Bump ubuntu snapshots #630
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Seems like we were missing the fixes for inception. Old snapshots had:
```
amd64-microcode (3.20191218.1ubuntu2.1) jammy-security; urgency=medium
* SECURITY UPDATE: Zenbleed - information leak via speculative execution
- microcode_amd_fam17h.bin{.asc}: update AMD fam17h cpu microcode and
signature for Zenbleed vulnerability
- New microcodes:
+ Family=0x17 Model=0x31 Stepping=0x00: Patch=0x0830107a Length=3200 bytes
+ Family=0x17 Model=0xa0 Stepping=0x00: Patch=0x08a00008 Length=3200 bytes
- Updated microcodes:
+ Family=0x17 Model=0x08 Stepping=0x02: Patch=0x0800820d Length=3200 bytes
+ Family=0x17 Model=0x01 Stepping=0x02: Patch=0x0800126e Length=3200 bytes
- CVE-2023-20593
```
but not:
```
amd64-microcode (3.20191218.1ubuntu2.2) jammy-security; urgency=medium
* SECURITY UPDATE: INCEPTION - information leak via speculative execution
- amd-ucode/microcode_amd_fam19h.bin{.asc}: add AMD fam19h cpu
microcode and signature for Inception vulnerability
- New microcodes:
Family=0x19 Model=0x01 Stepping=0x00: Patch=0x0a001079 Length=5568 bytes
Family=0x19 Model=0x01 Stepping=0x01: Patch=0x0a0011d1 Length=5568 bytes
Family=0x19 Model=0x01 Stepping=0x02: Patch=0x0a001234 Length=5568 bytes
Family=0x19 Model=0x11 Stepping=0x01: Patch=0x0a10113e Length=5568 bytes
Family=0x19 Model=0x11 Stepping=0x02: Patch=0x0a10123e Length=5568 bytes
Family=0x19 Model=0xa0 Stepping=0x01: Patch=0x0aa00116 Length=5568 bytes
Family=0x19 Model=0xa0 Stepping=0x02: Patch=0x0aa00212 Length=5568 bytes
- CVE-2023-20569
-- Alex Murray <[email protected]> Mon, 21 Aug 2023 10:25:31 +0930
```
|
Building new images here: https://github.com/stackhpc/stackhpc-kayobe-config/actions/runs/6121595206 |
…23-09-04' into yoga/ubuntu-snapshots-2023-09-08
|
I've merged in the centos versions bumps as there was a merge conflict |
|
Hmm, missing containers in test pulp: Trying manual sync here: https://github.com/stackhpc/stackhpc-release-train/actions/runs/6170024506 Edit: I think this syncs for test pulp to ark, so probably no help ... I do have this container in my manifest: |
|
I can only think that I must not have selected the "push images " option. Building again: https://github.com/stackhpc/stackhpc-kayobe-config/actions/runs/6170125945 |
|
Rebuilding after test-pulp was restored: https://github.com/stackhpc/stackhpc-kayobe-config/actions/runs/6174932225 |
jovial
commented
Sep 15, 2023
|
Promoting images here: https://github.com/stackhpc/stackhpc-release-train/actions/runs/6199616595 |
jovial
commented
Sep 15, 2023
|
markgoddard
reviewed
Sep 18, 2023
releasenotes/notes/bump-ubuntu-snapshots-2023-09-15-22ca5250d40bd5b6.yaml
Outdated
Show resolved
Hide resolved
|
Hit issues with the last run as ubuntu images still missing in test pulp. Will try a manual sync again. Edit: possibly it was this sync that hit the 6h timeout: https://github.com/stackhpc/stackhpc-release-train/actions/runs/6199502513 new sync: https://github.com/stackhpc/stackhpc-release-train/actions/runs/6233132623 |
Didn't bump those because I rebased on: #618. Do we need to bump them? |
well, opensearch image that I built didn't use the new ubuntu snapshot? |
I think we still need this fix? |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Seems like we were missing the fixes for inception. Old snapshots had:
but not: