A new release of the Ubuntu Cloud Images for stable Ubuntu release 20.04 LTS (Focal Fossa) is available at [1]. These new images superseded the existing images [2]. Images are available for download or immediate use on EC2 via publish AMI ids. Users who wish to update their existing installations can do so with:
   'sudo apt-get update && sudo apt-get dist-upgrade && sudo reboot'.

The following packages have been updated. Please see the full changelogs
for a complete listing of changes:
 * icu: 66.1-2ubuntu2 => 66.1-2ubuntu2.1 
 * linux-meta: 5.4.0.90.94 => 5.4.0.91.95 
 * linux-signed: 5.4.0-90.101 => 5.4.0-91.102 
 * wget: 1.20.3-1ubuntu1 => 1.20.3-1ubuntu2 


The following is a complete changelog for this image.
new: {'linux-headers-5.4.0-91-generic': '5.4.0-91.102', 'linux-headers-5.4.0-91': '5.4.0-91.102', 'linux-modules-5.4.0-91-generic': '5.4.0-91.102'}
removed: {'linux-headers-5.4.0-90-generic': '5.4.0-90.101', 'linux-modules-5.4.0-90-generic': '5.4.0-90.101', 'linux-headers-5.4.0-90': '5.4.0-90.101'}
changed: ['libicu66:amd64', 'linux-headers-generic', 'linux-headers-virtual', 'linux-image-5.4.0-91-generic', 'linux-image-virtual', 'linux-virtual', 'wget']
new snaps: {}
removed snaps: {}
changed snaps: ['snapd']
==== icu: 66.1-2ubuntu2 => 66.1-2ubuntu2.1 ====
====     libicu66:amd64
  * SECURITY UPDATE: Double Free
    - debian/patches/CVE-2021-30535-prereq.patch: Fix invalid free when
      using long locale name in Locale functions in
      source/common/locid.cpp.
    - debian/patches/CVE-2021-30535.patch: Fix edge cases with baseName
      in setKeywordValue function in source/common/locid.cpp to
      prevent double free and protect from heap corruption.
    - CVE-2021-30535
  * Fix failing tests causing build-time failures: (LP: #1951432)
    - debian/patches/tzdata-2020f-tztest.patch: Add Time Zones data
      related to tzdata version 2020f in TestCanonicalID function in
      source/test/intltest/tztest.cpp to prevent tests from failing.
    - debian/patches/tzdata-2021b-tests.patch: Fix TestCalendar function
      in source/test/cintltst/ccaltst.c and TestGenericAPI in
      source/test/intltest/tztest.cpp to accept tz.version with longer
      string size to prevent tests from failing.
    - debian/patches/skip-tztests.patch: Skip specific Time Zones tests in
      TestAliasedNames and TestCanonicalID functions in
      source/test/intltest/tztest.cpp. They don't match with data from
      updated tzdata and needed to be skiped to prevent tests from failing.
  * Fix autopkg tests:
    - debian/tests/control: add libicu-dev and pkg-config dependencies in
      smoke test, and build-essential dependency in build-test.
    - debian/tests/smoke: change smoke test tool from icu-config (deprecated)
      to pkg-config.
    - debian/tests/ustring.cpp: add 'using namespace icu'.
==== linux-meta: 5.4.0.90.94 => 5.4.0.91.95 ====
====     linux-headers-generic linux-headers-virtual linux-image-virtual linux-virtual
  * Bump ABI 5.4.0-91
  * Packaging resync (LP: #1786013)
    - [Packaging] resync debian/dkms-versions from main package
==== linux-signed: 5.4.0-90.101 => 5.4.0-91.102 ====
====     linux-image-5.4.0-91-generic
  * Master version: 5.4.0-91.102
==== wget: 1.20.3-1ubuntu1 => 1.20.3-1ubuntu2 ====
====     wget
  * Cherry-pick upstream fix fix-ssl_init-for-openssl-1.1.1.patch:
    - Fix initialization of openssl for 1.1.1 (LP: #1921518)

--
[1] http://cloud-images.ubuntu.com/releases/focal/release-20211129/
[2] http://cloud-images.ubuntu.com/releases/focal/release-20211118/