[Bug 2018272] Re: [SRU] Update and backport google-guest-agent to 20230426.00

[Launchpad Bug Tracker]

This bug was fixed in the package google-guest-agent -
20230426.00-0ubuntu2~22.04.0

---------------
google-guest-agent (20230426.00-0ubuntu2~22.04.0) jammy; urgency=medium

  * No-change rebuild for Jammy.

google-guest-agent (20230426.00-0ubuntu2) mantic; urgency=medium

  * d/rules: Add --no-stop-on-upgrade for upgrade path
    to enforce no stop of the services on package upgrade.
    This has the desired side-effect of not stopping, starting or
    restarting the services as a part of the upgrade (LP: #2019089)
  * d/{rules,install}: ship gce-workload-cert-refresh.timer.

 -- Utkarsh Gupta <utkarsh at ubuntu.com>  Thu, 25 May 2023 13:13:37 +0530

** Changed in: google-guest-agent (Ubuntu Focal)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to google-guest-agent in Ubuntu.
https://bugs.launchpad.net/bugs/2018272

Title:
  [SRU] Update and backport google-guest-agent to 20230426.00

Status in google-guest-agent package in Ubuntu:
  Fix Released
Status in google-guest-agent source package in Bionic:
  Fix Released
Status in google-guest-agent source package in Focal:
  Fix Released
Status in google-guest-agent source package in Jammy:
  Fix Released
Status in google-guest-agent source package in Kinetic:
  Fix Released
Status in google-guest-agent source package in Lunar:
  Fix Committed

Bug description:
  [SRU]
  =====

  [Impact]

  This package is provided by Google for installation within guests that
  run on Google Compute Engine. It is part of a collection of tools and
  daemons, that ensure that the Ubuntu images published to GCE run
  properly on their platform.

  Cloud platforms evolve at a rate that can't be handled in six-month
  increments, and they will often develop features that they would like
  to be available to customers who don't want to upgrade from earlier
  Ubuntu releases. As such, updating this package to more recent
  upstream releases is required within all Ubuntu releases, so they
  continue to function properly in their environment.

  In addition, this fixes CVE-2022-41723 (affecting google-guest-agent
  because golang.org/x/net is vendored in the package).

  [Test Case]

  When a new version of this package is uploaded to -proposed, the
  following will be done:

   * an image based on -proposed will be built for GCE and published to the ubuntu-os-cloud-devel project
   * the GCE team will be asked to validate that the new package addresses the issues it is expected to address, and that the image passes their internal image validation.
   * Each test image will be launched, and we will validate:
   ** the package version(s)
   ** that the correct ssh keys have been imported
   ** that the google specific services are running successfully

  If all the testing indicates that the image containing the new package
  is acceptable, verification will be considered to be done.

  [Other Information]

  This bug is used for tracking of releasing the new upstream version
  for all supported series, as per the approved policy mentioned in the
  following MRE:

  https://wiki.ubuntu.com/google-guest-agent-Updates

  The updated package is not built for riscv64 on Focal, but it is not
  used on riscv64 either, thus please release the SRU without the risc64
  binaries.

  The package does not build for powerpc on Xenial, but this is OK since
  it is not used on powerpc either.

  Also, since this bumps some of the vendored dependencies, here's a
  diff of the version bump: https://paste.ubuntu.com/p/T26kznfs9q/

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/google-guest-agent/+bug/2018272/+subscriptions