A new release of the Ubuntu Cloud Images for stable Ubuntu release 18.04 LTS (Bionic Beaver) is available at [1]. These new images superseded the existing images [2]. Images are available for download or immediate use on EC2 via publish AMI ids. Users who wish to update their existing installations can do so with:
'sudo apt-get update && sudo apt-get dist-upgrade && sudo reboot'.
The following packages have been updated. Please see the full changelogs
for a complete listing of changes:
* expat: 2.2.5-3ubuntu0.7 => 2.2.5-3ubuntu0.8
* linux-meta: 4.15.0.196.181 => 4.15.0.197.182
* linux-signed: 4.15.0-196.207 => 4.15.0-197.208
The following is a complete changelog for this image.
new: {'linux-headers-4.15.0-197-generic': '4.15.0-197.208', 'linux-modules-4.15.0-197-generic': '4.15.0-197.208', 'linux-headers-4.15.0-197': '4.15.0-197.208'}
removed: {'linux-modules-4.15.0-196-generic': '4.15.0-196.207', 'linux-headers-4.15.0-196': '4.15.0-196.207', 'linux-headers-4.15.0-196-generic': '4.15.0-196.207'}
changed: ['libexpat1:amd64', 'linux-headers-generic', 'linux-headers-virtual', 'linux-image-4.15.0-197-generic', 'linux-image-virtual', 'linux-virtual']
new snaps: {}
removed snaps: {}
changed snaps: []
==== expat: 2.2.5-3ubuntu0.7 => 2.2.5-3ubuntu0.8 ====
==== libexpat1:amd64
* SECURITY UPDATE: use-after-free
- debian/patches/CVE-2022-40674.patch: adds a conditional call to
storeRawNames() in func internalEntityProcessor following a call
to doCOntent() that could result in unbalanced tags upon returning.
- CVE-2022-40674
* SECURITY UPDATE: use-after-free
- debian/patches/CVE-2022-43680-1.patch: adds tests to cover
DTD destruction in XML_ExternalEntityParserCreate in
expat/tests/runtests.c.
- debian/patches/CVE-2022-43680-2.patch: fix overeager DTD
destruction in XML_ExternalEntityParserCreate in
expat/lib/xmlparse.c.
- CVE-2022-43680
==== linux-meta: 4.15.0.196.181 => 4.15.0.197.182 ====
==== linux-headers-generic linux-headers-virtual linux-image-virtual linux-virtual
* Bump ABI 4.15.0-197
==== linux-signed: 4.15.0-196.207 => 4.15.0-197.208 ====
==== linux-image-4.15.0-197-generic
* Master version: 4.15.0-197.208
--
[1] http://cloud-images.ubuntu.com/releases/bionic/release-20221117/
[2] http://cloud-images.ubuntu.com/releases/bionic/release-20221108/