A new release of the Ubuntu Cloud Images for stable Ubuntu release 20.10 (Groovy Gorilla) is available at [1]. These new images superseded the existing images [2]. Images are available for download or immediate use on EC2 via publish AMI ids. Users who wish to update their existing installations can do so with:
   'sudo apt-get update && sudo apt-get dist-upgrade && sudo reboot'.

The following packages have been updated. Please see the full changelogs
for a complete listing of changes:
 * bind9: 1:9.16.6-3ubuntu1.1 => 1:9.16.6-3ubuntu1.2 
 * cloud-init: 21.1-19-gbad84ad4-0ubuntu1~20.10.1 => 21.1-19-gbad84ad4-0ubuntu1~20.10.2 
 * distro-info-data: 0.44ubuntu1.3 => 0.44ubuntu1.5 
 * fwupd: 1.4.5-1 => 1.4.7-0~20.10.1 
 * fwupd-signed: 1.30+1.4.5-1 => 1.30.1+1.4.7-0~20.10.1 
 * ubuntu-release-upgrader: 1:20.10.14 => 1:20.10.15 


The following is a complete changelog for this image.
new: {}
removed: {}
changed: ['bind9-dnsutils', 'bind9-host', 'bind9-libs:amd64', 'cloud-init', 'distro-info-data', 'fwupd', 'fwupd-signed', 'libfwupd2:amd64', 'libfwupdplugin1:amd64', 'python3-distupgrade', 'ubuntu-release-upgrader-core']
new snaps: {}
removed snaps: {}
changed snaps: ['lxd']
==== bind9: 1:9.16.6-3ubuntu1.1 => 1:9.16.6-3ubuntu1.2 ====
====     bind9-dnsutils bind9-host bind9-libs:amd64
  * SECURITY UPDATE: DoS via broken inbound incremental zone update (IXFR)
    - debian/patches/CVE-2021-25214.patch: immediately reject the entire
      transfer for certain RR in lib/dns/xfrin.c.
    - CVE-2021-25214
  * SECURITY UPDATE: assert via answering certain queries for DNAME records
    - debian/patches/CVE-2021-25215.patch: fix assert checks in
      lib/ns/query.c.
    - CVE-2021-25215
  * SECURITY UPDATE: overflow in BIND's GSSAPI security policy negotiation
    - debian/rules: build with --disable-isc-spnego to disable internal
      SPNEGO and use the one from the kerberos libraries.
    - CVE-2021-25216
==== cloud-init: 21.1-19-gbad84ad4-0ubuntu1~20.10.1 => 21.1-19-gbad84ad4-0ubuntu1~20.10.2 ====
====     cloud-init
  * cherry-pick 83f6bbfb: Fix unpickle for source paths missing run_dir
    (#863) (LP: #1899299)
  * cherry-pick d132356c: fix error on upgrade caused by new vendordata2
    attributes (LP: #1922739)
==== distro-info-data: 0.44ubuntu1.3 => 0.44ubuntu1.5 ====
====     distro-info-data
  * Add Ubuntu 21.10, Impish Indri (LP: #1925484)
==== fwupd: 1.4.5-1 => 1.4.7-0~20.10.1 ====
====     fwupd libfwupd2:amd64 libfwupdplugin1:amd64
  * new upstream version (1.4.7)
  * Bug fixes:
    -  Check returned volumes before accessing them
    -  Correct a Thunderbolt assertion if kernel failed FW read
    -  Do not dedupe NVMe devices
    -  Do not match all HIDRAW\VEN_06CB devices
    -  Don't allow device updates while needing activation
    -  Fix adding multiple flags to devices
    -  Fix critical warning regression with 'fwupdate -a'
    -  Fix probe warning for the Logitech Unifying device
    -  Fix the quirk key name for the Lenovo HDMI with power
    -  Make TPM more optional
    -  Make udisks2 errors more apparent
    -  Only set the version format for ESRT entries
    -  Remove the Hughski public key
    -  Restore recognizing gpg and pkcs7 types still
    -  Wait a few ms for the Logitech hardware to settle after detach
  * New features
    - Add support for SBAT. (LP: #1921539)
    - Adds support for Synaptics fingerprinter reader (LP:# 1900935)
  * Fixes TPM PCR0 reading failures if all characters are 0.
    (LP: #1909734)
  * Fixes Synaptics RMI probe causing touchscreen failures
    (LP: #1886912)
  * Backport a patch from upstream 1_4_X branch to fix SBAT character.
  * Backport a patch from upstream 1_4_X branch to fix vendor-id requirement
    error on Dell WD19 (LP: #1921544)
==== fwupd-signed: 1.30+1.4.5-1 => 1.30.1+1.4.7-0~20.10.1 ====
====     fwupd-signed
  * Build depend on fwupd 1.4.7-0~20.10.1
    - LP: #1921544
    - LP: #1921539
    - LP: #1909734
    - LP: #1886912
    - LP: #1900935
==== ubuntu-release-upgrader: 1:20.10.14 => 1:20.10.15 ====
====     python3-distupgrade ubuntu-release-upgrader-core
  * DistUpgrade/DistUpgradeQuirks.py: Modify the deb-to-snap quirk to also
    upgrade preseeded snaps to latest/stable/ubuntu-$version for their new
    release. (LP: #1922297)
  * Update mirrors, demotions, and translations.

--
[1] http://cloud-images.ubuntu.com/releases/groovy/release-20210504/
[2] http://cloud-images.ubuntu.com/releases/groovy/release-20210415.1/