[ubuntu-cloud] daily build or release AMI for kernal CVE?

[Ben Howard]

Hi Peter,

I am currently building new images -- starting with 12.04 and 14.04,
with 10.04 due out later this weekend. The dailies should be available
in the next few hours with release late tonight and into tomorrow.

Thanks,
Ben

On 06/06/2014 10:14 AM, Peter Wolanin wrote:
>
> This exploit seems serious enough we are immediately upgrading all
> customer-accessible
> servers: http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-3153.html
> <http://people.canonical.com/%7Eubuntu-security/cve/2014/CVE-2014-3153.html>
>
> However, we'd like to avoid having to do the extra upgrade step when
> we launch new EC2 instances.
>
> Looking though: http://cloud-images.ubuntu.com/lucid/
>  and http://cloud-images.ubuntu.com/precise/
>
> and http://cloud-images.ubuntu.com/releases/10.04/
> and http://cloud-images.ubuntu.com/releases/precise/
>
> it seems like there are no AMIs yet with the new kernel:
>
> patched kernel version for precise 3.2.0-64.97
> and seems for lucid it should be: 2.6.32-365.79
>
> When can we look for AMIs with those patched kernels as daily or
> release builds?
>
> Thanks,
>
> -Peter Wolanin
>
>
>

-- 


Ben Howard
ben.howard at canonical.com
Canonical
GPG ID 0x5406A866


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-cloud/attachments/20140606/9f0fc31b/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-cloud/attachments/20140606/9f0fc31b/attachment.pgp>