 2.4-20.04_edge, 2.4-20.04_beta)
> * apache2: 5212-1
> * apache2-bin: 5212-1
> * apache2-data: 5212-1
> * apache2-utils: 5212-1
>
> Revision rb941a0b9fad8 (ppc64le; channels: 2.4-21.10_beta, 2.4-21.10_edge,
> latest, edge)
> * apache2: 5212-1
> * apache2-bin: 5212-1
> * apache2-data: 5212-1
> * apache2-utils: 5212-1
>
> Revision rcf2fd1faddc3 (arm64; channels: 2.4-20.04_edge, 2.4-20.04_beta)
> * apache2: 5212-1
> * apache2-bin: 5212-1
> * apache2-data: 5212-1
> * apache2-utils: 5212-1
>
> Revision rd4f864ea14da (amd64; channels: 2.4-20.04_edge, 2.4-20.04_beta)
> * apache2: 5212-1
> * apache2-bin: 5212-1
> * apache2-data: 5212-1
> * apache2-utils: 5212-1
>
> Revision rdf892f664a5a (amd64; channels: 2.4-21.10_beta, 2.4-21.10_edge,
> latest, edge)
> * apache2: 5212-1
> * apache2-bin: 5212-1
> * apache2-data: 5212-1
> * apache2-utils: 5212-1
>
> Revision rfe2313973ce1 (s390x; channels: 2.4-21.10_beta, 2.4-21.10_edge,
> latest, edge)
> * apache2: 5212-1
> * apache2-bin: 5212-1
> * apache2-data: 5212-1
> * apache2-utils: 5212-1
>
> Simply rebuilding the rock will pull in the new security updates and
> resolve this. If your rock also contains vendored code, now might be a
> good time to review it for any needed updates.

These have been rebuilt and re-tagged!

> Thank you for your rock and for attending to this matter.

Thanks for forwarding this to the list :)

> References:
> * https://ubuntu.com/security/notices/USN-5212-1/

> --
> Mailing list: https://launchpad.net/~ubuntu-docker-images
> Post to     : ubuntu-docker-images@xxxxxxxxxxxxxxxxxxx
> Unsubscribe : https://launchpad.net/~ubuntu-docker-images
> More help   : https://help.launchpad.net/ListHelp


--
Athos Ribeiro