<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Hi Peter,<br>
<br>
I am currently building new images -- starting with 12.04 and 14.04,
with 10.04 due out later this weekend. The dailies should be
available in the next few hours with release late tonight and into
tomorrow. <br>
<br>
Thanks,<br>
Ben<br>
<br>
<div class="moz-cite-prefix">On 06/06/2014 10:14 AM, Peter Wolanin
wrote:<br>
</div>
<blockquote
cite="mid:CAH0thKDKVD3Z2=qU-pZhvTUhFa5G82VtT4rBj5OmA5iULOdDtQ@mail.gmail.com"
type="cite">
<div dir="ltr"><font face="arial, helvetica, sans-serif"><br
clear="all">
</font>
<div><font face="arial, helvetica, sans-serif">This exploit
seems serious enough we are immediately upgrading all
customer-accessible servers: <a moz-do-not-send="true"
href="http://people.canonical.com/%7Eubuntu-security/cve/2014/CVE-2014-3153.html">http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-3153.html</a></font></div>
<div><font face="arial, helvetica, sans-serif"><br>
</font></div>
<div><font face="arial, helvetica, sans-serif">However, we'd
like to avoid having to do the extra upgrade step when we
launch new EC2 instances.</font></div>
<div><font face="arial, helvetica, sans-serif"><br>
</font></div>
<div><font face="arial, helvetica, sans-serif">Looking though: <a
moz-do-not-send="true"
href="http://cloud-images.ubuntu.com/lucid/">http://cloud-images.ubuntu.com/lucid/</a>
and <a moz-do-not-send="true"
href="http://cloud-images.ubuntu.com/precise/">http://cloud-images.ubuntu.com/precise/</a></font></div>
<div><font face="arial, helvetica, sans-serif"><br>
</font></div>
<div><font face="arial, helvetica, sans-serif">and <a
moz-do-not-send="true"
href="http://cloud-images.ubuntu.com/releases/10.04/">http://cloud-images.ubuntu.com/releases/10.04/</a>
and <a moz-do-not-send="true"
href="http://cloud-images.ubuntu.com/releases/precise/">http://cloud-images.ubuntu.com/releases/precise/</a></font></div>
<div><font face="arial, helvetica, sans-serif"><br>
</font></div>
<div>
<p
style="margin-right:0px;margin-bottom:15px;margin-left:0px;color:rgb(51,51,51);line-height:23.799999237060547px;margin-top:0px!important"><font
face="arial, helvetica, sans-serif">it seems like there
are no AMIs yet with the new kernel:</font></p>
<p
style="margin-top:15px;margin-right:0px;margin-left:0px;color:rgb(51,51,51);line-height:23.799999237060547px;margin-bottom:0px!important"><font
face="arial, helvetica, sans-serif">patched kernel version
for precise 3.2.0-64.97<br>
and seems for lucid it should be: 2.6.32-365.79</font></p>
<p
style="margin-top:15px;margin-right:0px;margin-left:0px;color:rgb(51,51,51);line-height:23.799999237060547px;margin-bottom:0px!important">When
can we look for AMIs with those patched kernels as daily or
release builds?</p>
<p
style="margin-top:15px;margin-right:0px;margin-left:0px;color:rgb(51,51,51);line-height:23.799999237060547px;margin-bottom:0px!important">Thanks,</p>
<p
style="margin-top:15px;margin-right:0px;margin-left:0px;color:rgb(51,51,51);line-height:23.799999237060547px;margin-bottom:0px!important">-Peter
Wolanin</p>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Ben Howard
<a class="moz-txt-link-abbreviated" href="mailto:ben.howard@canonical.com">ben.howard@canonical.com</a>
Canonical
GPG ID 0x5406A866
</pre>
</body>
</html>