ubuntu-docker-images team mailing list archive
-
ubuntu-docker-images team
-
Mailing list archive
-
Message #00743
Re: CVEs potentially affecting upstream based ROCKs
On Tue, Dec 05, 2023 at 05:06:24AM +0000, security-team-toolbox-bot@xxxxxxxxxxxxx wrote:
New CVEs affecting packages used to build upstream based rocks have been
created in the Ubuntu CVE tracker:
* https://github.com/hashicorp/consul: CVE-2023-5332
Please review your rock to understand if it is affected by these CVEs.
Thank you for your rock and for attending to this matter.
References:
https://git.launchpad.net/ubuntu-cve-tracker/tree/active/CVE-2023-5332
Hi Emilia,
I suppose these warnings used to have the potentially affected image
names in the title IIRC. Is this right? If so, could we have that
feature back? If not, would it be possible to add that?
--
Athos Ribeiro
Follow ups
References