A scan of this rock shows that it was built with packages from the Ubuntu
archive that have since received security updates. The following lists new
USNs for affected binary packages in each rock revision:
Revision r012eb8f000d1 (arm64; channels: 2.4-22.04_beta)
* libssl3: 6119-1
Revision r26f302fa4f87 (s390x; channels: 2.4-22.10_beta)
* libssl3: 6119-1
Revision r467de1a60e72 (ppc64le; channels: 2.4-20.04_edge, 2.4-20.04_beta)
* libssl1.1: 6119-1
Revision r4b0640af5fb3 (s390x; channels: 2.4-22.04_beta)
* libssl3: 6119-1
Revision r4ce69a557a3f (amd64; channels: 2.4-20.04_edge, 2.4-20.04_beta)
* libssl1.1: 6119-1
Revision r60beaea71186 (arm64; channels: 2.4-20.04_edge, 2.4-20.04_beta)
* libssl1.1: 6119-1
Revision r6c301cfdf524 (arm64; channels: latest, edge, 2.4-23.04_beta, 2.4-23.04_edge)
* libssl3: 6119-1
Revision r7faf8dac506d (arm64; channels: 2.4-22.10_beta)
* libssl3: 6119-1
Revision r813e94b568ef (amd64; channels: 2.4-22.10_beta)
* libssl3: 6119-1
Revision r8fc305a2c612 (ppc64le; channels: 2.4-22.04_beta)
* libssl3: 6119-1
Revision rc193f1dc96b9 (amd64; channels: 2.4-22.04_beta)
* libssl3: 6119-1
Revision re0aefadf186b (amd64; channels: latest, edge, 2.4-23.04_beta, 2.4-23.04_edge)
* libssl3: 6119-1
Revision reab7d2a63e8e (ppc64le; channels: latest, edge, 2.4-23.04_beta, 2.4-23.04_edge)
* libssl3: 6119-1
Revision rf49f33e0c213 (s390x; channels: latest, edge, 2.4-23.04_beta, 2.4-23.04_edge)
* libssl3: 6119-1
Revision rf54b7fc36988 (s390x; channels: 2.4-20.04_edge, 2.4-20.04_beta)
* libssl1.1: 6119-1
Revision rf80a9cdcd096 (ppc64le; channels: 2.4-22.10_beta)
* libssl3: 6119-1
Simply rebuilding the rock will pull in the new security updates and
resolve this. If your rock also contains vendored code, now might be a
good time to review it for any needed updates.
Thank you for your rock and for attending to this matter.
References:
* https://ubuntu.com/security/notices/USN-6119-1/
