| 2021-02-22 06:29:28 |
Yuan-Chen Cheng |
description |
Per today, cvescan complain about jq:
====
/usr/bin/jq
You have some packages that need an update for CVE.
====
However, we don't have updated jq in the security channel.
$ apt-cache policy jq
jq:
Installed: 1.6-1ubuntu0.20.04.1
Candidate: 1.6-1ubuntu0.20.04.1
Version table:
*** 1.6-1ubuntu0.20.04.1 500
500 http://archive.ubuntu.com/ubuntu focal-updates/universe amd64 Packages
100 /var/lib/dpkg/status
1.6-1 500
500 http://archive.ubuntu.com/ubuntu focal/universe amd64 Packages |
as in test of lp:1916444, cve scan failed, but we can't see which package is the root cause. |
|
