Summary
USN-4017-1 fixed vulnerabilities in the Linux kernel for Ubuntu.
Unfortunately, the update introduced a regression that interfered with
networking applications that setup very low SO_SNDBUF values. This
update fixes the problem.
We apologize for the inconvenience.
Jonathan Looney discovered that the Linux kernel could be coerced into
segmenting responses into multiple TCP segments. A remote attacker could
construct an ongoing sequence of requests to cause a denial of service.
Fixed packages 21
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | linux | 4.4.0-154.181 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-aws | 4.4.0-1087.98 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-aws-hwe | 4.15.0-1043.45~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-azure | 4.15.0-1049.54 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-gcp | 4.15.0-1036.38~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-hwe | 4.15.0-54.58~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-kvm | 4.4.0-1051.58 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-oracle | 4.15.0-1017.19~16.04.2 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-raspi2 | 4.4.0-1114.123 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-snapdragon | 4.4.0-1118.124 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux | 4.15.0-54.58 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-aws | 4.15.0-1043.45 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-azure | 4.18.0-1023.24~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gcp | 4.15.0-1036.38 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gke-4.15 | 4.15.0-1036.38 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-hwe | 4.18.0-25.26~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-kvm | 4.15.0-1038.38 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oem | 4.15.0-1045.50 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oracle | 4.15.0-1017.19 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-raspi2 | 4.15.0-1040.43 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-snapdragon | 4.15.0-1057.62 |
Vulnerabilities 1
-
Medium 5.3CVE-2019-11479 EPSS 91%
Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fr…
References
-
report
https://ubuntu.com/security/CVE-2019-11479