Source | Text Version

QSN-4041-1: linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-gke-4.15, linux-hwe, linux-kvm, linux

June 29, 2019

Summary

Several security issues were fixed in the Linux kernel.

Details

USN-4017-1 fixed vulnerabilities in the Linux kernel for Ubuntu. Unfortunately, the update introduced a regression that interfered with networking applications that setup very low SO_SNDBUF values. This update fixes the problem.

We apologize for the inconvenience.

Jonathan Looney discovered that the Linux kernel could be coerced into segmenting responses into multiple TCP segments. A remote attacker could construct an ongoing sequence of requests to cause a denial of service.

References

https://usn.ubuntu.com/4041-1

http://people.canonical.com/~ubuntu-security/cve/CVE-2019-11479

http://people.canonical.com/~ubuntu-security/cve/https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SACKPanic

Update

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-4.15.0-1017-oracle

If the current version you have is before 4.15.0-1017.19~16.04.2, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-4.15.0-1017-oracle

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-4.15.0-1036-gcp

If the current version you have is before 4.15.0-1036.38~16.04.1, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-4.15.0-1036-gcp

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-4.15.0-1043-aws

If the current version you have is before 4.15.0-1043.45~16.04.1, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-4.15.0-1043-aws

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-4.15.0-1049-azure

If the current version you have is before 4.15.0-1049.54, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-4.15.0-1049-azure

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-4.15.0-54-generic

If the current version you have is before 4.15.0-54.58~16.04.1, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-4.15.0-54-generic

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-4.15.0-54-generic-

If the current version you have is before 4.15.0-54.58~16.04.1, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-4.15.0-54-generic-

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-4.15.0-54-lowlaten

If the current version you have is before 4.15.0-54.58~16.04.1, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-4.15.0-54-lowlaten

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-4.4.0-1051-kvm

If the current version you have is before 4.4.0-1051.58, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-4.4.0-1051-kvm

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-4.4.0-1087-aws

If the current version you have is before 4.4.0-1087.98, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-4.4.0-1087-aws

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-4.4.0-1114-raspi2

If the current version you have is before 4.4.0-1114.123, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-4.4.0-1114-raspi2

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-4.4.0-1118-snapdra

If the current version you have is before 4.4.0-1118.124, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-4.4.0-1118-snapdra

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-4.4.0-154-generic

If the current version you have is before 4.4.0-154.181, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-4.4.0-154-generic

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-4.4.0-154-generic-

If the current version you have is before 4.4.0-154.181, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-4.4.0-154-generic-

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-4.4.0-154-lowlaten

If the current version you have is before 4.4.0-154.181, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-4.4.0-154-lowlaten

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-4.4.0-154-powerpc-

If the current version you have is before 4.4.0-154.181, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-4.4.0-154-powerpc-

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-4.4.0-154-powerpc-

If the current version you have is before 4.4.0-154.181, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-4.4.0-154-powerpc-

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-4.4.0-154-powerpc6

If the current version you have is before 4.4.0-154.181, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-4.4.0-154-powerpc6

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-4.4.0-154-powerpc6

If the current version you have is before 4.4.0-154.181, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-4.4.0-154-powerpc6

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-aws

If the current version you have is before 4.4.0.1087.90, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-aws

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-aws-hwe

If the current version you have is before 4.15.0.1043.43, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-aws-hwe

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-azure

If the current version you have is before 4.15.0.1049.52, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-azure

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-gcp

If the current version you have is before 4.15.0.1036.50, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-gcp

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-generic

If the current version you have is before 4.4.0.154.162, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-generic

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-generic-hwe-16.04

If the current version you have is before 4.15.0.54.75, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-generic-hwe-16.04

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-generic-lpae

If the current version you have is before 4.4.0.154.162, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-generic-lpae

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-generic-lpae-hwe-1

If the current version you have is before 4.15.0.54.75, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-generic-lpae-hwe-1

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-gke

If the current version you have is before 4.15.0.1036.50, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-gke

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-kvm

If the current version you have is before 4.4.0.1051.51, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-kvm

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-lowlatency

If the current version you have is before 4.4.0.154.162, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-lowlatency

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-lowlatency-hwe-16.

If the current version you have is before 4.15.0.54.75, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-lowlatency-hwe-16.

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-oem

If the current version you have is before 4.15.0.54.75, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-oem

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-oracle

If the current version you have is before 4.15.0.1017.11, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-oracle

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-powerpc-e500mc

If the current version you have is before 4.4.0.154.162, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-powerpc-e500mc

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-powerpc-smp

If the current version you have is before 4.4.0.154.162, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-powerpc-smp

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-powerpc64-emb

If the current version you have is before 4.4.0.154.162, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-powerpc64-emb

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-powerpc64-smp

If the current version you have is before 4.4.0.154.162, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-powerpc64-smp

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-raspi2

If the current version you have is before 4.4.0.1114.114, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-raspi2

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-snapdragon

If the current version you have is before 4.4.0.1118.110, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-snapdragon

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-virtual

If the current version you have is before 4.4.0.154.162, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-virtual

A general update will usually fix all issues, but to make sure, you can check your current version with:

$ dpkg -l linux-image-virtual-hwe-16.04

If the current version you have is before 4.15.0.54.75, run the following:

$ sudo apt-get update
$ sudo apt-get install linux-image-virtual-hwe-16.04

Copyright © 2010-2015, OSNEXUS Corporation. All rights reserved.