A new release of the Ubuntu Cloud Images for stable Ubuntu release 20.10 (Groovy Gorilla) is available at [1]. These new images superseded the existing images [2]. Images are available for download or immediate use on EC2 via publish AMI ids. Users who wish to update their existing installations can do so with: 'sudo apt-get update && sudo apt-get dist-upgrade && sudo reboot'. The following packages have been updated. Please see the full changelogs for a complete listing of changes: * apport: 2.20.11-0ubuntu50 => 2.20.11-0ubuntu50.1 * iptables: 1.8.5-3ubuntu1 => 1.8.5-3ubuntu2.20.10.1 * libmaxminddb: 1.4.2-0ubuntu1 => 1.4.2-0ubuntu1.20.10.1 * linux-meta: 5.8.0.28.33 => 5.8.0.29.34 * linux-signed: 5.8.0-28.30 => 5.8.0-29.31 The following is a complete changelog for this image. new: {'linux-headers-5.8.0-29': '5.8.0-29.31', 'linux-modules-5.8.0-29-generic': '5.8.0-29.31', 'linux-headers-5.8.0-29-generic': '5.8.0-29.31'} removed: {'linux-headers-5.8.0-28': '5.8.0-28.30', 'linux-headers-5.8.0-28-generic': '5.8.0-28.30', 'linux-modules-5.8.0-28-generic': '5.8.0-28.30'} changed: ['apport', 'iptables', 'libip4tc2:amd64', 'libip6tc2:amd64', 'libmaxminddb0:amd64', 'libxtables12:amd64', 'linux-headers-generic', 'linux-headers-virtual', 'linux-image-5.8.0-29-generic', 'linux-image-virtual', 'linux-virtual', 'python3-apport', 'python3-problem-report'] new snaps: {} removed snaps: {} changed snaps: ['lxd'] ==== apport: 2.20.11-0ubuntu50 => 2.20.11-0ubuntu50.1 ==== ==== apport python3-apport python3-problem-report * Various security hardening fixes (LP: #1903332) - apport/fileutils.py: drop privileges in the correct order, limit settings file size. - apport/apport/report.py: properly drop privileges, limit ignore file size. - data/apport: drop supplemental groups. ==== iptables: 1.8.5-3ubuntu1 => 1.8.5-3ubuntu2.20.10.1 ==== ==== iptables libip4tc2:amd64 libip6tc2:amd64 libxtables12:amd64 * Fix regression when configuring basechain policy (LP: #1898547) - d/p/9003-iptables_nft_fix_basechain_policy_configuration.patch: Backport patch from upstream to fix basechain policy configuration when it wasn't explicitly set. ==== libmaxminddb: 1.4.2-0ubuntu1 => 1.4.2-0ubuntu1.20.10.1 ==== ==== libmaxminddb0:amd64 * SECURITY UPDATE: heap overread in dump_entry_data_list - debian/patches/CVE-2020-28241.patch: replace most malloc uses with calloc in bin/mmdblookup.c, doc/libmaxminddb.md, src/maxminddb.c. - CVE-2020-28241 ==== linux-meta: 5.8.0.28.33 => 5.8.0.29.34 ==== ==== linux-headers-generic linux-headers-virtual linux-image-virtual linux-virtual * Bump ABI 5.8.0-29 * Packaging resync (LP: #1786013) - [Packaging] resync debian/dkms-versions from main package ==== linux-signed: 5.8.0-28.30 => 5.8.0-29.31 ==== ==== linux-image-5.8.0-29-generic * Master version: 5.8.0-29.31 -- [1] http://cloud-images.ubuntu.com/releases/groovy/release-20201117/ [2] http://cloud-images.ubuntu.com/releases/groovy/release-20201111/