ubuntu-docker-images team mailing list archive

Thread
Date

mysql contains outdated Ubuntu packages

To: rocks@xxxxxxxxxxxxx, sergio.durigan@xxxxxxxxxxxxx, athos.ribeiro@xxxxxxxxxxxxx, ubuntu-docker-images@xxxxxxxxxxxxxxxxxxx
From: security-team-toolbox-bot@xxxxxxxxxxxxx
Date: Fri, 27 May 2022 05:23:42 +0000 (UTC)

A scan of this rock shows that it was built with packages from the Ubuntu
archive that have since received security updates. The following lists new
USNs for affected binary packages in each rock revision:

Revision r0439934cd457 (amd64; channels: 8.0-20.04_edge)
 * dpkg: 5446-1

Revision r0e628a8ace06 (ppc64le; channels: 8.0-22.04_beta, edge, latest)
 * dpkg: 5446-1

Revision r28c9b5933950 (arm64; channels: 8.0-22.04_edge)
 * dpkg: 5446-1

Revision r2a10c7d31569 (ppc64le; channels: 8.0-22.04_edge)
 * dpkg: 5446-1

Revision r2d64701517ad (s390x; channels: 8.0-20.04_edge)
 * dpkg: 5446-1

Revision r37bab14edc15 (s390x; channels: 8.0-21.10_edge)
 * dpkg: 5446-1

Revision r5b5e14980f40 (amd64; channels: 8.0-20.04_beta)
 * dpkg: 5446-1

Revision r5c8a07f87289 (ppc64le; channels: 8.0-21.10_edge)
 * dpkg: 5446-1

Revision r6b7b7a98370e (amd64; channels: 8.0-22.04_beta, edge, latest)
 * dpkg: 5446-1

Revision r75c281e6bd87 (arm64; channels: 8.0-21.10_beta)
 * dpkg: 5446-1

Revision r7604bbabf0b4 (arm64; channels: 8.0-20.04_beta)
 * dpkg: 5446-1

Revision r83773e9fe93b (arm64; channels: 8.0-22.04_beta, edge, latest)
 * dpkg: 5446-1

Revision r9372d390d789 (s390x; channels: 8.0-20.04_beta)
 * dpkg: 5446-1

Revision r9b39435f4326 (amd64; channels: 8.0-21.10_beta)
 * dpkg: 5446-1

Revision r9d19caa7e79c (amd64; channels: 8.0-22.04_edge)
 * dpkg: 5446-1

Revision ra6387d6c3b71 (s390x; channels: 8.0-22.04_edge)
 * dpkg: 5446-1

Revision rb6c3ee647fd1 (ppc64le; channels: 8.0-20.04_beta)
 * dpkg: 5446-1

Revision rb7c26944ca5d (s390x; channels: 8.0-21.10_beta)
 * dpkg: 5446-1

Revision re4187961c1e6 (amd64; channels: 8.0-21.10_edge)
 * dpkg: 5446-1

Revision rf5f94d9ffe6c (ppc64le; channels: 8.0-21.10_beta)
 * dpkg: 5446-1

Revision rfc1122cf3876 (arm64; channels: 8.0-21.10_edge)
 * dpkg: 5446-1

Revision rfc6dffbd0d7b (arm64; channels: 8.0-20.04_edge)
 * dpkg: 5446-1

Revision rfe42c9daad17 (s390x; channels: 8.0-22.04_beta, edge, latest)
 * dpkg: 5446-1

Simply rebuilding the rock will pull in the new security updates and
resolve this. If your rock also contains vendored code, now might be a
good time to review it for any needed updates.

Thank you for your rock and for attending to this matter.

References:
 * https://ubuntu.com/security/notices/USN-5446-1/