ubuntu-docker-images team mailing list archive

Thread
Date
mysql contains outdated Ubuntu packages

To: rocks@xxxxxxxxxxxxx, sergio.durigan@xxxxxxxxxxxxx, athos.ribeiro@xxxxxxxxxxxxx, ubuntu-docker-images@xxxxxxxxxxxxxxxxxxx
From: security-team-toolbox-bot@xxxxxxxxxxxxx
Date: Thu, 26 May 2022 05:13:13 +0000 (UTC)
A scan of this rock shows that it was built with packages from the Ubuntu
archive that have since received security updates. The following lists new
USNs for affected binary packages in each rock revision:

Revision r0e628a8ace06 (ppc64le; channels: 8.0-22.04_beta, 8.0-22.04_edge, edge, latest)
 * libpcre3: 5425-1
 * libssl3: 5402-1
 * mysql-client-8.0: 5400-1, 5400-3
 * mysql-client-core-8.0: 5400-1, 5400-3
 * mysql-server-core-8.0: 5400-1, 5400-3
 * openssl: 5402-1

Revision r5b5e14980f40 (amd64; channels: 8.0-20.04_edge, 8.0-20.04_beta)
 * libpcre3: 5425-1
 * libssl1.1: 5402-1
 * mysql-client-8.0: 5400-1, 5400-3
 * mysql-client-core-8.0: 5400-1, 5400-3
 * mysql-server-core-8.0: 5400-1, 5400-3
 * openssl: 5402-1

Revision r6b7b7a98370e (amd64; channels: 8.0-22.04_beta, 8.0-22.04_edge, edge, latest)
 * libpcre3: 5425-1
 * libssl3: 5402-1
 * mysql-client-8.0: 5400-1, 5400-3
 * mysql-client-core-8.0: 5400-1, 5400-3
 * mysql-server-core-8.0: 5400-1, 5400-3
 * openssl: 5402-1

Revision r75c281e6bd87 (arm64; channels: 8.0-21.10_beta, 8.0-21.10_edge)
 * libpcre3: 5425-1
 * libssl1.1: 5402-1
 * mysql-client-8.0: 5400-1, 5400-3
 * mysql-client-core-8.0: 5400-1, 5400-3
 * mysql-server-core-8.0: 5400-1, 5400-3
 * openssl: 5402-1

Revision r7604bbabf0b4 (arm64; channels: 8.0-20.04_edge, 8.0-20.04_beta)
 * libpcre3: 5425-1
 * libssl1.1: 5402-1
 * mysql-client-8.0: 5400-1, 5400-3
 * mysql-client-core-8.0: 5400-1, 5400-3
 * mysql-server-core-8.0: 5400-1, 5400-3
 * openssl: 5402-1

Revision r83773e9fe93b (arm64; channels: 8.0-22.04_beta, 8.0-22.04_edge, edge, latest)
 * libpcre3: 5425-1
 * libssl3: 5402-1
 * mysql-client-8.0: 5400-1, 5400-3
 * mysql-client-core-8.0: 5400-1, 5400-3
 * mysql-server-core-8.0: 5400-1, 5400-3
 * openssl: 5402-1

Revision r9372d390d789 (s390x; channels: 8.0-20.04_edge, 8.0-20.04_beta)
 * libpcre3: 5425-1
 * libssl1.1: 5402-1
 * mysql-client-8.0: 5400-1, 5400-3
 * mysql-client-core-8.0: 5400-1, 5400-3
 * mysql-server-core-8.0: 5400-1, 5400-3
 * openssl: 5402-1

Revision r9b39435f4326 (amd64; channels: 8.0-21.10_beta, 8.0-21.10_edge)
 * libpcre3: 5425-1
 * libssl1.1: 5402-1
 * mysql-client-8.0: 5400-1, 5400-3
 * mysql-client-core-8.0: 5400-1, 5400-3
 * mysql-server-core-8.0: 5400-1, 5400-3
 * openssl: 5402-1

Revision rb6c3ee647fd1 (ppc64le; channels: 8.0-20.04_edge, 8.0-20.04_beta)
 * libpcre3: 5425-1
 * libssl1.1: 5402-1
 * mysql-client-8.0: 5400-1, 5400-3
 * mysql-client-core-8.0: 5400-1, 5400-3
 * mysql-server-core-8.0: 5400-1, 5400-3
 * openssl: 5402-1

Revision rb7c26944ca5d (s390x; channels: 8.0-21.10_beta, 8.0-21.10_edge)
 * libpcre3: 5425-1
 * libssl1.1: 5402-1
 * mysql-client-8.0: 5400-1, 5400-3
 * mysql-client-core-8.0: 5400-1, 5400-3
 * mysql-server-core-8.0: 5400-1, 5400-3
 * openssl: 5402-1

Revision rf5f94d9ffe6c (ppc64le; channels: 8.0-21.10_beta, 8.0-21.10_edge)
 * libpcre3: 5425-1
 * libssl1.1: 5402-1
 * mysql-client-8.0: 5400-1, 5400-3
 * mysql-client-core-8.0: 5400-1, 5400-3
 * mysql-server-core-8.0: 5400-1, 5400-3
 * openssl: 5402-1

Revision rfe42c9daad17 (s390x; channels: 8.0-22.04_beta, 8.0-22.04_edge, edge, latest)
 * libpcre3: 5425-1
 * libssl3: 5402-1
 * mysql-client-8.0: 5400-1, 5400-3
 * mysql-client-core-8.0: 5400-1, 5400-3
 * mysql-server-core-8.0: 5400-1, 5400-3
 * openssl: 5402-1

Simply rebuilding the rock will pull in the new security updates and
resolve this. If your rock also contains vendored code, now might be a
good time to review it for any needed updates.

Thank you for your rock and for attending to this matter.

References:
 * https://ubuntu.com/security/notices/USN-5400-1/
 * https://ubuntu.com/security/notices/USN-5400-3/
 * https://ubuntu.com/security/notices/USN-5402-1/
 * https://ubuntu.com/security/notices/USN-5425-1/