ubuntu-docker-images team mailing list archive

Thread
Date

nginx contains outdated Ubuntu packages

To: rocks@xxxxxxxxxxxxx, sergio.durigan@xxxxxxxxxxxxx, athos.ribeiro@xxxxxxxxxxxxx, carl.csaposs@xxxxxxxxxxxxx, dragomir.penev@xxxxxxxxxxxxx, jose.masson@xxxxxxxxxxxxx, leon.mintz@xxxxxxxxxxxxx, paulo.machado@xxxxxxxxxxxxx, simon.aronsson@xxxxxxxxxxxxx, ubuntu-docker-images@xxxxxxxxxxxxxxxxxxx
From: security-team-toolbox-bot@xxxxxxxxxxxxx
Date: Tue, 25 Mar 2025 05:17:28 -0000

A scan of this rock shows that it was built with packages from the Ubuntu
archive that have since received security updates. The following lists new
USNs for affected binary packages in each rock revision:

Revision r3ecdf7ba15ac (amd64; channels: latest, 1.26-24.10_beta, 1.26-24.10_edge, edge)
 * libelf1t64: 7369-1

Revision r5f5b5378582f (arm64; channels: 1.18-22.04_edge, 1.18-22.04_beta)
 * libelf1: 7369-1

Revision r63459aaebf2c (s390x; channels: 1.18-22.04_edge, 1.18-22.04_beta)
 * libelf1: 7369-1

Revision r7dce9e64e854 (ppc64le; channels: 1.18-22.04_edge, 1.18-22.04_beta)
 * libelf1: 7369-1

Revision r92706e4175e3 (arm64; channels: latest, 1.26-24.10_beta, 1.26-24.10_edge, edge)
 * libelf1t64: 7369-1

Revision rad69c1cd616c (ppc64le; channels: 1.24-24.04_edge, 1.24-24.04_beta)
 * libelf1t64: 7369-1

Revision rb0d4f02698ab (amd64; channels: 1.18-22.04_edge, 1.18-22.04_beta)
 * libelf1: 7369-1

Revision rbf24cad007ca (s390x; channels: 1.24-24.04_edge, 1.24-24.04_beta)
 * libelf1t64: 7369-1

Revision rd08340f14926 (amd64; channels: 1.24-24.04_edge, 1.24-24.04_beta)
 * libelf1t64: 7369-1

Revision rdac09b86dafd (arm64; channels: 1.24-24.04_edge, 1.24-24.04_beta)
 * libelf1t64: 7369-1

Revision re38279586ca8 (ppc64le; channels: latest, 1.26-24.10_beta, 1.26-24.10_edge, edge)
 * libelf1t64: 7369-1

Revision rf6e30dcd2c57 (s390x; channels: latest, 1.26-24.10_beta, 1.26-24.10_edge, edge)
 * libelf1t64: 7369-1

Simply rebuilding the rock will pull in the new security updates and
resolve this. If your rock also contains vendored code, now might be a
good time to review it for any needed updates.

Thank you for your rock and for attending to this matter.

References:
 * https://ubuntu.com/security/notices/USN-7369-1/