Ubuntu Security Notice 6493-1 - On Ubuntu 20.04 LTS and Ubuntu 22.04 LTS, the hibagent package has been updated to add IMDSv2 support, as IMDSv1 uses an insecure protocol and is no longer recommended. In addition, on all releases, hibagent has been updated to do nothing if ODH is configured.
790fee314a2b11eea708a1a104b708111a877a786380c337a1431994534d10ce
==========================================================================
Ubuntu Security Notice USN-6493-1
November 21, 2023
hibagent update
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 23.10
- Ubuntu 23.04
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
Summary:
A security improvement was added to hibagent.
Software Description:
- hibagent: Agent that triggers hibernation on EC2 instances
Details:
On Ubuntu 20.04 LTS and Ubuntu 22.04 LTS, the hibagent package has been
updated to add IMDSv2 support, as IMDSv1 uses an insecure protocol and is
no longer recommended.
In addition, on all releases, hibagent has been updated to do nothing if
ODH is configured.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 23.10:
hibagent 1.0.1+git20230216.9ac1209f7-0ubuntu1.23.10.1
Ubuntu 23.04:
hibagent 1.0.1+git20230216.9ac1209f7-0ubuntu1.23.04.1
Ubuntu 22.04 LTS:
hibagent 1.0.1-0ubuntu2.22.04.2
Ubuntu 20.04 LTS:
hibagent 1.0.1-0ubuntu1.20.04.2
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-6493-1
https://launchpad.net/bugs/2043739
Package Information:
https://launchpad.net/ubuntu/+source/hibagent/1.0.1+git20230216.9ac1209f7-0ubuntu1.23.10.1
https://launchpad.net/ubuntu/+source/hibagent/1.0.1+git20230216.9ac1209f7-0ubuntu1.23.04.1
https://launchpad.net/ubuntu/+source/hibagent/1.0.1-0ubuntu2.22.04.2
https://launchpad.net/ubuntu/+source/hibagent/1.0.1-0ubuntu1.20.04.2