ubuntu-docker-images team mailing list archive

Thread
Date

apache2 contains outdated Ubuntu packages

To: rocks@xxxxxxxxxxxxx, sergio.durigan@xxxxxxxxxxxxx, athos.ribeiro@xxxxxxxxxxxxx, carl.csaposs@xxxxxxxxxxxxx, dragomir.penev@xxxxxxxxxxxxx, jose.masson@xxxxxxxxxxxxx, leon.mintz@xxxxxxxxxxxxx, paulo.machado@xxxxxxxxxxxxx, ryan.barry@xxxxxxxxxxxxx, simon.aronsson@xxxxxxxxxxxxx, ubuntu-docker-images@xxxxxxxxxxxxxxxxxxx
From: security-team-toolbox-bot@xxxxxxxxxxxxx
Date: Thu, 20 Jul 2023 05:15:34 +0000 (UTC)

A scan of this rock shows that it was built with packages from the Ubuntu
archive that have since received security updates. The following lists new
USNs for affected binary packages in each rock revision:

Revision r030a8a24f121 (arm64; channels: 2.4-22.04_edge, 2.4-22.04_beta)
 * libcurl4: 6237-1, 6237-2

Revision r0b098d0491aa (s390x; channels: 2.4-20.04_edge, 2.4-20.04_beta)
 * libcurl4: 6237-1

Revision r26d5fae055ad (amd64; channels: 2.4-22.10_beta)
 * libcurl4: 6237-1

Revision r35348fe5cb3f (ppc64le; channels: 2.4-23.04_beta, edge, latest)
 * libcurl4: 6237-1

Revision r59109d2605cf (amd64; channels: 2.4-22.04_edge, 2.4-22.04_beta)
 * libcurl4: 6237-1, 6237-2

Revision r7165bda558ba (s390x; channels: 2.4-23.04_beta, edge, latest)
 * libcurl4: 6237-1

Revision r87d7b429546f (arm64; channels: 2.4-23.04_beta, edge, latest)
 * libcurl4: 6237-1

Revision ra16324441844 (ppc64le; channels: 2.4-22.04_edge, 2.4-22.04_beta)
 * libcurl4: 6237-1, 6237-2

Revision ra708a4b30ab1 (s390x; channels: 2.4-22.04_edge, 2.4-22.04_beta)
 * libcurl4: 6237-1, 6237-2

Revision radae649d2f57 (s390x; channels: 2.4-22.10_beta)
 * libcurl4: 6237-1

Revision rbb9a4b9d67db (arm64; channels: 2.4-20.04_edge, 2.4-20.04_beta)
 * libcurl4: 6237-1

Revision rbcd0776187cf (amd64; channels: 2.4-20.04_edge, 2.4-20.04_beta)
 * libcurl4: 6237-1

Revision rc11433c024b1 (amd64; channels: 2.4-23.04_beta, edge, latest)
 * libcurl4: 6237-1

Revision rc796e7c79785 (arm64; channels: 2.4-22.10_beta)
 * libcurl4: 6237-1

Revision rd5196118a75e (ppc64le; channels: 2.4-22.10_beta)
 * libcurl4: 6237-1

Revision rd5c806284625 (ppc64le; channels: 2.4-20.04_edge, 2.4-20.04_beta)
 * libcurl4: 6237-1

Simply rebuilding the rock will pull in the new security updates and
resolve this. If your rock also contains vendored code, now might be a
good time to review it for any needed updates.

Thank you for your rock and for attending to this matter.

References:
 * https://ubuntu.com/security/notices/USN-6237-1/
 * https://ubuntu.com/security/notices/USN-6237-2/