A new release of the Ubuntu Cloud Images for stable Ubuntu release 18.04 LTS (Bionic Beaver) is available at [1]. These new images superseded the existing images [2]. Images are available for download or immediate use on EC2 via publish AMI ids. Users who wish to update their existing installations can do so with: 'sudo apt-get update && sudo apt-get dist-upgrade && sudo reboot'. The following packages have been updated. Please see the full changelogs for a complete listing of changes: * apt: 1.6.12ubuntu0.1 => 1.6.12ubuntu0.2 * linux-meta: 4.15.0.20.23 => 4.15.0.124.111 * linux-signed: 4.15.0-20.21 => 4.15.0-124.127 * python-apt: 1.6.5ubuntu0.3 => 1.6.5ubuntu0.4 The following is a complete changelog for this image. new: {'linux-modules-4.15.0-124-generic': '4.15.0-124.127', 'linux-headers-4.15.0-124': '4.15.0-124.127', 'linux-headers-4.15.0-124-generic': '4.15.0-124.127'} removed: {'linux-modules-4.15.0-20-generic': '4.15.0-20.21', 'linux-headers-4.15.0-20-generic': '4.15.0-20.21', 'linux-headers-4.15.0-20': '4.15.0-20.21'} changed: ['apt', 'apt-utils', 'libapt-inst2.0:amd64', 'libapt-pkg5.0:amd64', 'linux-headers-generic', 'linux-headers-virtual', 'linux-image-4.15.0-124-generic', 'linux-image-virtual', 'linux-virtual', 'python-apt-common', 'python3-apt'] new snaps: {} removed snaps: {} changed snaps: [] ==== apt: 1.6.12ubuntu0.1 => 1.6.12ubuntu0.2 ==== ==== apt apt-utils libapt-inst2.0:amd64 libapt-pkg5.0:amd64 * SECURITY UPDATE: Integer overflow in parsing (LP: #1899193) - apt-pkg/contrib/arfile.cc: add extra checks. - apt-pkg/contrib/tarfile.cc: limit tar item sizes to 128 GiB - apt-pkg/deb/debfile.cc: limit control file sizes to 64 MiB - test/*: add tests. - CVE-2020-27350 * Additional hardening: - apt-pkg/contrib/tarfile.cc: Limit size of long names and links to 1 MiB ==== linux-meta: 4.15.0.20.23 => 4.15.0.124.111 ==== ==== linux-headers-generic linux-headers-virtual linux-image-virtual linux-virtual * Bump ABI 4.15.0-124 * Packaging resync (LP: #1786013) - [Packaging] resync debian/dkms-versions from main package * Bump ABI 4.15.0-123 * Bump ABI 4.15.0-122 * Bump ABI 4.15.0-121 * Packaging resync (LP: #1786013) - [Packaging] resync debian/dkms-versions from main package * Bump ABI 4.15.0-120 * Bump ABI 4.15.0-119 * Bump ABI 4.15.0-118 * Packaging resync (LP: #1786013) - [Packaging] resync debian/dkms-versions from main package * Miscellaneous Ubuntu changes - Ubuntu-4.15.0.116.104 * Miscellaneous upstream changes - Merge tag 'Ubuntu-4.15.0.116.104' into master * Bump ABI 4.15.0-117 * Bump ABI 4.15.0-115 * Bump ABI 4.15.0-114 * Bump ABI 4.15.0-113 * Packaging resync (LP: #1786013) - [Packaging] resync debian/dkms-versions from main package * Bump ABI 4.15.0-112 * Packaging resync (LP: #1786013) - [Packaging] resync debian/dkms-versions from main package * Bump ABI 4.15.0-111 * Packaging resync (LP: #1786013) - [Packaging] resync debian/dkms-versions from main package * Bump ABI 4.15.0-110 * Packaging resync (LP: #1786013) - [Packaging] resync debian/dkms-versions from main package * Bump ABI 4.15.0-109 * Packaging resync (LP: #1786013) - [Packaging] resync debian/dkms-versions from main package * Build and ship a signed wireguard.ko (LP: #1861284) - [Packaging] update-version -- add dkms-versions data to sync list - [Packaging] expose versioned provides for contained dkms binaries * Bump ABI 4.15.0-108 * Bump ABI 4.15.0-107 * Bump ABI 4.15.0-106 * Bump ABI 4.15.0-103 * Bump ABI 4.15.0-102 * Bump ABI 4.15.0-101 * Bump ABI 4.15.0-100 * Miscellaneous upstream changes - Merge tag 'Ubuntu-4.15.0.99.89' into master * Bump ABI 4.15.0-99 * Bump ABI 4.15.0-98 * Bump ABI 4.15.0-97 * Bump ABI 4.15.0-96 * Bump ABI 4.15.0-95 * Bump ABI 4.15.0-94 * Bump ABI 4.15.0-93 * Bump ABI 4.15.0-92 * Bump ABI 4.15.0-91 * Bump ABI 4.15.0-90 * Bump ABI 4.15.0-89 * Bump ABI 4.15.0-88 * Packaging resync (LP: #1786013) - [Packaging] resync git-ubuntu-log * Bump ABI 4.15.0-87 * Bump ABI 4.15.0-76 * Bump ABI 4.15.0-75 * Bump ABI 4.15.0-74 * Bump ABI 4.15.0-73 * Bump ABI 4.15.0-72 * Bump ABI 4.15.0-71 * Bump ABI 4.15.0-70 * Bump ABI 4.15.0-69 * Bump ABI 4.15.0-68 * Bump ABI 4.15.0-67 * Bump ABI 4.15.0-66 * Bump ABI 4.15.0-65 * Bump ABI 4.15.0-64 * Bump ABI 4.15.0-63 * Bump ABI 4.15.0-62 * Bump ABI 4.15.0-61 * Bump ABI 4.15.0-60 * Bump ABI 4.15.0-59 * Bump ABI 4.15.0-58 * Bump ABI 4.15.0-57 * Bump ABI 4.15.0-56 * Bump ABI 4.15.0-55 * Bump ABI 4.15.0-54 * Bump ABI 4.15.0-53 * Bump ABI 4.15.0-52 * Bump ABI 4.15.0-51 * Bump ABI 4.15.0-50 * Bump ABI 4.15.0-49 * bionic: fork out linux-snapdragon into its own topic kernel (LP: #1820868) - remove snapdragon meta packages * Bump ABI 4.15.0-48 * Bump ABI 4.15.0-47 * Bump ABI 4.15.0-46 * Bump ABI 4.15.0-45 * Bump ABI 4.15.0-44 * Bump ABI 4.15.0-43 * Bump ABI 4.15.0-42 * Bump ABI 4.15.0-41 * Bump ABI 4.15.0-40 * Bump ABI 4.15.0-39 * Bump ABI 4.15.0-38 * Bump ABI 4.15.0-37 * Bump ABI 4.15.0-36 * Bump ABI 4.15.0-35 * Bump ABI 4.15.0-34 * Bump ABI 4.15.0-33 * Bump ABI 4.15.0-32 * Bump ABI 4.15.0-31 * Bump ABI 4.15.0-30 * Bump ABI 4.15.0-29 * Bump ABI 4.15.0-28 * Bump ABI 4.15.0-27 * Bump ABI 4.15.0-26 * Bump ABI 4.15.0-25 * Bump ABI 4.15.0-24 * linux-crashdump isn't built for arm64 (LP: #1773407) - Generate linux-crashdump metapackage for arm64 * Need to ensure microcode updates are available to all bare-metal installs of Ubuntu (LP: #1738259) - Make kernel image packages depend on cpu microcode updates * Bump ABI 4.15.0-23 * Bump ABI 4.15.0-22 * Bump ABI 4.15.0-21 * Bump ABI 4.15.0-20 * Bump ABI 4.15.0-19 * Bump ABI 4.15.0-18 * signing: only install a signed kernel (LP: #1764794) - switch to linux-image as signed when available - convert linux-signed* into transitional packages * Bump ABI 4.15.0-17 * Merge the linux-snapdragon kernel into bionic master/snapdragon (LP: #1763040) - Add snapdragon meta packages * Bump ABI 4.15.0-16 * Bump ABI 4.15.0-15 * Bump ABI 4.15.0-14 * Miscellaneous Ubuntu changes - add 16.04 to 18.04 transitional packages for hwe and hwe-edge * Bump ABI 4.15.0-13 * Bump ABI 4.15.0-12 * Bump ABI 4.15.0-11 * Bump ABI 4.15.0-10 * Bump ABI 4.15.0-9 * Bump ABI 4.15.0-8 * Bump ABI 4.15.0-7 * Bump ABI 4.15.0-6 * Bump ABI 4.15.0-5 * Bump ABI 4.15.0-4 * Bump ABI 4.15.0-3 * Bump ABI 4.15.0-2 * Bump ABI 4.15.0-1 * Bump ABI 4.15.0-0 * Bump ABI 4.14.0-11 * Bump ABI 4.14.0-10 * Bump ABI 4.14.0-9 * Bump ABI 4.14.0-8 * Bump ABI 4.14.0-7 * Bump ABI 4.14.0-6 * Bump ABI 4.14.0-5 * Bump ABI 4.14.0-4 * Bump ABI 4.14.0-3 * Bump ABI 4.14.0-2 * Bump ABI 4.14.0-1 * Bump ABI 4.14.0-0 * Bump ABI 4.13.0-11 * Bump ABI 4.13.0-10 * Bump ABI 4.13.0-9 * Bump ABI 4.13.0-8 * Bump ABI 4.13.0-7 * Bump ABI 4.13.0-6 * Bump ABI 4.13.0-5 * Bump ABI 4.13.0-4 * Bump ABI 4.13.0-3 * Bump ABI 4.13.0-2 * Bump ABI 4.13.0-1 * Bump ABI 4.13.0-0 * Bump ABI 4.12.0-7 * Bump ABI 4.12.0-6 * Bump ABI 4.12.0-5 * Bump ABI 4.12.0-4 * Bump ABI 4.12.0-3 * Bump ABI 4.12.0-2 * Bump ABI 4.12.0-1 * Bump ABI 4.12.0-0 * Bump ABI 4.11.0-3 * Bump ABI 4.11.0-2 * Bump ABI 4.11.0-1 * Empty stanza * Bump ABI 4.10.0-20 * Bump ABI 4.10.0-19 * Bump ABI 4.10.0-18 * Bump ABI 4.10.0-17 * Bump ABI 4.10.0-16 * Bump ABI 4.10.0-15 * Bump ABI 4.10.0-14 * Bump ABI 4.10.0-13 * Bump ABI 4.10.0-12 * Bump ABI 4.10.0-11 * Bump ABI 4.10.0-10 * Bump ABI 4.10.0-9 * Restored powerpc. * Bump ABI 4.10.0-8 * Bump ABI 4.10.0-7 * Bump ABI 4.10.0-6 * Bump ABI 4.10.0-5 * Miscellaneous Ubuntu changes - Drop powerpc flavors * Bump ABI 4.10.0-4 * Bump ABI 4.10.0-3 * Bump ABI 4.10.0-2 * Bump ABI 4.10.0-1 * Bump ABI 4.10.0-0 * Bump ABI 4.9.0-11 * Fixed the kernel FTBS, so reenable powerpc64-emb * Bump ABI 4.9.0-10 * Bump ABI 4.9.0-9 * Bump ABI 4.9.0-8 * Bump ABI 4.9.0-7 * Bump ABI 4.9.0-6 * Bump ABI 4.9.0-5 * Bump ABI 4.9.0-4 * UBUNTU: Drop powerpc64-emb pending build fixes * Dropped transitionals * Bump ABI 4.9.0-3 * Bump ABI 4.9.0-2 * Bump ABI 4.9.0-1 * Bump ABI 4.9.0-0 * Empty stanza * Bump ABI 4.8.0-27 * Bump ABI 4.8.0-26 * Bump ABI 4.8.0-25 * Bump ABI 4.8.0-24 * Bump ABI 4.8.0-23 * Bump ABI 4.8.0-22 * Bump ABI 4.8.0-21 * Bump ABI 4.8.0-20 * Bump ABI 4.8.0-19 * Bump ABI 4.8.0-17 * linux-virtual flavour missing for arm64 in yakkety (LP: #1626868) - arm64 -- add virtual flavour * Bump ABI 4.8.0-16 * Bump ABI 4.8.0-15 * Bump ABI 4.8.0-14 * Bump ABI 4.8.0-13 * Bump ABI 4.8.0-12 * Bump ABI 4.8.0-11 * Miscellaneous Ubuntu changes - armhf does not have -extra split * Miscellaneous Ubuntu changes - arm64 -generic flavour has -extra split * Bump ABI 4.8.0-10 * Bump ABI 4.8.0-9 * Bump ABI 4.8.0-8 * Bump ABI 4.8.0-8 * Bump ABI 4.8.0-7 * Bump ABI 4.8.0-5 * Bump ABI 4.8.0-4 * Bump ABI 4.8.0-3 * Bump ABI 4.8.0-2 * Fix the powerpc64-smp -> generic transition and add virtual. * Update to Standards-Version 3.9.8, and fix-ups where needed. * Bump ABI 4.6.0-10 * ensure all items are included in changelog and standardise packaging (LP: #1601954) - simplify meta package packaging - add git-ubuntu-log for changelog formatting - add update-version to simplify updates * switch powerpc flavour from -powerpc-smp to -generic. * drop LTS transtional packages. * build-arch and build-indep are now manditory targets (LP: #1603504) * linux ABI 4.6.0-9 * linux ABI 4.6.0-8 * linux ABI 4.6.0-7 * linux ABI 4.6.0-6 * linux ABI 4.4.0-20 * linux ABI 4.4.0-19 * linux ABI 4.4.0-18 * linux ABI 4.4.0-17 * add linux-crashdump to s390x and armhf. (LP: #1560015) * linux ABI 4.4.0-16 * linux ABI 4.4.0-15 * linux ABI 4.4.0-14 * linux ABI 4.4.0-13 * linux ABI 4.4.0-12 * Build-Depends: on the common headers to ensure we wait for _all to build * linux ABI 4.4.0-11 * linux ABI 4.4.0-10 * linux ABI 4.4.0-9 * linux ABI 4.4.0-8 * linux ABI 4.4.0-7 * Drop linux-cloud-tools-virtual for ppc64el and s390x as we actually do not generate those currently. * virtual: add linux-tools-virtual, linux-cloud-tools-virtual, and linux-image-extra-virtual linkage for ppc64el and s390x. * transitional packages: drop updates for transitional which were uninstallable in Trusty and have no candidates in Xenial. [ Andy Whitcroft ] * Add 14.04 to 16.04 transitional packages (LP: #1526931): - add packages for the HWE auto upgrade packages. - add packages for all of the lts backport packages. [ Tim Gardner ] * linux ABI 4.4.0-6 * * linux ABI 4.4.0-5 * linux ABI 4.4.0-4 * ensure we rebuild debian/control on clean * linux ABI 4.4.0-3 * linux ABI 4.4.0-2 * linux ABI 4.4.0-1 * s390x: add s390x to -generic and -virtual. * s390x: add s390x to build dependancies to hold off testing. * linux ABI 4.4.0-0 * linux ABI 4.3.0-0 * linux ABI 4.2.0-17 * Revert temporary addition of virtualbox-guest-modules [i386 amd64 x32] provides. (LP: #1507588) * temporarily add virtualbox-guest-modules [i386 amd64 x32] provides to fix vbox installs. (See LP: 1507588) * linux ABI 4.2.0-16 * linux ABI 4.2.0-15 * linux ABI 4.2.0-14 * Makefile: ignore dependencies when building the package * move linux-signed linux-image-extra-* dependencies over to linux-meta. (LP: #1501235) * linux ABI 4.2.0-13 * add linux-signed-lowlatency packages. (LP: #1500910) * linux ABI 4.2.0-12 * linux ABI 4.2.0-11 * linux ABI 4.2.0-10 * linux ABI 4.2.0-9 * linux ABI 4.2.0-8 * linux ABI 4.2.0-7 * linux ABI 4.2.0-6 * linux ABI 4.2.0-5 * * linux ABI 4.2.0-4 * linux ABI 4.2.0-3 * linux ABI 4.1.0-3 * linux ABI 4.1.0-2 * linux ABI 4.1.0-1 * fix up Vcs-Git: to point to launchpad * linux ABI 4.0.0-4 * linux ABI 4.0.0-3 * linux ABI 4.0.0-2 * Fixes ppc64el build failure, add OverlayFS V1 support. * linux ABI 4.0.0-1 * linux ABI 3.19.0-22 * linux ABI 3.19.0-21 * linux ABI 3.19.0-20 * linux ABI 3.19.0-19 * linux ABI 3.19.0-18 * linux ABI 3.29.0-17 * linux ABI 3.29.0-16 * linux ABI 3.29.0-15 [ Andy Whitcroft ] * future proof VCS links [ Andy Whitcroft ] * rejig so we correctly link to our own packages * make the meta-source trivially backportable * linux ABI 3.29.0-12 * linux ABI 3.19.0-11 * linux ABI 3.19.0-10 * linux ABI 3.19.0-9 * linux ABI 3.19.0-8 * linux ABI 3.19.0-7 * linux ABI 3.19.0-6 * linux ABI 3.19.0-5 * linux ABI 3.19.0-4 [ Kamal Mostafa ] * [Packaging] force "dpkg-source -I -i" behavior [ Andy Whitcroft] * linux ABI 3.19.0-3 * linux ABI 3.19.0-2 * linux ABI 3.18.0-14 * linux ABI 3.18.0-13 * linux ABI 3.18.0-12 [ Kamal Mostafa ] * [Packaging] force "dpkg-source -I -i" behavior [ Leann Ogasawara ] * linux ABI 3.18.0-11 * linux ABI 3.18.0-10 * linux ABI 3.18.0-9 * linux ABI 3.18.0-8 * linux ABI 3.18.0-7 * linux ABI 3.18.0-6 * linux ABI 3.18.0-5 * linux ABI 3.18.0-4 * linux ABI 3.18.0-3 * linux ABI 3.18.0-2 [ Andy Whitcroft ] * downgrade thermald to a Recommends: so that it can be removed when it is not needed. (LP: #1387144) * linux ABI 3.18.0-1 ==== linux-signed: 4.15.0-20.21 => 4.15.0-124.127 ==== ==== linux-image-4.15.0-124-generic * Master version: 4.15.0-124.127 * Master version: 4.15.0-123.126 * Master version: 4.15.0-122.124 * Master version: 4.15.0-121.123 * Master version: 4.15.0-120.122 * Master version: 4.15.0-119.120 * Master version: 4.15.0-118.119 * Miscellaneous Ubuntu changes - Ubuntu-4.15.0-116.117 * Miscellaneous upstream changes - Merge tag 'Ubuntu-4.15.0-116.117' into master * Master version: 4.15.0-117.118 * Master version: 4.15.0-115.116 * Master version: 4.15.0-114.115 * Master version: 4.15.0-113.114 * Master version: 4.15.0-112.113 * Master version: 4.15.0-111.112 * Master version: 4.15.0-110.111 * Master version: 4.15.0-109.110 * Master version: 4.15.0-108.109 * Master version: 4.15.0-107.108 * Master version: 4.15.0-106.107 * Master version: 4.15.0-103.104 * Master version: 4.15.0-102.103 * Master version: 4.15.0-101.102 * Master version: 4.15.0-100.101 * Miscellaneous upstream changes - Merge tag 'Ubuntu-4.15.0-99.100' into master * Master version: 4.15.0-99.100 * Master version: 4.15.0-98.99 * Master version: 4.15.0-97.98 * Master version: 4.15.0-96.97 * Master version: 4.15.0-95.96 * Master version: 4.15.0-94.95 * Master version: 4.15.0-93.94 * Master version: 4.15.0-92.93 * Master version: 4.15.0-91.92 * Master version: 4.15.0-90.91 * Bump upload number. * Master version: 4.15.0-90.90 * Master version: 4.15.0-89.89 * Master version: 4.15.0-88.88 * Packaging resync (LP: #1786013) - [Packaging] resync debian/templates - [Packaging] resync git-ubuntu-log * Master version: 4.15.0-87.87 * Master version: 4.15.0-76.86 * Master version: 4.15.0-75.85 * Master version: 4.15.0-74.84 * Master version: 4.15.0-74.83 * Master version: 4.15.0-73.82 * Master version: 4.15.0-72.81 * Master version: 4.15.0-71.80 * Master version: 4.15.0-70.79 * Master version: 4.15.0-69.78 * Master version: 4.15.0-68.77 * Master version: 4.15.0-67.76 * Master version: 4.15.0-66.75 * vmlinuz is world-readable (LP: #1843327) - fix vmlinuz-* permissions for opal signed kernels * Master version: 4.15.0-65.74 * Master version: 4.15.0-64.73 * Master version: 4.15.0-63.72 * Master version: 4.15.0-63.71 * Master version: 4.15.0-63.70 * Master version: 4.15.0-62.69 * Master version: 4.15.0-61.68 * Master version: 4.15.0-60.67 * Master version: 4.15.0-59.66 * Master version: 4.15.0-59.65 * Master version: 4.15.0-58.64 * Master version: 4.15.0-57.63 * Master version: 4.15.0-56.62 * Master version: 4.15.0-55.60 * Master version: 4.15.0-55.59 * Master version: 4.15.0-54.58 * Master version: 4.15.0-53.57 * Master version: 4.15.0-52.56 * Master version: 4.15.0-51.55 * Built-Using incorrect (LP: #1824016) - Rename "VERSION" template string to more precise "UNSIGNED_SRC_VERSION" - Use the correct source package name in Built-Using field * Master version: 4.15.0-50.54 * Master version: 4.15.0-49.53 * Master version: 4.15.0-49.52 * Master version: 4.15.0-48.51 * Master version: 4.15.0-47.50 * Master version: 4.15.0-46.49 * Miscellaneous Ubuntu changes - [Packaging] download-signed -- fix downloader component and handle versions correctly * Master version: 4.15.0-45.48 * Master version: 4.15.0-44.47 * Master version: 4.15.0-43.46 * Master version: 4.15.0-42.45 * Master version: 4.15.0-41.44 * Master version: 4.15.0-40.43 * Master version: 4.15.0-39.42 * Master version: 4.15.0-38.41 * Master version: 4.15.0-37.40 * Master version: 4.15.0-36.39 * Master version: 4.15.0-35.38 * Master version: 4.15.0-34.37 * Master version: 4.15.0-33.36 * Master version: 4.15.0-32.35 * Master version: 4.15.0-31.33 * Master version: 4.15.0-30.32 * Master version: 4.15.0-29.31 * Master version: 4.15.0-28.30 * Master version: 4.15.0-27.29 * Master version: 4.15.0-26.28 * Master version: 4.15.0-25.27 * Master version: 4.15.0-24.26 * Master version: 4.15.0-23.25 * Master version: 4.15.0-22.24 * Master version: 4.15.0-21.22 ==== python-apt: 1.6.5ubuntu0.3 => 1.6.5ubuntu0.4 ==== ==== python-apt-common python3-apt * SECURITY UPDATE: various memory and file descriptor leaks (LP: #1899193) - python/arfile.cc, python/generic.h, python/tag.cc, python/tarfile.cc: fix file descriptor and memory leaks - python/apt_instmodule.cc, python/apt_instmodule.h, python/arfile.h: Avoid reference cycle with control,data members in apt_inst.DebFile objects - tests/test_cve_2020_27351.py: Test cases for DebFile (others not easily testable) - CVE-2020-27351 * data/templates: Update mirror lists -- [1] http://cloud-images.ubuntu.com/releases/bionic/release-20201211.1/ [2] http://cloud-images.ubuntu.com/releases/bionic/release-20201209/