2023-05-02 07:02:54 |
Utkarsh Gupta |
bug |
|
|
added bug |
2023-05-02 07:05:18 |
Utkarsh Gupta |
description |
[SRU]
=====
[Impact]
This package is provided by Google for installation within guests that run on Google Compute Engine. It is part of a collection of tools and daemons, that ensure that the Ubuntu images published to GCE run properly on their platform.
Cloud platforms evolve at a rate that can't be handled in six-month increments, and they will often develop features that they would like to be available to customers who don't want to upgrade from earlier Ubuntu releases. As such, updating this package to more recent upstream releases is required within all Ubuntu releases, so they continue to function properly in their environment.
In addition, this fixes CVE-2022-41723 (affecting google-guest-agent because golang.org/x/net is vendored in the package).
[Test Case]
When a new version of this package is uploaded to -proposed, the following will be done:
* an image based on -proposed will be built for GCE and published to the ubuntu-os-cloud-devel project
* the GCE team will be asked to validate that the new package addresses the issues it is expected to address, and that the image passes their internal image validation.
* Each test image will be launched, and we will validate:
** the package version(s)
** that the correct ssh keys have been imported
** that the google specific services are running successfully
If all the testing indicates that the image containing the new package is acceptable, verification will be considered to be done.
[Other Information]
This bug is used for tracking of releasing the new upstream version for all supported series, as per the approved policy mentioned in the following MRE:
https://wiki.ubuntu.com/google-guest-agent-Updates
The updated package is not built for riscv64 on Focal, but it is not used on riscv64 either, thus please release the SRU without the risc64 binaries.
The package does not build for powerpc on Xenial, but this is OK since it is not used on powerpc either.
Also, since this bumps some of the vendored dependencies, here's a diff of the version bump: https://paste.ubuntu.com/XXX |
[SRU]
=====
[Impact]
This package is provided by Google for installation within guests that run on Google Compute Engine. It is part of a collection of tools and daemons, that ensure that the Ubuntu images published to GCE run properly on their platform.
Cloud platforms evolve at a rate that can't be handled in six-month increments, and they will often develop features that they would like to be available to customers who don't want to upgrade from earlier Ubuntu releases. As such, updating this package to more recent upstream releases is required within all Ubuntu releases, so they continue to function properly in their environment.
In addition, this fixes CVE-2022-41723 (affecting google-guest-agent because golang.org/x/net is vendored in the package).
[Test Case]
When a new version of this package is uploaded to -proposed, the following will be done:
* an image based on -proposed will be built for GCE and published to the ubuntu-os-cloud-devel project
* the GCE team will be asked to validate that the new package addresses the issues it is expected to address, and that the image passes their internal image validation.
* Each test image will be launched, and we will validate:
** the package version(s)
** that the correct ssh keys have been imported
** that the google specific services are running successfully
If all the testing indicates that the image containing the new package is acceptable, verification will be considered to be done.
[Other Information]
This bug is used for tracking of releasing the new upstream version for all supported series, as per the approved policy mentioned in the following MRE:
https://wiki.ubuntu.com/google-guest-agent-Updates
The updated package is not built for riscv64 on Focal, but it is not used on riscv64 either, thus please release the SRU without the risc64 binaries.
The package does not build for powerpc on Xenial, but this is OK since it is not used on powerpc either.
Also, since this bumps some of the vendored dependencies, here's a diff of the version bump: https://paste.ubuntu.com/p/T26kznfs9q/ |
|
2023-05-02 07:05:30 |
Utkarsh Gupta |
google-guest-agent (Ubuntu): assignee |
|
Utkarsh Gupta (utkarsh) |
|
2023-05-02 08:19:05 |
Andrew Cloke |
bug |
|
|
added subscriber Andrew Cloke |
2023-05-02 13:01:25 |
Łukasz Zemczak |
google-guest-agent (Ubuntu Lunar): status |
New |
Fix Committed |
|
2023-05-02 13:01:26 |
Łukasz Zemczak |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
2023-05-02 13:01:28 |
Łukasz Zemczak |
bug |
|
|
added subscriber SRU Verification |
2023-05-02 13:01:30 |
Łukasz Zemczak |
tags |
|
verification-needed verification-needed-lunar |
|
2023-05-02 13:27:41 |
Łukasz Zemczak |
google-guest-agent (Ubuntu Kinetic): status |
New |
Fix Committed |
|
2023-05-02 13:27:43 |
Łukasz Zemczak |
tags |
verification-needed verification-needed-lunar |
verification-needed verification-needed-kinetic verification-needed-lunar |
|
2023-05-02 13:28:42 |
Łukasz Zemczak |
google-guest-agent (Ubuntu Jammy): status |
New |
Fix Committed |
|
2023-05-02 13:28:44 |
Łukasz Zemczak |
tags |
verification-needed verification-needed-kinetic verification-needed-lunar |
verification-needed verification-needed-jammy verification-needed-kinetic verification-needed-lunar |
|
2023-05-02 13:30:36 |
Łukasz Zemczak |
google-guest-agent (Ubuntu Focal): status |
New |
Fix Committed |
|
2023-05-02 13:30:38 |
Łukasz Zemczak |
tags |
verification-needed verification-needed-jammy verification-needed-kinetic verification-needed-lunar |
verification-needed verification-needed-focal verification-needed-jammy verification-needed-kinetic verification-needed-lunar |
|
2023-05-02 13:32:21 |
Łukasz Zemczak |
google-guest-agent (Ubuntu Bionic): status |
New |
Fix Committed |
|
2023-05-02 13:32:23 |
Łukasz Zemczak |
tags |
verification-needed verification-needed-focal verification-needed-jammy verification-needed-kinetic verification-needed-lunar |
verification-needed verification-needed-bionic verification-needed-focal verification-needed-jammy verification-needed-kinetic verification-needed-lunar |
|
2023-05-04 03:31:00 |
Launchpad Janitor |
google-guest-agent (Ubuntu): status |
New |
Fix Released |
|
2023-05-04 03:31:00 |
Launchpad Janitor |
cve linked |
|
2022-41723 |
|
2023-05-11 16:25:34 |
Philip Roche |
tags |
verification-needed verification-needed-bionic verification-needed-focal verification-needed-jammy verification-needed-kinetic verification-needed-lunar |
block-proposed verification-needed verification-needed-bionic verification-needed-focal verification-needed-jammy verification-needed-kinetic verification-needed-lunar |
|
2023-06-12 11:57:54 |
Łukasz Zemczak |
tags |
block-proposed verification-needed verification-needed-bionic verification-needed-focal verification-needed-jammy verification-needed-kinetic verification-needed-lunar |
block-proposed block-proposed-bionic block-proposed-focal block-proposed-jammy block-proposed-kinetic block-proposed-lunar verification-needed verification-needed-bionic verification-needed-focal verification-needed-jammy verification-needed-kinetic verification-needed-lunar |
|
2023-06-13 06:39:53 |
Utkarsh Gupta |
tags |
block-proposed block-proposed-bionic block-proposed-focal block-proposed-jammy block-proposed-kinetic block-proposed-lunar verification-needed verification-needed-bionic verification-needed-focal verification-needed-jammy verification-needed-kinetic verification-needed-lunar |
verification-done verification-done-bionic verification-done-focal verification-done-jammy verification-done-kinetic verification-done-lunar |
|
2023-06-14 00:47:03 |
Launchpad Janitor |
google-guest-agent (Ubuntu Kinetic): status |
Fix Committed |
Fix Released |
|
2023-06-14 00:47:16 |
Launchpad Janitor |
google-guest-agent (Ubuntu Jammy): status |
Fix Committed |
Fix Released |
|
2023-06-14 00:47:29 |
Launchpad Janitor |
google-guest-agent (Ubuntu Focal): status |
Fix Committed |
Fix Released |
|
2023-06-14 00:47:42 |
Launchpad Janitor |
google-guest-agent (Ubuntu Bionic): status |
Fix Committed |
Fix Released |
|