Ubuntu
kernel-package package

USN-6766-1 - image availability for VMware *.ova

Asked by paavaanan

-- I see https://ubuntu.com/security/notices/USN-6766-1 is fixed in many flavours. But not in *ova's ? (VMware/Virtual box OVA)
-- Is this intentional? or it is still brewing inhouse?
-- If someone points me in right direction, will be helpful to track the activity on *.ova images..

Thanks,
Paavaanan

Question information

Language:
English Edit question
Status:
Solved
For:
Ubuntu kernel-package Edit question
Assignee:
No assignee Edit question
Solved by:
Manfred Hampl
Solved:
Last query:
Last reply:
Revision history for this message
Manfred Hampl (m-hampl) said : 		#1

You are mixing different things,

linux-azure-5.15, linux-oracle and similar are *.deb packages that install a specific version of the kernel, dedicated for the respective cloud environment.

Files like noble-server-cloudimg-amd64.ova are pre-built images for virtualbox, and as far as I know, they do not use a special cloud version of the kernel, but the "generic" linux kernel, which is covered by the item "linux" in the USN document.

Do you have a linux system running that has been installed from a downloaded ova file? If you check the version of the kernel, which one is it?

Revision history for this message
paavaanan (paavaanan-c) said : 		#2

-- Manfred, thanks for your response. You are right.

-- [linux-image-generic - 5.15.0.106.106] generic-linux-kernel-deb package is available in the USN. I can directly use the *.deb package to update my existing Ubuntu (Jammy) kernel. Both in server and cloud.

----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
jammy-server-cloudimg-amd64.img 2024-04-26 10:06 618M QCow2 UEFI/GPT Bootable disk image
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
https://cloud-images.ubuntu.com/jammy/current/?C=D;O=A

--But, In the above *.cloudimg which is released on 26-Apr-2024, clearly doesn't have the Latest kernel-fixes released on 7-May-2024 [USN-6766-1].

--I am just trying to track when do the cloud images get updated with the (USN-6766-1)kernel fixes as whole. And, where can I track the progress?

--I mean, a whole (jammy-server-cloudimg-amd64.img + USN-6766-1) *.img.

--I know it's a too noob question. Apologies, I don't have much familiarity with ubuntu release-cycle. If you point me with right direction it will help me.

Thanks,
Paavaanan

Revision history for this message
Best Manfred Hampl (m-hampl) said : 		#3

I guess that you best look at https://cloud-images.ubuntu.com/jammy/

Even if it's called "daily builds", a new version is prepared only once a week or once a fortnight.
I agree with you, that a new version is overdue, taking into account the vulnerabilities that have been solved with the new kernel version. I hope that a new version will be published soon.

In any case, even if you install an older version, a regular package update will install a kernel version where the mentioned vulnerabilities have been patched.

Revision history for this message
paavaanan (paavaanan-c) said : 		#4

Thanks Manfred...

Revision history for this message
paavaanan (paavaanan-c) said : 		#5

Thanks Manfred Hampl, that solved my question.