← Back to team overview

ubuntu-docker-images team mailing list archive

Re: bind9 contains outdated Ubuntu packages

 

On Wed, Nov 15, 2023 at 05:00:27AM +0000, security-team-toolbox-bot@xxxxxxxxxxxxx wrote:
A scan of this rock shows that it was built with packages from the Ubuntu
archive that have since received security updates. The following lists new
USNs for affected binary packages in each rock revision:

Revision r15766308c71f (amd64; channels: 9.16-20.04_beta, 9.16-20.04_edge)
* libprocps8: 6477-1
* procps: 6477-1

Revision r6aeaf1f4ff16 (ppc64le; channels: 9.18-22.04_beta, 9.18-22.04_edge)
* libprocps8: 6477-1
* procps: 6477-1

Revision r839436aff235 (s390x; channels: latest, 9.18-23.04_beta, edge, 9.18-23.04_edge)
* libproc2-0: 6477-1
* procps: 6477-1

Revision r842b597ab032 (arm64; channels: 9.16-20.04_beta, 9.16-20.04_edge)
* libprocps8: 6477-1
* procps: 6477-1

Revision r85368072f5a0 (arm64; channels: 9.18-22.04_beta, 9.18-22.04_edge)
* libprocps8: 6477-1
* procps: 6477-1

Revision r89296741b7da (s390x; channels: 9.18-22.04_beta, 9.18-22.04_edge)
* libprocps8: 6477-1
* procps: 6477-1

Revision r9ee43ce94f62 (s390x; channels: 9.16-20.04_beta, 9.16-20.04_edge)
* libprocps8: 6477-1
* procps: 6477-1

Revision r9fc316ab259b (arm64; channels: latest, 9.18-23.04_beta, edge, 9.18-23.04_edge)
* libproc2-0: 6477-1
* procps: 6477-1

Revision rd23e75d04b71 (amd64; channels: 9.18-22.04_beta, 9.18-22.04_edge)
* libprocps8: 6477-1
* procps: 6477-1

Revision rdc445c822fdb (amd64; channels: latest, 9.18-23.04_beta, edge, 9.18-23.04_edge)
* libproc2-0: 6477-1
* procps: 6477-1

Revision re6cb82ee1212 (ppc64le; channels: latest, 9.18-23.04_beta, edge, 9.18-23.04_edge)
* libproc2-0: 6477-1
* procps: 6477-1

Revision rfaf9eea5aff2 (ppc64le; channels: 9.16-20.04_beta, 9.16-20.04_edge)
* libprocps8: 6477-1
* procps: 6477-1

Simply rebuilding the rock will pull in the new security updates and
resolve this. If your rock also contains vendored code, now might be a
good time to review it for any needed updates.

Thank you for your rock and for attending to this matter.

References:
* https://ubuntu.com/security/notices/USN-6477-1/

These images have been re-tagged and re-built.

--
Athos Ribeiro


References