[[email protected]] metanorma contains outdated Ubuntu packages

[CAMOBAP]

A scan of this snap shows that it was built with packages from the Ubuntu
archive that have since received security updates. The following lists new
USNs for affected binary packages in each snap revision:

Revision r131 (amd64; channels: candidate)

• libasn1-8-heimdal: 5766-1
• libgssapi3-heimdal: 5766-1
• libhcrypto4-heimdal: 5766-1
• libheimbase1-heimdal: 5766-1
• libheimntlm0-heimdal: 5766-1
• libhx509-5-heimdal: 5766-1
• libkrb5-26-heimdal: 5766-1
• libroken18-heimdal: 5766-1
• libwind0-heimdal: 5766-1

Revision r132 (amd64; channels: stable)

• libasn1-8-heimdal: 5766-1
• libgssapi3-heimdal: 5766-1
• libhcrypto4-heimdal: 5766-1
• libheimbase1-heimdal: 5766-1
• libheimntlm0-heimdal: 5766-1
• libhx509-5-heimdal: 5766-1
• libkrb5-26-heimdal: 5766-1
• libroken18-heimdal: 5766-1
• libwind0-heimdal: 5766-1

Simply rebuilding the snap will pull in the new security updates and
resolve this. If your snap also contains vendored code, now might be a
good time to review it for any needed updates.

Thank you for your snap and for attending to this matter.

[ronaldtse]

Do we also need to build a snap for armv8 and aarch64?

[CAMOBAP]

I think we can.

BTW armv8 is probably the same as aarch64. Should we need to support aarch32 too?

[ronaldtse]

Cool, probably no need for 32 bit.

[ronaldtse]

A reminder for this issue from Ubuntu:

A scan of this snap shows that it was built with packages from the Ubuntu
archive that have since received security updates. The following lists new
USNs for affected binary packages in each snap revision:

Revision r131 (amd64; channels: candidate)

• libcurl3-gnutls: 5788-1

Revision r133 (amd64; channels: stable)

• libcurl3-gnutls: 5788-1

Simply rebuilding the snap will pull in the new security updates and
resolve this. If your snap also contains vendored code, now might be a
good time to review it for any needed updates.

Thank you for your snap and for attending to this matter.

References:

• https://ubuntu.com/security/notices/USN-5788-1/

[CAMOBAP]

Depends on metanorma/packed-mn#141