libvirt USN-3680-1 not yet available in xenial/pike repo

[Jared Baker]

Not a bug, but I saw on the mailing list that USN-3680-1 was patched but I do not yet see the updated packages for those using the cloud archive repo's for xenial/pike. I was just wondering if typically there is a delay in packages being released between ubuntu repo and cloud archive repos.

Thank you very much,

Jared

ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: libvirt0 3.6.0-1ubuntu6.5~cloud0 [origin: Canonical]
ProcVersionSignature: Ubuntu 4.4.0-127.153-generic 4.4.128
Uname: Linux 4.4.0-127-generic x86_64
ApportVersion: 2.20.1-0ubuntu2.15
Architecture: amd64
CrashDB:
 {
                "impl": "launchpad",
                "project": "cloud-archive",
                "bug_pattern_url": "http://people.canonical.com/~ubuntu-archive/bugpatterns/bugpatterns.xml",
             }
Date: Tue Jun 12 12:06:41 2018
ProcEnviron:
 TERM=xterm-256color
 PATH=(custom, no user)
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SourcePackage: libvirt
UpgradeStatus: No upgrade log present (probably fresh install)

[Corey Bryant (corey.bryant)]

Hi Jared,

Thanks for reporting this and making Ubuntu better. We are now at libvirt version 3.6.0-1ubuntu6.8~cloud0 in the Pike cloud archive which contains the fixes for CVE-2018-1064 and CVE-2018-3639. There is typically a short delay for packages to land in the cloud archive after they've landed in the corresponding Ubuntu release, to account for regression testing prior to promotion.

Thanks,
Corey