Ubuntu 6580 Published by

A hibagent security update has been released for Ubuntu Linux 16.04 LTS and 18.04 LTS.



[USN-6493-2] hibagent update


=========================================================================
Ubuntu Security Notice USN-6493-2
November 21, 2023

hibagent update
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 18.04 LTS (Available with Ubuntu Pro)
- Ubuntu 16.04 LTS (Available with Ubuntu Pro)

Summary:

A security improvement was added to hibagent.

Software Description:
- hibagent: Agent that triggers hibernation on EC2 instances

Details:

USN-6493-1 fixed a vulnerability in hibagent. This update provides
the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.

Original advisory details:

On Ubuntu 18.04 LTS and Ubuntu 16.04 LTS, the hibagent package has been
updated to add IMDSv2 support, as IMDSv1 uses an insecure protocol and is
no longer recommended.

In addition, on all releases, hibagent has been updated to do nothing if
ODH is configured.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS (Available with Ubuntu Pro):
hibagent 1.0.1-0ubuntu1.18.04.1+esm1

Ubuntu 16.04 LTS (Available with Ubuntu Pro):
hibagent 1.0.1-0ubuntu1~16.04.1+esm1

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-6493-2
https://ubuntu.com/security/notices/USN-6493-1
https://launchpad.net/bugs/