ubuntu-docker-images team mailing list archive

[security-team-toolbox-bot@xxxxxxxxxxxxx]

A scan of this rock shows that it was built with packages from the Ubuntu
archive that have since received security updates. The following lists new
USNs for affected binary packages in each rock revision:

Revision r1d4b4df57bc0 (s390x; channels: 1.24-23.10_edge, 1.24-23.10_beta, edge, latest)
 * libc-bin: 6737-1
 * libc6: 6737-1

Revision r326e84ceac37 (s390x; channels: 1.18-20.04_beta)
 * libc-bin: 6737-1
 * libc6: 6737-1

Revision r398dbffbe41f (ppc64le; channels: 1.18-22.04_beta)
 * libc-bin: 6737-1
 * libc6: 6737-1

Revision r4ab436167680 (s390x; channels: 1.18-22.04_beta)
 * libc-bin: 6737-1
 * libc6: 6737-1

Revision r61f5c18157fe (ppc64le; channels: 1.24-23.10_edge, 1.24-23.10_beta, edge, latest)
 * libc-bin: 6737-1
 * libc6: 6737-1

Revision r651474a90140 (arm64; channels: 1.18-20.04_beta)
 * libc-bin: 6737-1
 * libc6: 6737-1

Revision r723e712dbada (arm64; channels: 1.18-22.04_beta)
 * libc-bin: 6737-1
 * libc6: 6737-1

Revision r84a2fb410912 (amd64; channels: 1.18-20.04_beta)
 * libc-bin: 6737-1
 * libc6: 6737-1

Revision r9f767afdd8d6 (amd64; channels: 1.24-23.10_edge, 1.24-23.10_beta, edge, latest)
 * libc-bin: 6737-1
 * libc6: 6737-1

Revision ra30d9a50a1df (ppc64le; channels: 1.18-20.04_beta)
 * libc-bin: 6737-1
 * libc6: 6737-1

Revision rb7e252434a17 (amd64; channels: 1.18-22.04_beta)
 * libc-bin: 6737-1
 * libc6: 6737-1

Revision rf091018634f0 (arm64; channels: 1.24-23.10_edge, 1.24-23.10_beta, edge, latest)
 * libc-bin: 6737-1
 * libc6: 6737-1

Simply rebuilding the rock will pull in the new security updates and
resolve this. If your rock also contains vendored code, now might be a
good time to review it for any needed updates.

Thank you for your rock and for attending to this matter.

References:
 * https://ubuntu.com/security/notices/USN-6737-1/