[ubuntu-cloud-announce] Updated 12.04.4 LTS Cloud Images for Heartbleed OpenSSL bug

Ben Howard ben.howard at canonical.com
Wed Apr 9 20:02:42 UTC 2014


Many of our Cloud Image users have inquired about the availability of
updated Ubuntu Cloud Images in response to the Heartbleed OpenSSL
Vulnerability [1]. Ubuntu released update Ubuntu packages for OpenSSL
yesterday, 08 April 2014 [2]. Due to the exceptional circumstances and
severity of the Heartbleed OpenSSL bug, Canonical has released new
12.04.4 LTS images at [3]. In the coming days, new Cloud Images for
Ubuntu 12.10 and Ubuntu 13.10 will be released.

Canonical is working with Amazon to get the Quickstart and the AWS
Marketplace links updated. In the meantime, you can find new AMI ID's
for 12.04.4 LTS at [3] and [4]. Also, the snapshot's for Amazon have the
volume-create permission granted on the latest images.

Windows Azure [5], Joyent [6] and HP [7, 8, 9] all have updated 12.04.4
LTS images in their respective galleries.

If you are running an affected version of OpenSSL on 12.04 LTS, 12.10 or
13.10, you are strongly encouraged to update. For new instances, it is
recommended to either use an image with a serial newer than 20140408, or
update your OpenSSL  package immediately upon launch. Finally, if you
need documentation on enabling unattended upgrades, please see [10].

Thanks,
Ben

[1] https://www.openssl.org/news/secadv_20140407.txt
[2] http://www.ubuntu.com/usn/usn-2165-1/
[3] http://cloud-images.ubuntu.com/releases/precise/release-20140408/
[4] http://cloud-images.ubuntu.com/locator/ec2/
[5] Azure: Ubuntu-12_04_4-LTS-amd64-server-20140408-en-us-30GB
[6] Joyent Image "ubuntu-certified-12.04",
fe5aa6c0-0f09-4b1f-9bad-83e453bb74f3
[7] HP US-West-1: 27be722e-d2d0-44f0-bebe-471c4af76039
[8] HP US-East-1: 8672f4c6-e33d-46f5-b6d8-ebbeba12fa02
[9] Waiting on HP for replication to legacy regions az-{1,2,3}
[10] https://help.ubuntu.com/community/AutomaticSecurityUpdates

-- 


Ben Howard
ben.howard at canonical.com
Canonical
GPG ID 0x5406A866



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-cloud-announce/attachments/20140409/713767b8/attachment.pgp>


More information about the Ubuntu-cloud-announce mailing list