← Back to team overview

ubuntu-docker-images team mailing list archive

Re: CVEs potentially affecting upstream based ROCKs

 

On Tue, Dec 05, 2023 at 05:06:24AM +0000, security-team-toolbox-bot@xxxxxxxxxxxxx wrote:
New CVEs affecting packages used to build upstream based rocks have been
created in the Ubuntu CVE tracker:

* https://github.com/hashicorp/consul: CVE-2023-5332

Please review your rock to understand if it is affected by these CVEs.

Thank you for your rock and for attending to this matter.

References:
https://git.launchpad.net/ubuntu-cve-tracker/tree/active/CVE-2023-5332

Hi Emilia,

I suppose these warnings used to have the potentially affected image
names in the title IIRC. Is this right? If so, could we have that
feature back? If not, would it be possible to add that?

--
Athos Ribeiro


Follow ups

References