[ubuntu-cloud] Refreshed Cloud Images of 12.04.1 LTS (Precise Pangolin) [20121001]

[Ben Howard]

Correction: The process for manually configuring the recordfail time out
omitted a command. The correct process is:

    echo "GRUB_RECORDFAIL_TIMEOUT=5" | sudo tee -a /etc/grub/default
    sudo update-grub
    dpkg-reconfigure grub-pc


On 10/02/2012 11:09 AM, Ben Howard wrote:
> A new release of the Ubuntu Cloud Images for stable Ubuntu release
> 12.04.1 LTS (Precise Pangolin) is available at [1]. These new images
> superseded the existing images [2]. Images are available for download or
> immediate use on EC2 via publish AMI ids. Users who wish to update their
> existing installations can do so with:
>    'apt-get update && sudo apt-get dist-upgrade && reboot'.
>
> The Linux kernel was updated from 3.2.0-29.46 [3] to 3.2.0-31.50 [4]
>
> One notable change is the "recordfail" timeout for Grub2 is now
> parameterizable. The recordfail setting dictates how long the Grub
> prompt will wait for user input after a failed boot; the primary purpose
> of this setting is to prevent reboot loops caused a kernel upgrade
> failure. However, this setting has caused problems with fully-virtual
> remote instances and appliances where the Grub console is not available
> when an instance fails to boot due to power-failures or when an instance
> is terminated before boot completes. This behavior change only affects
> instances which boot via Grub2 (i.e. KVM, OpenStack and EC2 HVM Cluster
> Computer instances) and does _not_ affect EC2 instance-store or EBS
> instance types. See [5, 6]. 
>
> After applying updates, any user of Ubuntu 12.04.1 LTS and the
> development version can set the recordfail setting by running (replace
> the '5' with the desired timeout in seconds):
>     echo "GRUB_RECORDFAIL_TIMEOUT=5" | sudo tee -a /etc/grub/default
>     sudo update-grub

  dpkg-reconfigure grub-pc

>
> The following packages have been updated. Please see the full changelogs
> for a complete listing of changes:
>  * apport: 2.0.1-0ubuntu12 => 2.0.1-0ubuntu13
>  * apt: 0.8.16~exp12ubuntu10.2 => 0.8.16~exp12ubuntu10.3
>  * bind9: 1:9.8.1.dfsg.P1-4ubuntu0.2 => 1:9.8.1.dfsg.P1-4ubuntu0.3
>  * dbus: 1.4.18-1ubuntu1 => 1.4.18-1ubuntu1.1
>  * gnupg: 1.4.11-3ubuntu2 => 1.4.11-3ubuntu2.1
>  * grub2: 1.99-21ubuntu3.1 => 1.99-21ubuntu3.4
>  * isc-dhcp: 4.1.ESV-R4-0ubuntu5.2 => 4.1.ESV-R4-0ubuntu5.5
>  * libgc: 1:7.1-8build1 => 1:7.1-8ubuntu0.12.04.1
>  * libxml2: 2.7.8.dfsg-5.1ubuntu4.1 => 2.7.8.dfsg-5.1ubuntu4.2
>  * linux-firmware: 1.79 => 1.79.1
>  * linux-meta: 3.2.0.29.31 => 3.2.0.31.34
>  * linux: 3.2.0-29.46 => 3.2.0-31.50
>  * openssl: 1.0.1-4ubuntu5.3 => 1.0.1-4ubuntu5.5
>  * resolvconf: 1.63ubuntu15 => 1.63ubuntu16
>  * tzdata: 2012e-0ubuntu0.12.04 => 2012e-0ubuntu0.12.04.1
>  * ubuntu-keyring: 2011.11.21 => 2011.11.21.1
>
> CVE Updates:
>  * bind9
>     - denial of service via large crafted resource record (CVE-2012-4244)
>  * dbus
>     - privilege escalation via unsanitized environment (CVE-2012-3524)
>  * isc-dhcp
>     - denial of service via ipv6 lease expiration time reduction
> (CVE-2012-3955)
>  * libgc
>     - multiple integer overflows (CVE-2012-2673)
>  * libxml2
>      - denial of service and possible code execution (CVE-2012-2807)
>
>
> --
> [1] http://cloud-images.ubuntu.com/releases/precise/release-20121001/
> [2] http://cloud-images.ubuntu.com/releases/precise/release-20120822/
> [3]
> http://changelogs.ubuntu.com/changelogs/pool/main/l/linux/linux_3.2.0-29.46/changelog
> [4]
> http://changelogs.ubuntu.com/changelogs/pool/main/l/linux/linux_3.2.0-31.50/changelog
> [5] https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/669481
> [6]
> http://changelogs.ubuntu.com/changelogs/pool/main/g/grub2/grub2_1.99-21ubuntu3.4/changelog
>

-- 


Ben Howard
ben.howard at canonical.com
Canonical
GPG ID 0x5406A866



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-cloud/attachments/20121003/02081198/attachment.pgp>