Comment 5 for bug 1833987

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package linux - 4.15.0-54.58

---------------
linux (4.15.0-54.58) bionic; urgency=medium

  * linux: 4.15.0-54.58 -proposed tracker (LP: #1833987)

  * Remote denial of service (resource exhaustion) caused by TCP SACK scoreboard
    manipulation (LP: #1831638) // CVE-2019-11478
    - tcp: refine memory limit test in tcp_fragment()

  * CVE-2019-11479
    - SAUCE: tcp: add tcp_min_snd_mss sysctl
    - SAUCE: tcp: enforce tcp_min_snd_mss in tcp_mtu_probing()

 -- Kleber Sacilotto de Souza <email address hidden> Mon, 24 Jun 2019 11:39:50 +0200