[ubuntu-cloud-announce] Refreshed Cloud Images Images of 8.04 LTS (Hardy Heron) [20111003]

[Ben Howard]

A new release of the Ubuntu Cloud Images for stable Ubuntu
release 8.04 LTS (Hardy Heron) is available at [1]. These new images
superseded the existing images [2]. Images are available for download or
immediate use on EC2 via published AMI ids. Users who wish to update their
existing installations can do so with:
        'apt-get update && apt-get distupgrade && reboot'.

Please note that the abbreviation "uec" has been replaced with "cloudimg"
in file names for downloadable images.

Notable Updates:
    * bind9-hosts, dnsutil, libdns36, libisccc: denial of service via
specially
        crafted packet. (CVE-2011-2464)
    * curl:
        - unconditional credential delegation during  GSSAPI authentication
            vulnerability The following packages have been updated.
            (CVE-2011-2192)
        - libcurl zlib automatic decompression callback data buffer
overflow
            (CVE-2010-0734)
        - SSL cert hostname checking bypass with NULL byte. (CVE-2009-2417)
    * dbus: denial of service via messages with non-native byte order.
        (CVE-2011-2200)
    * linux image:
         - close races in /proc/*/{environ,auxv}. (CVE-2011-1020)
         - dccp: fix oops on Reset after close. (CVE-2011-1093)
         - bridge: netfilter: fix information leak. (CVE-2011-1080)

The following packages have been updated. Please see the full change logs
for a complete listing of changes:
   * apt 0.7.9ubuntu17.2 => 0.7.9ubuntu17.3
   * apt-utils 0.7.9ubuntu17.2 => 0.7.9ubuntu17.3
   * bind9-host 1:9.4.2.dfsg.P2-2ubuntu0.7 => 1:9.4.2.dfsg.P2-2ubuntu0.8
   * curl 7.18.0-1ubuntu2.2 => 7.18.0-1ubuntu2.3
   * dbus  1.1.20-1ubuntu3.4 => 1.1.20-1ubuntu3.5
   * dhcp3-client 3.0.6.dfsg-1ubuntu9.2 => 3.0.6.dfsg-1ubuntu9.3
   * dhcp3-common 3.0.6.dfsg-1ubuntu9.2 => 3.0.6.dfsg-1ubuntu9.3
   * dnsutils 1:9.4.2.dfsg.P2-2ubuntu0.7 => 1:9.4.2.dfsg.P2-2ubuntu0.8
   * landscape-client1.5.5.1-0ubuntu0.8.04.0 => 11.02-0ubuntu0.8.04.1
   * libbind9-30 1:9.4.2.dfsg.P2-2ubuntu0.7 => 1:9.4.2.dfsg.P2-2ubuntu0.8
   * libcurl3 7.18.0-1ubuntu2.2 => 7.18.0-1ubuntu2.3
   * libcurl3-gnutls 7.18.0-1ubuntu2.2 => 7.18.0-1ubuntu2.3
   * libdbus-1-3 1.1.20-1ubuntu3.4 => 1.1.20-1ubuntu3.5
   * libdns36 1:9.4.2.dfsg.P2-2ubuntu0.7 => 1:9.4.2.dfsg.P2-2ubuntu0.8
   * libisc35 1:9.4.2.dfsg.P2-2ubuntu0.7 => 1:9.4.2.dfsg.P2-2ubuntu0.8
   * libisccc30 1:9.4.2.dfsg.P2-2ubuntu0.7 => 1:9.4.2.dfsg.P2-2ubuntu0.8
   * libisccfg30 1:9.4.2.dfsg.P2-2ubuntu0.7 => 1:9.4.2.dfsg.P2-2ubuntu0.8
   * liblwres30 1:9.4.2.dfsg.P2-2ubuntu0.7 => 1:9.4.2.dfsg.P2-2ubuntu0.8
   * linux-image-2.6.24-29-xen 2.6.24-29.90 => 2.6.24-29.93
   * logrotate 0.7.9ubuntu17.2 => 3.7.1-3ubuntu0.8.04.1
   * tzdata 2011g~repack-0ubuntu0.8.04 => 2011j~repack-0ubuntu0.8.04

--

[1] http://cloud-images.ubuntu.com/server/releases/hardy/release-20111003
[2] http://cloud-images.ubuntu.com/server/releases/hardy/release-20110616

-- 


Ben Howard
ben.howard at canonical.com
Canonical USA, Inc
GPG ID 0x5406A866




-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-cloud-announce/attachments/20111005/c4d2c844/attachment.pgp>