← Back to team overview

ubuntu-docker-images team mailing list archive

Re: nginx contains outdated Ubuntu packages

 

On Wed, Nov 15, 2023 at 05:00:29AM +0000, security-team-toolbox-bot@xxxxxxxxxxxxx wrote:
A scan of this rock shows that it was built with packages from the Ubuntu
archive that have since received security updates. The following lists new
USNs for affected binary packages in each rock revision:

Revision r18bbc3f06219 (arm64; channels: 1.18-22.04_beta, 1.18-22.04_edge)
* libprocps8: 6477-1
* procps: 6477-1

Revision r4487bdf32fc1 (amd64; channels: latest, 1.22-23.04_edge, edge, 1.22-23.04_beta)
* libproc2-0: 6477-1
* procps: 6477-1

Revision r79f13dbaa314 (amd64; channels: 1.18-22.04_beta, 1.18-22.04_edge)
* libprocps8: 6477-1
* procps: 6477-1

Revision r816cff4d2364 (arm64; channels: latest, 1.22-23.04_edge, edge, 1.22-23.04_beta)
* libproc2-0: 6477-1
* procps: 6477-1

Revision r91ac85840e95 (amd64; channels: 1.18-20.04_edge, 1.18-20.04_beta)
* libprocps8: 6477-1
* procps: 6477-1

Revision ra8282e6669ed (s390x; channels: latest, 1.22-23.04_edge, edge, 1.22-23.04_beta)
* libproc2-0: 6477-1
* procps: 6477-1

Revision rb462a607bab7 (s390x; channels: 1.18-20.04_edge, 1.18-20.04_beta)
* libprocps8: 6477-1
* procps: 6477-1

Revision rcc56a2a14bcd (arm64; channels: 1.18-20.04_edge, 1.18-20.04_beta)
* libprocps8: 6477-1
* procps: 6477-1

Revision rcfc748b25d0f (ppc64le; channels: 1.18-20.04_edge, 1.18-20.04_beta)
* libprocps8: 6477-1
* procps: 6477-1

Revision rd0e435c0581c (ppc64le; channels: latest, 1.22-23.04_edge, edge, 1.22-23.04_beta)
* libproc2-0: 6477-1
* procps: 6477-1

Revision rdb542294d92a (s390x; channels: 1.18-22.04_beta, 1.18-22.04_edge)
* libprocps8: 6477-1
* procps: 6477-1

Revision ref15cf342ec5 (ppc64le; channels: 1.18-22.04_beta, 1.18-22.04_edge)
* libprocps8: 6477-1
* procps: 6477-1

Simply rebuilding the rock will pull in the new security updates and
resolve this. If your rock also contains vendored code, now might be a
good time to review it for any needed updates.

Thank you for your rock and for attending to this matter.

References:
* https://ubuntu.com/security/notices/USN-6477-1/

These images have been re-tagged and re-built.

--
Athos Ribeiro


References