ubuntu-docker-images team mailing list archive

[security-team-toolbox-bot@xxxxxxxxxxxxx]

A scan of this rock shows that it was built with packages from the Ubuntu
archive that have since received security updates. The following lists new
USNs for affected binary packages in each rock revision:

Revision r0338b418a6f8 (ppc64le; channels: 1.5-20.04_beta)
 * libssl1.1: 6119-1

Revision r071a07eae6c2 (s390x; channels: 1.6-22.04_beta)
 * libssl3: 6119-1

Revision r32394c9ad991 (arm64; channels: 1.6-23.04_beta, latest, edge, 1.6-23.04_edge)
 * libssl3: 6119-1

Revision r3da439e3ef4f (amd64; channels: 1.6-22.04_beta)
 * libssl3: 6119-1

Revision r4b7d01ef9c75 (amd64; channels: 1.6-23.04_beta, latest, edge, 1.6-23.04_edge)
 * libssl3: 6119-1

Revision r52cf56841ebe (ppc64le; channels: 1.6-22.04_beta)
 * libssl3: 6119-1

Revision r534aabdd98b8 (s390x; channels: 1.5-20.04_beta)
 * libssl1.1: 6119-1

Revision r7386071bd84f (arm64; channels: 1.6-22.10_beta, 1.6-22.10_edge)
 * libssl3: 6119-1

Revision r851fb36b0807 (arm64; channels: 1.5-20.04_beta)
 * libssl1.1: 6119-1

Revision r87c5e7027331 (amd64; channels: 1.5-20.04_beta)
 * libssl1.1: 6119-1

Revision r8fd69c397bee (ppc64le; channels: 1.6-23.04_beta, latest, edge, 1.6-23.04_edge)
 * libssl3: 6119-1

Revision r9af2d654d511 (s390x; channels: 1.6-22.10_beta, 1.6-22.10_edge)
 * libssl3: 6119-1

Revision raa405acf6ab0 (arm64; channels: 1.6-22.04_beta)
 * libssl3: 6119-1

Revision racc621ef911a (s390x; channels: 1.6-23.04_beta, latest, edge, 1.6-23.04_edge)
 * libssl3: 6119-1

Revision rda63de406d74 (ppc64le; channels: 1.6-22.10_beta, 1.6-22.10_edge)
 * libssl3: 6119-1

Revision rdb383d8f73a5 (amd64; channels: 1.6-22.10_beta, 1.6-22.10_edge)
 * libssl3: 6119-1

Simply rebuilding the rock will pull in the new security updates and
resolve this. If your rock also contains vendored code, now might be a
good time to review it for any needed updates.

Thank you for your rock and for attending to this matter.

References:
 * https://ubuntu.com/security/notices/USN-6119-1/