[Bug 1585725] Re: qemu security backport needed in the Ubuntu Cloud Archive

[Corey Bryant]

Hello Andrew, or anyone else affected,

Accepted nova into kilo-proposed. The package will build now and be
available in the Ubuntu Cloud Archive in a few hours, and then in the
-proposed repository.

Please help us by testing this new package. To enable the -proposed
repository:

  sudo add-apt-repository cloud-archive:kilo-proposed
  sudo apt-get update

Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug,
mentioning the version of the package you tested, and change the tag
from verification-kilo-needed to verification-kilo-done. If it does not
fix the bug for you, please add a comment stating that, and change the
tag to verification-kilo-failed. In either case, details of your testing
will help us make a better decision.

Further information regarding the verification process can be found at
https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in
advance!

** Tags added: verification-kilo-needed

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to Ubuntu Cloud Archive.
https://bugs.launchpad.net/bugs/1585725

Title:
  qemu security backport needed in the Ubuntu Cloud Archive

Status in Ubuntu Cloud Archive:
  Invalid
Status in Ubuntu Cloud Archive kilo series:
  Fix Committed

Bug description:
  There is a known security issue in qemu/qemu-kvm, documented here:

  http://www.ubuntu.com/usn/usn-2974-1/

  I am running Nova Compute nodes with the Ubuntu Cloud Archive, version
  Kilo.  That repo provides me with the following package:

  qemu-kvm                            1:2.2+dfsg-5expubuntu9.7~cloud2

  That package does not contain fixes for the security issue.

  Needless to say, qemu-kvm is a critical component of any OpenStack
  install, so security updates need to be applied to the cloud archive
  packages in a timely manner.

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/1585725/+subscriptions