A scan of this rock shows that it was built with packages from the Ubuntu
archive that have since received security updates. The following lists new
USNs for affected binary packages in each rock revision:
Revision r25a39042ad71 (ppc64le; channels: 1.18-22.04_edge, 1.18-22.04_beta)
* libwebp7: 6369-1
Revision r325e9a608aba (ppc64le; channels: edge, latest, 1.22-23.04_beta, 1.22-23.04_edge)
* libwebp7: 6369-1
Revision r3b475ddcf992 (arm64; channels: edge, latest, 1.22-23.04_beta, 1.22-23.04_edge)
* libwebp7: 6369-1
Revision r48c763d4c395 (arm64; channels: 1.18-22.04_edge, 1.18-22.04_beta)
* libwebp7: 6369-1
Revision r50affa0ab91c (s390x; channels: 1.18-22.04_edge, 1.18-22.04_beta)
* libwebp7: 6369-1
Revision r52438eae134b (amd64; channels: 1.18-20.04_beta, 1.18-20.04_edge)
* libwebp6: 6369-1
Revision r61c8d6f146bd (s390x; channels: edge, latest, 1.22-23.04_beta, 1.22-23.04_edge)
* libwebp7: 6369-1
Revision r6692d8103c89 (ppc64le; channels: 1.18-20.04_beta, 1.18-20.04_edge)
* libwebp6: 6369-1
Revision r744a1d518db8 (arm64; channels: 1.18-20.04_beta, 1.18-20.04_edge)
* libwebp6: 6369-1
Revision r9d8ad50cda18 (s390x; channels: 1.18-20.04_beta, 1.18-20.04_edge)
* libwebp6: 6369-1
Revision rdb645e679f6f (amd64; channels: 1.18-22.04_edge, 1.18-22.04_beta)
* libwebp7: 6369-1
Revision ree680c132316 (amd64; channels: edge, latest, 1.22-23.04_beta, 1.22-23.04_edge)
* libwebp7: 6369-1
Simply rebuilding the rock will pull in the new security updates and
resolve this. If your rock also contains vendored code, now might be a
good time to review it for any needed updates.
Thank you for your rock and for attending to this matter.
References:
* https://ubuntu.com/security/notices/USN-6369-1/
