[ubuntu-cloud] daily build or release AMI for kernal CVE?

[Peter Wolanin]

Ben,

Thank you for the update.

I guess they are in progress since some information now shows, e.g.:
http://cloud-images.ubuntu.com/lucid/20140606/

-Peter




On Fri, Jun 6, 2014 at 5:01 PM, Ben Howard <ben.howard at canonical.com> wrote:

>  Hi Peter,
>
> I am currently building new images -- starting with 12.04 and 14.04, with
> 10.04 due out later this weekend. The dailies should be available in the
> next few hours with release late tonight and into tomorrow.
>
> Thanks,
> Ben
>
>
> On 06/06/2014 10:14 AM, Peter Wolanin wrote:
>
>
>  This exploit seems serious enough we are immediately upgrading all
> customer-accessible servers:
> http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-3153.html
>
>  However, we'd like to avoid having to do the extra upgrade step when we
> launch new EC2 instances.
>
>  Looking though: http://cloud-images.ubuntu.com/lucid/  and
> http://cloud-images.ubuntu.com/precise/
>
>  and http://cloud-images.ubuntu.com/releases/10.04/ and
> http://cloud-images.ubuntu.com/releases/precise/
>
>  it seems like there are no AMIs yet with the new kernel:
>
> patched kernel version for precise 3.2.0-64.97
> and seems for lucid it should be: 2.6.32-365.79
>
> When can we look for AMIs with those patched kernels as daily or release
> builds?
>
> Thanks,
>
> -Peter Wolanin
>
>
>
> --
>
>
> Ben Howardben.howard at canonical.com
> Canonical
> GPG ID 0x5406A866
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-cloud/attachments/20140606/4d1091aa/attachment.html>