Many of our Cloud Image users have inquired about the availability of updated Ubuntu Cloud Images in response to the Heartbleed OpenSSL Vulnerability [1]. Ubuntu released update Ubuntu packages for OpenSSL yesterday, 08 April 2014 [2]. Due to the exceptional circumstances and severity of the Heartbleed OpenSSL bug, Canonical has released new 12.04.4 LTS images at [3]. In the coming days, new Cloud Images for Ubuntu 12.10 and Ubuntu 13.10 will be released.
Canonical is working with Amazon to get the Quickstart and the AWS Marketplace links updated. In the meantime, you can find new AMI ID's for 12.04.4 LTS at [3] and [4]. Also, the snapshot's for Amazon have the volume-create permission granted on the latest images. Windows Azure [5], Joyent [6] and HP [7, 8, 9] all have updated 12.04.4 LTS images in their respective galleries. If you are running an affected version of OpenSSL on 12.04 LTS, 12.10 or 13.10, you are strongly encouraged to update. For new instances, it is recommended to either use an image with a serial newer than 20140408, or update your OpenSSL package immediately upon launch. Finally, if you need documentation on enabling unattended upgrades, please see [10]. Thanks, Ben [1] https://www.openssl.org/news/secadv_20140407.txt [2] http://www.ubuntu.com/usn/usn-2165-1/ [3] http://cloud-images.ubuntu.com/releases/precise/release-20140408/ [4] http://cloud-images.ubuntu.com/locator/ec2/ [5] Azure: Ubuntu-12_04_4-LTS-amd64-server-20140408-en-us-30GB [6] Joyent Image "ubuntu-certified-12.04", fe5aa6c0-0f09-4b1f-9bad-83e453bb74f3 [7] HP US-West-1: 27be722e-d2d0-44f0-bebe-471c4af76039 [8] HP US-East-1: 8672f4c6-e33d-46f5-b6d8-ebbeba12fa02 [9] Waiting on HP for replication to legacy regions az-{1,2,3} [10] https://help.ubuntu.com/community/AutomaticSecurityUpdates -- Ben Howard [email protected] Canonical GPG ID 0x5406A866
signature.asc
Description: OpenPGP digital signature
-- Ubuntu-cloud mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-cloud
