USN-6493-2: hibagent update

Publication date

21 November 2023

Overview

A security improvement was added to hibagent.


Packages

  • hibagent - Agent that triggers hibernation on EC2 instances

Details

USN-6493-1 fixed a vulnerability in hibagent. This update provides
the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.

Original advisory details:

On Ubuntu 18.04 LTS and Ubuntu 16.04 LTS, the hibagent package has been
updated to add IMDSv2 support, as IMDSv1 uses an insecure protocol and is
no longer recommended.

In addition, on all releases, hibagent has been updated to do nothing if
ODH is configured.

USN-6493-1 fixed a vulnerability in hibagent. This update provides
the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.

Original advisory details:

On Ubuntu 18.04 LTS and Ubuntu 16.04 LTS, the hibagent package has been
updated to add IMDSv2 support, as IMDSv1 uses an insecure protocol and is
no longer recommended.

In addition, on all releases, hibagent has been updated to do nothing if
ODH is configured.

Update instructions

In general, a standard system update will make all the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
18.04 bionic hibagent –  1.0.1-0ubuntu1.18.04.1+esm1  
16.04 xenial hibagent –  1.0.1-0ubuntu1~16.04.1+esm1  

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.


Have additional questions?

Talk to a member of the team ›