A new release of the Ubuntu Cloud Images for stable Ubuntu release 12.04.1 LTS (Precise Pangolin) is available at [1]. These new images superseded the existing images [2]. Images are available for download or immediate use on EC2 via publish AMI ids. Users who wish to update their existing installations can do so with: 'apt-get update && sudo apt-get dist-upgrade && reboot'.
The Linux kernel was updated from 3.2.0-32.51 [3] to 3.2.0-35.55 [4]
The following packages have been updated. Please see the full changelogs
for a complete listing of changes:
* apparmor: 2.7.102-0ubuntu3.2 => 2.7.102-0ubuntu3.5
* apport: 2.0.1-0ubuntu14 => 2.0.1-0ubuntu15.1
* apt: 0.8.16~exp12ubuntu10.5 => 0.8.16~exp12ubuntu10.7
* aptitude: 0.6.6-1ubuntu1 => 0.6.6-1ubuntu1.1
* base-files: 6.5ubuntu6.2 => 6.5ubuntu6.4
* bind9: 1:9.8.1.dfsg.P1-4ubuntu0.4 => 1:9.8.1.dfsg.P1-4ubuntu0.5
* busybox: 1:1.18.5-1ubuntu4 => 1:1.18.5-1ubuntu4.1
* cloud-init: 0.6.3-0ubuntu1 => 0.6.3-0ubuntu1.1
* coreutils: 8.13-3ubuntu3.1 => 8.13-3ubuntu3.2
* libxml2: 2.7.8.dfsg-5.1ubuntu4.2 => 2.7.8.dfsg-5.1ubuntu4.3
* linux-meta: 3.2.0.32.35 => 3.2.0.35.40
* linux: 3.2.0-32.51 => 3.2.0-35.55
* perl: 5.14.2-6ubuntu2.1 => 5.14.2-6ubuntu2.2
* python-keyring: 0.7.1-1fakesync1 => 0.9.2-0ubuntu0.12.04.2
* udev: 175-0ubuntu9.1 => 175-0ubuntu9.2
CVE Updates:
* apt
- change permissions of /var/log/apt/term.log (CVE-2012-0961)
* bind9
- denial of service via DNS64 and crafted query (CVE-2012-5688)
* libxml2
- buffer underflow in xmlParseAttValueComplex (CVE-2012-5134)
* perl
- Heap overflow in "x" operator (CVE-2012-5195)
- CGI.pm improper cookie and p3p CRLF escaping (CVE-2012-5526)
--
[1] http://cloud-images.ubuntu.com/releases/precise/release-20121218/
[2] http://cloud-images.ubuntu.com/releases/precise/release-20121026.1/
[3]
http://changelogs.ubuntu.com/changelogs/pool/main/l/linux/linux_3.2.0-32.51/changelog
[4]
http://changelogs.ubuntu.com/changelogs/pool/main/l/linux/linux_3.2.0-35.55/changelog
--
Ben Howard
[email protected]
Canonical
GPG ID 0x5406A866
signature.asc
Description: OpenPGP digital signature
-- Ubuntu-cloud mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-cloud
