← Back to team overview

ubuntu-docker-images team mailing list archive

Re: bind9 contains outdated Ubuntu packages

 

On Thu, Sep 21, 2023 at 05:15:58AM +0000, security-team-toolbox-bot@xxxxxxxxxxxxx wrote:
A scan of this rock shows that it was built with packages from the Ubuntu
archive that have since received security updates. The following lists new
USNs for affected binary packages in each rock revision:

Revision r05051599ba2e (amd64; channels: 9.18-22.04_beta, 9.18-22.04_edge)
* bind9: 6390-1
* bind9-libs: 6390-1
* bind9-utils: 6390-1

Revision r32d222c2c866 (arm64; channels: latest, edge, 9.18-23.04_edge, 9.18-23.04_beta)
* bind9: 6390-1
* bind9-libs: 6390-1
* bind9-utils: 6390-1

Revision r40e2ae856172 (arm64; channels: 9.16-20.04_beta, 9.16-20.04_edge)
* bind9: 6390-1
* bind9-libs: 6390-1
* bind9-utils: 6390-1

Revision r5931a06e1397 (arm64; channels: 9.18-22.04_beta, 9.18-22.04_edge)
* bind9: 6390-1
* bind9-libs: 6390-1
* bind9-utils: 6390-1

Revision r6702d6611bad (s390x; channels: latest, edge, 9.18-23.04_edge, 9.18-23.04_beta)
* bind9: 6390-1
* bind9-libs: 6390-1
* bind9-utils: 6390-1

Revision r8400c81c573f (amd64; channels: 9.16-20.04_beta, 9.16-20.04_edge)
* bind9: 6390-1
* bind9-libs: 6390-1
* bind9-utils: 6390-1

Revision r860d79712c73 (amd64; channels: latest, edge, 9.18-23.04_edge, 9.18-23.04_beta)
* bind9: 6390-1
* bind9-libs: 6390-1
* bind9-utils: 6390-1

Revision r93fd755c2b66 (s390x; channels: 9.16-20.04_beta, 9.16-20.04_edge)
* bind9: 6390-1
* bind9-libs: 6390-1
* bind9-utils: 6390-1

Revision rae9acc438edd (ppc64le; channels: 9.18-22.04_beta, 9.18-22.04_edge)
* bind9: 6390-1
* bind9-libs: 6390-1
* bind9-utils: 6390-1

Revision rc3fb709c26e0 (ppc64le; channels: 9.16-20.04_beta, 9.16-20.04_edge)
* bind9: 6390-1
* bind9-libs: 6390-1
* bind9-utils: 6390-1

Revision rd929eddb0515 (ppc64le; channels: latest, edge, 9.18-23.04_edge, 9.18-23.04_beta)
* bind9: 6390-1
* bind9-libs: 6390-1
* bind9-utils: 6390-1

Revision rf06875a26353 (s390x; channels: 9.18-22.04_beta, 9.18-22.04_edge)
* bind9: 6390-1
* bind9-libs: 6390-1
* bind9-utils: 6390-1

Simply rebuilding the rock will pull in the new security updates and
resolve this. If your rock also contains vendored code, now might be a
good time to review it for any needed updates.

Thank you for your rock and for attending to this matter.

References:
* https://ubuntu.com/security/notices/USN-6390-1/

These images have been re-built and re-tagged.

--
Athos Ribeiro


References