ubuntu-docker-images team mailing list archive

[Athos Ribeiro <athos.ribeiro@xxxxxxxxxxxxx>]

On Wed, Jun 08, 2022 at 05:11:11AM +0000, security-team-toolbox-bot@xxxxxxxxxxxxx wrote:
> A scan of this rock shows that it was built with packages from the Ubuntu
> archive that have since received security updates. The following lists new
> USNs for affected binary packages in each rock revision:
>
> Revision r045ba60507af (s390x; channels: 1.6-22.04_edge, latest, 1.6-22.04_beta, edge)
> * e2fsprogs: 5464-1
> * libcom-err2: 5464-1
> * libext2fs2: 5464-1
> * libss2: 5464-1
> * logsave: 5464-1
>
> Revision r0c1ce2d7014d (ppc64le; channels: 1.6-22.04_edge, latest, 1.6-22.04_beta, edge)
> * e2fsprogs: 5464-1
> * libcom-err2: 5464-1
> * libext2fs2: 5464-1
> * libss2: 5464-1
> * logsave: 5464-1
>
> Revision r510d937a83f0 (arm64; channels: 1.6-21.10_edge, 1.6-21.10_beta)
> * e2fsprogs: 5464-1
> * libcom-err2: 5464-1
> * libext2fs2: 5464-1
> * libss2: 5464-1
> * logsave: 5464-1
>
> Revision r55a41a5d19b2 (ppc64le; channels: 1.5-20.04_beta, 1.5-20.04_edge)
> * e2fsprogs: 5464-1
> * libcom-err2: 5464-1
> * libext2fs2: 5464-1
> * libss2: 5464-1
> * logsave: 5464-1
>
> Revision r61105da81e76 (s390x; channels: 1.6-21.10_edge, 1.6-21.10_beta)
> * e2fsprogs: 5464-1
> * libcom-err2: 5464-1
> * libext2fs2: 5464-1
> * libss2: 5464-1
> * logsave: 5464-1
>
> Revision r6fe6c2c77a9f (arm64; channels: 1.6-22.04_edge, latest, 1.6-22.04_beta, edge)
> * e2fsprogs: 5464-1
> * libcom-err2: 5464-1
> * libext2fs2: 5464-1
> * libss2: 5464-1
> * logsave: 5464-1
>
> Revision ra51ee097da87 (ppc64le; channels: 1.6-21.10_edge, 1.6-21.10_beta)
> * e2fsprogs: 5464-1
> * libcom-err2: 5464-1
> * libext2fs2: 5464-1
> * libss2: 5464-1
> * logsave: 5464-1
>
> Revision racd9c7c310e6 (amd64; channels: 1.6-21.10_edge, 1.6-21.10_beta)
> * e2fsprogs: 5464-1
> * libcom-err2: 5464-1
> * libext2fs2: 5464-1
> * libss2: 5464-1
> * logsave: 5464-1
>
> Revision rc7645037b410 (arm64; channels: 1.5-20.04_beta, 1.5-20.04_edge)
> * e2fsprogs: 5464-1
> * libcom-err2: 5464-1
> * libext2fs2: 5464-1
> * libss2: 5464-1
> * logsave: 5464-1
>
> Revision rd3c27b1fc482 (amd64; channels: 1.5-20.04_beta, 1.5-20.04_edge)
> * e2fsprogs: 5464-1
> * libcom-err2: 5464-1
> * libext2fs2: 5464-1
> * libss2: 5464-1
> * logsave: 5464-1
>
> Revision rd5293707e31b (s390x; channels: 1.5-20.04_beta, 1.5-20.04_edge)
> * e2fsprogs: 5464-1
> * libcom-err2: 5464-1
> * libext2fs2: 5464-1
> * libss2: 5464-1
> * logsave: 5464-1
>
> Revision rf5b8345bdc29 (amd64; channels: 1.6-22.04_edge, latest, 1.6-22.04_beta, edge)
> * e2fsprogs: 5464-1
> * libcom-err2: 5464-1
> * libext2fs2: 5464-1
> * libss2: 5464-1
> * logsave: 5464-1
>
> Simply rebuilding the rock will pull in the new security updates and
> resolve this. If your rock also contains vendored code, now might be a
> good time to review it for any needed updates.
>
> Thank you for your rock and for attending to this matter.
>
> References:
> * https://ubuntu.com/security/notices/USN-5464-1/

These images have been re-built and re-tagged.

--
Athos Ribeiro