[ubuntu-cloud] Refreshed UEC Images of 10.04 LTS (Lucid Lynx) [20110201.1]

Thu Feb 3 01:26:04 UTC 2011

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

A new release of the Ubuntu Enterprise Cloud Images for stable Ubuntu
release 10.04 LTS (Lucid Lynx) is available at [1].  Images are available
for download or immediate use on EC2 via published AMI ids.

There are a few important updates since the 20101228 release [2].
 * Images now use pv-grub kernels [3] by default.
   This means that if you launch an instance of the new AMIs, or rebundle
   based on these images, you can upgrade and reboot into a new kernel.

   Future kernels updates can be obtained via:
     sudo apt-get update && sudo apt-get dist-upgrade
     sudo reboot

   Previously receiving a kernel upgrade required either a rebundle, or
   on EBS root instances, a stop, modify-instance-attribute, and start.

   Ubuntu will continue to publish kernel AKIs for 10.04 kernels.
   However, these AKIs will be only useful if you are not using or basing
   your images off the official images.

 * linux-image-2.6.32-312-ec2 [4] and linux-image-2.6.32-28-virtual [5]
   were updated to address dozens of bugs and 4 CVEs
   (CVE-2010-4165, CVE-2010-4169, CVE-2010-4249, CVE-2010-0435)
   A complete changelog can be seen at [6]

 * The following CVE are addressed
   * util-linux: CVE-2010-3879
   * dpkg: CVE-2010-1679
   * dbus: CVE-2010-4352
   * sudo: CVE-2011-0010
   * eglibc: CVE-2010-3856
   * fuse: CVE-2010-3879

If you are using a previous release, you should update in order to receive
the kernel change.  The kernel cannot be changed in previous 10.04 based
images by package upgrade.

The biggest single reason to upgrade your image is the ability to obtain
kernel upgrades in the future.

Other changes can be obtained via software update. The only cost is in
time to perform the update.

The following is a complete list of changes in the included packages.
For a list of changes to individual packages, see the package changelog.

    * mount bsdutils uuid-runtime util-linux libuuid1 libblkid1 updated
      (2.17.2-0ubuntu1 => 2.17.2-0ubuntu1.10.04.2)
    * dpkg updated (1.15.5.6ubuntu4.4 => 1.15.5.6ubuntu4.5)
    * linux-firmware updated (1.34.1 => 1.34.3)
    * ifupdown updated (0.6.8ubuntu29.1 => 0.6.8ubuntu29.2)
    * openssh-server openssh-client updated
      (1:5.3p1-3ubuntu4 => 1:5.3p1-3ubuntu5)
    * libdbus-1-3 dbus updated (1.2.16-2ubuntu4 => 1.2.16-2ubuntu4.1)
    * sudo updated (1.7.2p1-1ubuntu5.2 => 1.7.2p1-1ubuntu5.3)
    * plymouth-theme-ubuntu-text libplymouth2 plymouth updated
      (0.8.2-2ubuntu2.1 => 0.8.2-2ubuntu2.2)
    * grub-common grub-pc updated (1.98-1ubuntu9 => 1.98-1ubuntu10)
    * libc6-i686 libc-bin libc6 libc6-xen updated
      (2.11.1-0ubuntu7.6 => 2.11.1-0ubuntu7.8)
    * libfuse2 fuse-utils updated (2.8.1-1.1ubuntu2 => 2.8.1-1.1ubuntu2.2)
    * consolekit libck-connector0 libpam-ck-connector updated
      (0.4.1-3ubuntu1 => 0.4.1-3ubuntu2)
    * at updated (3.1.11-1ubuntu5 => 3.1.11-1ubuntu5.1)
    * libapparmor-perl apparmor libapparmor1 apparmor-utils updated
      (2.5.1-0ubuntu0.10.04.1 => 2.5.1-0ubuntu0.10.04.3)
    * base-files updated (5.0.0ubuntu20.10.04.2 => 5.0.0ubuntu20.10.04.3)
    * euca2ools updated (1.2-0ubuntu10 => 1.2-0ubuntu10.1)
    * linux-image-ec2 linux-ec2 updated (2.6.32.311.12 => 2.6.32.312.13)
    * upstart updated (0.6.5-7 => 0.6.5-8)
    * unattended-upgrades updated (0.55ubuntu4 => 0.55ubuntu5)
    * '-virtual' kernel updated
      (linux-image-2.6.32-27-virtual => linux-image-2.6.32-28-virtual)
    * '-ec2' kernel updated
      (linux-image-2.6.32-311-ec2 => linux-image-2.6.32-312-ec2)

- --
[1] http://uec-images.ubuntu.com/server/releases/lucid/release-20110201.1/
[2] http://uec-images.ubuntu.com/server/releases/lucid/release-20101228/
[3] http://aws.typepad.com/aws/2010/07/use-your-own-kernel-with-amazon-ec2.html
[4] https://launchpad.net/ubuntu/+source/linux-ec2
[5] https://launchpad.net/ubuntu/+source/linux
[6] http://changelogs.ubuntu.com/changelogs/pool/main/l/linux-ec2/linux-ec2_2.6.32-312.24/changelog
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
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=3VMD
-----END PGP SIGNATURE-----