ubuntu-docker-images team mailing list archive

[security-team-toolbox-bot@xxxxxxxxxxxxx]

A scan of this rock shows that it was built with packages from the Ubuntu
archive that have since received security updates. The following lists new
USNs for affected binary packages in each rock revision:

Revision r0bce8d8b090c (s390x; channels: 4.10-20.04_beta)
 * libssl1.1: 6937-1
 * openssl: 6937-1

Revision r32ac15f2af64 (arm64; channels: 5.2-22.04_beta)
 * libssl3: 6937-1
 * openssl: 6937-1

Revision r3b46158b7bc0 (amd64; channels: 4.10-20.04_beta)
 * libssl1.1: 6937-1
 * openssl: 6937-1

Revision r3e99b8a4949e (s390x; channels: 5.2-22.04_beta)
 * libssl3: 6937-1
 * openssl: 6937-1

Revision r4c11b51b9505 (ppc64le; channels: 5.2-22.04_beta)
 * libssl3: 6937-1
 * openssl: 6937-1

Revision r5ea02fa5ebfb (amd64; channels: 5.2-22.04_beta)
 * libssl3: 6937-1
 * openssl: 6937-1

Revision r61fe00ce53b1 (s390x; channels: latest, edge, 6.6-24.04_beta)
 * libssl3t64: 6937-1
 * openssl: 6937-1

Revision r65c6a214f59f (ppc64le; channels: 4.10-20.04_beta)
 * libssl1.1: 6937-1
 * openssl: 6937-1

Revision r7a6144ca7e12 (arm64; channels: latest, edge, 6.6-24.04_beta)
 * libssl3t64: 6937-1
 * openssl: 6937-1

Revision ra6537b4852ee (arm64; channels: 4.10-20.04_beta)
 * libssl1.1: 6937-1
 * openssl: 6937-1

Revision rca24633a76bd (amd64; channels: latest, edge, 6.6-24.04_beta)
 * libssl3t64: 6937-1
 * openssl: 6937-1

Revision rdacfd569a8a6 (ppc64le; channels: latest, edge, 6.6-24.04_beta)
 * libssl3t64: 6937-1
 * openssl: 6937-1

Simply rebuilding the rock will pull in the new security updates and
resolve this. If your rock also contains vendored code, now might be a
good time to review it for any needed updates.

Thank you for your rock and for attending to this matter.

References:
 * https://ubuntu.com/security/notices/USN-6937-1/