[ubuntu-cloud] daily build or release AMI for kernal CVE?

Peter Wolanin peter.wolanin at acquia.com
Fri Jun 6 16:14:55 UTC 2014


This exploit seems serious enough we are immediately upgrading all
customer-accessible servers:
http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-3153.html

However, we'd like to avoid having to do the extra upgrade step when we
launch new EC2 instances.

Looking though: http://cloud-images.ubuntu.com/lucid/  and
http://cloud-images.ubuntu.com/precise/

and http://cloud-images.ubuntu.com/releases/10.04/ and
http://cloud-images.ubuntu.com/releases/precise/

it seems like there are no AMIs yet with the new kernel:

patched kernel version for precise 3.2.0-64.97
and seems for lucid it should be: 2.6.32-365.79

When can we look for AMIs with those patched kernels as daily or release
builds?

Thanks,

-Peter Wolanin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-cloud/attachments/20140606/955350fc/attachment.html>


More information about the Ubuntu-cloud mailing list