ubuntu-docker-images team mailing list archive

[Paulo Machado <paulo.machado@xxxxxxxxxxxxx>]

 These images were re-built and re-tagged.

On Wed, Jul 6, 2022 at 2:15 AM <security-team-toolbox-bot@xxxxxxxxxxxxx>
wrote:

> A scan of this rock shows that it was built with packages from the Ubuntu
> archive that have since received security updates. The following lists new
> USNs for affected binary packages in each rock revision:
>
> Revision r0ad9f044b29e (amd64; channels: 8.0-20.04_edge, 8.0-20.04_beta)
>  * gpgv: 5503-1
>  * libssl1.1: 5502-1
>  * openssl: 5502-1
>
> Revision r13029db19493 (arm64; channels: 8.0-22.04_edge, edge,
> 8.0-22.04_beta, latest)
>  * gpgv: 5503-1
>  * libssl3: 5502-1
>  * openssl: 5502-1
>
> Revision r2a10e392f30e (s390x; channels: 8.0-21.10_beta, 8.0-21.10_edge)
>  * gpgv: 5503-1
>  * libssl1.1: 5502-1
>  * openssl: 5502-1
>
> Revision r4202f2f14ab2 (s390x; channels: 8.0-22.04_edge, edge,
> 8.0-22.04_beta, latest)
>  * gpgv: 5503-1
>  * libssl3: 5502-1
>  * openssl: 5502-1
>
> Revision r45249dc5e5a6 (ppc64le; channels: 8.0-20.04_edge, 8.0-20.04_beta)
>  * gpgv: 5503-1
>  * libssl1.1: 5502-1
>  * openssl: 5502-1
>
> Revision r5ddb4de84621 (amd64; channels: 8.0-21.10_beta, 8.0-21.10_edge)
>  * gpgv: 5503-1
>  * libssl1.1: 5502-1
>  * openssl: 5502-1
>
> Revision r8f7db3210c5e (arm64; channels: 8.0-20.04_edge, 8.0-20.04_beta)
>  * gpgv: 5503-1
>  * libssl1.1: 5502-1
>  * openssl: 5502-1
>
> Revision ra621b8948243 (ppc64le; channels: 8.0-22.04_edge, edge,
> 8.0-22.04_beta, latest)
>  * gpgv: 5503-1
>  * libssl3: 5502-1
>  * openssl: 5502-1
>
> Revision rc88327a9d5a4 (ppc64le; channels: 8.0-21.10_beta, 8.0-21.10_edge)
>  * gpgv: 5503-1
>  * libssl1.1: 5502-1
>  * openssl: 5502-1
>
> Revision rca164666bc58 (arm64; channels: 8.0-21.10_beta, 8.0-21.10_edge)
>  * gpgv: 5503-1
>  * libssl1.1: 5502-1
>  * openssl: 5502-1
>
> Revision rec233e22be22 (amd64; channels: 8.0-22.04_edge, edge,
> 8.0-22.04_beta, latest)
>  * gpgv: 5503-1
>  * libssl3: 5502-1
>  * openssl: 5502-1
>
> Revision rfaecf18a8113 (s390x; channels: 8.0-20.04_edge, 8.0-20.04_beta)
>  * gpgv: 5503-1
>  * libssl1.1: 5502-1
>  * openssl: 5502-1
>
> Simply rebuilding the rock will pull in the new security updates and
> resolve this. If your rock also contains vendored code, now might be a
> good time to review it for any needed updates.
>
> Thank you for your rock and for attending to this matter.
>
> References:
>  * https://ubuntu.com/security/notices/USN-5502-1/
>  * https://ubuntu.com/security/notices/USN-5503-1/
>