ubuntu-docker-images team mailing list archive

[security-team-toolbox-bot@xxxxxxxxxxxxx]

A scan of this rock shows that it was built with packages from the Ubuntu
archive that have since received security updates. The following lists new
USNs for affected binary packages in each rock revision:

Revision r0a239dbad084 (amd64; channels: 1.18-22.04_beta)
 * libc-bin: 7259-1
 * libc6: 7259-1
 * libexpat1: 7000-2, 7145-1
 * libgd3: 7112-1
 * libgssapi-krb5-2: 7257-1
 * libk5crypto3: 7257-1
 * libkrb5-3: 7257-1
 * libkrb5support0: 7257-1
 * libnginx-mod-http-auth-pam: 7014-1
 * libnginx-mod-http-dav-ext: 7014-1
 * libnginx-mod-http-echo: 7014-1
 * libnginx-mod-http-geoip2: 7014-1
 * libnginx-mod-http-image-filter: 7014-1
 * libnginx-mod-http-subs-filter: 7014-1
 * libnginx-mod-http-upstream-fair: 7014-1
 * libnginx-mod-http-xslt-filter: 7014-1
 * libnginx-mod-mail: 7014-1
 * libnginx-mod-stream: 7014-1
 * libnginx-mod-stream-geoip2: 7014-1
 * libxml2: 7240-1
 * nginx-common: 7014-1
 * nginx-core: 7014-1
 * nginx-full: 7014-1

Revision r0c0743277a80 (s390x; channels: latest, edge)
 * libc-bin: 7259-1
 * libc6: 7259-1
 * libgssapi-krb5-2: 7257-1
 * libk5crypto3: 7257-1
 * libkrb5-3: 7257-1
 * libkrb5support0: 7257-1
 * libnginx-mod-stream: 7014-1
 * libxml2: 7240-1
 * nginx: 7014-1
 * nginx-common: 7014-1
 * nginx-full: 7014-1

Revision r29a9eb64b957 (amd64; channels: latest, edge)
 * libc-bin: 7259-1
 * libc6: 7259-1
 * libgssapi-krb5-2: 7257-1
 * libk5crypto3: 7257-1
 * libkrb5-3: 7257-1
 * libkrb5support0: 7257-1
 * libnginx-mod-stream: 7014-1
 * libxml2: 7240-1
 * nginx: 7014-1
 * nginx-common: 7014-1
 * nginx-full: 7014-1

Revision r2a8af4b22d43 (ppc64le; channels: 1.18-22.04_beta)
 * libc-bin: 7259-1
 * libc6: 7259-1
 * libexpat1: 7000-2, 7145-1
 * libgd3: 7112-1
 * libgssapi-krb5-2: 7257-1
 * libk5crypto3: 7257-1
 * libkrb5-3: 7257-1
 * libkrb5support0: 7257-1
 * libnginx-mod-http-auth-pam: 7014-1
 * libnginx-mod-http-dav-ext: 7014-1
 * libnginx-mod-http-echo: 7014-1
 * libnginx-mod-http-geoip2: 7014-1
 * libnginx-mod-http-image-filter: 7014-1
 * libnginx-mod-http-subs-filter: 7014-1
 * libnginx-mod-http-upstream-fair: 7014-1
 * libnginx-mod-http-xslt-filter: 7014-1
 * libnginx-mod-mail: 7014-1
 * libnginx-mod-stream: 7014-1
 * libnginx-mod-stream-geoip2: 7014-1
 * libxml2: 7240-1
 * nginx-common: 7014-1
 * nginx-core: 7014-1
 * nginx-full: 7014-1

Revision r3d9585f5544d (s390x; channels: 1.18-22.04_beta)
 * libc-bin: 7259-1
 * libc6: 7259-1
 * libexpat1: 7000-2, 7145-1
 * libgd3: 7112-1
 * libgssapi-krb5-2: 7257-1
 * libk5crypto3: 7257-1
 * libkrb5-3: 7257-1
 * libkrb5support0: 7257-1
 * libnginx-mod-http-auth-pam: 7014-1
 * libnginx-mod-http-dav-ext: 7014-1
 * libnginx-mod-http-echo: 7014-1
 * libnginx-mod-http-geoip2: 7014-1
 * libnginx-mod-http-image-filter: 7014-1
 * libnginx-mod-http-subs-filter: 7014-1
 * libnginx-mod-http-upstream-fair: 7014-1
 * libnginx-mod-http-xslt-filter: 7014-1
 * libnginx-mod-mail: 7014-1
 * libnginx-mod-stream: 7014-1
 * libnginx-mod-stream-geoip2: 7014-1
 * libxml2: 7240-1
 * nginx-common: 7014-1
 * nginx-core: 7014-1
 * nginx-full: 7014-1

Revision r5935fdce9c70 (s390x; channels: 1.26-24.10_edge)
 * libc-bin: 7259-1
 * libc6: 7259-1
 * libgssapi-krb5-2: 7257-1
 * libk5crypto3: 7257-1
 * libkrb5-3: 7257-1
 * libkrb5support0: 7257-1
 * libxml2: 7215-1

Revision r7f6cb0af7a6b (arm64; channels: latest, edge)
 * libc-bin: 7259-1
 * libc6: 7259-1
 * libgssapi-krb5-2: 7257-1
 * libk5crypto3: 7257-1
 * libkrb5-3: 7257-1
 * libkrb5support0: 7257-1
 * libnginx-mod-stream: 7014-1
 * libxml2: 7240-1
 * nginx: 7014-1
 * nginx-common: 7014-1
 * nginx-full: 7014-1

Revision r923917d6f26e (arm64; channels: 1.18-20.04_beta)
 * libc-bin: 7259-1
 * libc6: 7259-1
 * libexpat1: 7000-1, 7145-1
 * libgd3: 7112-1
 * libnginx-mod-http-auth-pam: 7014-1
 * libnginx-mod-http-dav-ext: 7014-1
 * libnginx-mod-http-echo: 7014-1
 * libnginx-mod-http-geoip: 7014-1
 * libnginx-mod-http-geoip2: 7014-1
 * libnginx-mod-http-image-filter: 7014-1
 * libnginx-mod-http-subs-filter: 7014-1
 * libnginx-mod-http-upstream-fair: 7014-1
 * libnginx-mod-http-xslt-filter: 7014-1
 * libnginx-mod-mail: 7014-1
 * libnginx-mod-stream: 7014-1
 * libxml2: 7240-1
 * nginx-common: 7014-1
 * nginx-full: 7014-1

Revision ra9721cef666e (arm64; channels: 1.26-24.10_edge)
 * libc-bin: 7259-1
 * libc6: 7259-1
 * libgssapi-krb5-2: 7257-1
 * libk5crypto3: 7257-1
 * libkrb5-3: 7257-1
 * libkrb5support0: 7257-1
 * libxml2: 7215-1

Revision rc76ffebf6545 (arm64; channels: 1.18-22.04_beta)
 * libc-bin: 7259-1
 * libc6: 7259-1
 * libexpat1: 7000-2, 7145-1
 * libgd3: 7112-1
 * libgssapi-krb5-2: 7257-1
 * libk5crypto3: 7257-1
 * libkrb5-3: 7257-1
 * libkrb5support0: 7257-1
 * libnginx-mod-http-auth-pam: 7014-1
 * libnginx-mod-http-dav-ext: 7014-1
 * libnginx-mod-http-echo: 7014-1
 * libnginx-mod-http-geoip2: 7014-1
 * libnginx-mod-http-image-filter: 7014-1
 * libnginx-mod-http-subs-filter: 7014-1
 * libnginx-mod-http-upstream-fair: 7014-1
 * libnginx-mod-http-xslt-filter: 7014-1
 * libnginx-mod-mail: 7014-1
 * libnginx-mod-stream: 7014-1
 * libnginx-mod-stream-geoip2: 7014-1
 * libxml2: 7240-1
 * nginx-common: 7014-1
 * nginx-core: 7014-1
 * nginx-full: 7014-1

Revision rcebe3ec114c1 (amd64; channels: 1.18-20.04_beta)
 * libc-bin: 7259-1
 * libc6: 7259-1
 * libexpat1: 7000-1, 7145-1
 * libgd3: 7112-1
 * libnginx-mod-http-auth-pam: 7014-1
 * libnginx-mod-http-dav-ext: 7014-1
 * libnginx-mod-http-echo: 7014-1
 * libnginx-mod-http-geoip: 7014-1
 * libnginx-mod-http-geoip2: 7014-1
 * libnginx-mod-http-image-filter: 7014-1
 * libnginx-mod-http-subs-filter: 7014-1
 * libnginx-mod-http-upstream-fair: 7014-1
 * libnginx-mod-http-xslt-filter: 7014-1
 * libnginx-mod-mail: 7014-1
 * libnginx-mod-stream: 7014-1
 * libxml2: 7240-1
 * nginx-common: 7014-1
 * nginx-full: 7014-1

Revision rd891f0e1a2ea (ppc64le; channels: 1.18-20.04_beta)
 * libc-bin: 7259-1
 * libc6: 7259-1
 * libexpat1: 7000-1, 7145-1
 * libgd3: 7112-1
 * libnginx-mod-http-auth-pam: 7014-1
 * libnginx-mod-http-dav-ext: 7014-1
 * libnginx-mod-http-echo: 7014-1
 * libnginx-mod-http-geoip: 7014-1
 * libnginx-mod-http-geoip2: 7014-1
 * libnginx-mod-http-image-filter: 7014-1
 * libnginx-mod-http-subs-filter: 7014-1
 * libnginx-mod-http-upstream-fair: 7014-1
 * libnginx-mod-http-xslt-filter: 7014-1
 * libnginx-mod-mail: 7014-1
 * libnginx-mod-stream: 7014-1
 * libxml2: 7240-1
 * nginx-common: 7014-1
 * nginx-full: 7014-1

Revision rdac99e2727c6 (ppc64le; channels: latest, edge)
 * libc-bin: 7259-1
 * libc6: 7259-1
 * libgssapi-krb5-2: 7257-1
 * libk5crypto3: 7257-1
 * libkrb5-3: 7257-1
 * libkrb5support0: 7257-1
 * libnginx-mod-stream: 7014-1
 * libxml2: 7240-1
 * nginx: 7014-1
 * nginx-common: 7014-1
 * nginx-full: 7014-1

Revision re8c15aaf15c5 (s390x; channels: 1.18-20.04_beta)
 * libc-bin: 7259-1
 * libc6: 7259-1
 * libexpat1: 7000-1, 7145-1
 * libgd3: 7112-1
 * libnginx-mod-http-auth-pam: 7014-1
 * libnginx-mod-http-dav-ext: 7014-1
 * libnginx-mod-http-echo: 7014-1
 * libnginx-mod-http-geoip: 7014-1
 * libnginx-mod-http-geoip2: 7014-1
 * libnginx-mod-http-image-filter: 7014-1
 * libnginx-mod-http-subs-filter: 7014-1
 * libnginx-mod-http-upstream-fair: 7014-1
 * libnginx-mod-http-xslt-filter: 7014-1
 * libnginx-mod-mail: 7014-1
 * libnginx-mod-stream: 7014-1
 * libxml2: 7240-1
 * nginx-common: 7014-1
 * nginx-full: 7014-1

Revision reef2d82121c6 (amd64; channels: 1.26-24.10_edge)
 * libc-bin: 7259-1
 * libc6: 7259-1
 * libgssapi-krb5-2: 7257-1
 * libk5crypto3: 7257-1
 * libkrb5-3: 7257-1
 * libkrb5support0: 7257-1
 * libxml2: 7215-1

Revision rfe21311a6f0e (ppc64le; channels: 1.26-24.10_edge)
 * libc-bin: 7259-1
 * libc6: 7259-1
 * libgssapi-krb5-2: 7257-1
 * libk5crypto3: 7257-1
 * libkrb5-3: 7257-1
 * libkrb5support0: 7257-1
 * libxml2: 7215-1

Simply rebuilding the rock will pull in the new security updates and
resolve this. If your rock also contains vendored code, now might be a
good time to review it for any needed updates.

Thank you for your rock and for attending to this matter.

References:
 * https://ubuntu.com/security/notices/USN-7000-1/
 * https://ubuntu.com/security/notices/USN-7000-2/
 * https://ubuntu.com/security/notices/USN-7014-1/
 * https://ubuntu.com/security/notices/USN-7112-1/
 * https://ubuntu.com/security/notices/USN-7145-1/
 * https://ubuntu.com/security/notices/USN-7215-1/
 * https://ubuntu.com/security/notices/USN-7240-1/
 * https://ubuntu.com/security/notices/USN-7257-1/
 * https://ubuntu.com/security/notices/USN-7259-1/