ubuntu-docker-images team mailing list archive

Thread
Date

apache2 contains outdated Ubuntu packages

To: rocks@xxxxxxxxxxxxx, sergio.durigan@xxxxxxxxxxxxx, athos.ribeiro@xxxxxxxxxxxxx, carl.csaposs@xxxxxxxxxxxxx, dragomir.penev@xxxxxxxxxxxxx, jose.masson@xxxxxxxxxxxxx, leon.mintz@xxxxxxxxxxxxx, paulo.machado@xxxxxxxxxxxxx, ryan.barry@xxxxxxxxxxxxx, simon.aronsson@xxxxxxxxxxxxx, ubuntu-docker-images@xxxxxxxxxxxxxxxxxxx
From: security-team-toolbox-bot@xxxxxxxxxxxxx
Date: Wed, 24 May 2023 05:16:07 +0000 (UTC)

A scan of this rock shows that it was built with packages from the Ubuntu
archive that have since received security updates. The following lists new
USNs for affected binary packages in each rock revision:

Revision r1bbed76aebc7 (amd64; channels: 2.4-20.04_edge, 2.4-20.04_beta)
 * libncurses6: 6099-1
 * libncursesw6: 6099-1
 * libtinfo6: 6099-1
 * ncurses-base: 6099-1
 * ncurses-bin: 6099-1

Revision r3414c36b1d3c (amd64; channels: 2.4-22.10_beta)
 * libncurses6: 6099-1
 * libncursesw6: 6099-1
 * libtinfo6: 6099-1
 * ncurses-base: 6099-1
 * ncurses-bin: 6099-1

Revision r483937ddd010 (arm64; channels: 2.4-20.04_edge, 2.4-20.04_beta)
 * libncurses6: 6099-1
 * libncursesw6: 6099-1
 * libtinfo6: 6099-1
 * ncurses-base: 6099-1
 * ncurses-bin: 6099-1

Revision r53c4c0f49c17 (ppc64le; channels: 2.4-22.10_beta)
 * libncurses6: 6099-1
 * libncursesw6: 6099-1
 * libtinfo6: 6099-1
 * ncurses-base: 6099-1
 * ncurses-bin: 6099-1

Revision r606d941e0c1f (arm64; channels: 2.4-23.04_edge, edge, 2.4-23.04_beta, latest)
 * libncursesw6: 6099-1
 * libtinfo6: 6099-1
 * ncurses-base: 6099-1
 * ncurses-bin: 6099-1

Revision r68d625400278 (ppc64le; channels: 2.4-22.04_beta)
 * libncurses6: 6099-1
 * libncursesw6: 6099-1
 * libtinfo6: 6099-1
 * ncurses-base: 6099-1
 * ncurses-bin: 6099-1

Revision r6f5be9db1d88 (ppc64le; channels: 2.4-23.04_edge, edge, 2.4-23.04_beta, latest)
 * libncursesw6: 6099-1
 * libtinfo6: 6099-1
 * ncurses-base: 6099-1
 * ncurses-bin: 6099-1

Revision r7170cdf94a73 (s390x; channels: 2.4-22.10_beta)
 * libncurses6: 6099-1
 * libncursesw6: 6099-1
 * libtinfo6: 6099-1
 * ncurses-base: 6099-1
 * ncurses-bin: 6099-1

Revision r72c1c5e424f9 (s390x; channels: 2.4-22.04_beta)
 * libncurses6: 6099-1
 * libncursesw6: 6099-1
 * libtinfo6: 6099-1
 * ncurses-base: 6099-1
 * ncurses-bin: 6099-1

Revision r88f3730c418d (ppc64le; channels: 2.4-20.04_edge, 2.4-20.04_beta)
 * libncurses6: 6099-1
 * libncursesw6: 6099-1
 * libtinfo6: 6099-1
 * ncurses-base: 6099-1
 * ncurses-bin: 6099-1

Revision r916aded0c8d3 (arm64; channels: 2.4-22.04_beta)
 * libncurses6: 6099-1
 * libncursesw6: 6099-1
 * libtinfo6: 6099-1
 * ncurses-base: 6099-1
 * ncurses-bin: 6099-1

Revision r96d636ce656f (arm64; channels: 2.4-22.10_beta)
 * libncurses6: 6099-1
 * libncursesw6: 6099-1
 * libtinfo6: 6099-1
 * ncurses-base: 6099-1
 * ncurses-bin: 6099-1

Revision rc0633b779531 (amd64; channels: 2.4-23.04_edge, edge, 2.4-23.04_beta, latest)
 * libncursesw6: 6099-1
 * libtinfo6: 6099-1
 * ncurses-base: 6099-1
 * ncurses-bin: 6099-1

Revision rcb2cca61717b (s390x; channels: 2.4-20.04_edge, 2.4-20.04_beta)
 * libncurses6: 6099-1
 * libncursesw6: 6099-1
 * libtinfo6: 6099-1
 * ncurses-base: 6099-1
 * ncurses-bin: 6099-1

Revision rcd6728c8d63b (amd64; channels: 2.4-22.04_beta)
 * libncurses6: 6099-1
 * libncursesw6: 6099-1
 * libtinfo6: 6099-1
 * ncurses-base: 6099-1
 * ncurses-bin: 6099-1

Revision rfa5d327b96b0 (s390x; channels: 2.4-23.04_edge, edge, 2.4-23.04_beta, latest)
 * libncursesw6: 6099-1
 * libtinfo6: 6099-1
 * ncurses-base: 6099-1
 * ncurses-bin: 6099-1

Simply rebuilding the rock will pull in the new security updates and
resolve this. If your rock also contains vendored code, now might be a
good time to review it for any needed updates.

Thank you for your rock and for attending to this matter.

References:
 * https://ubuntu.com/security/notices/USN-6099-1/

Follow ups

Re: apache2 contains outdated Ubuntu packages
From: Athos Ribeiro, 2023-05-25