Showing posts with label kernel. Show all posts
Showing posts with label kernel. Show all posts

Tuesday, June 18, 2019

TCP SACK PANIC: Multiple TCP-based remote denial of service vulnerabilities

[UPDATE 2019-06-25]

- Bitnami has now released all the images with the new kernel available for all the supported platforms. These changes are being propagated across all the Marketplaces right now.

----

Netflix has identified several TCP networking vulnerabilities in FreeBSD and Linux kernels.

They all are related to the minimum segment size (MSS) and TCP Selective Acknowledgement (SACK) capabilities. A malicious attacker can construct a specific sequence of TCP packets that can lead to a remotely-triggered kernel panic on recent Linux kernels.

The list of CVEs is as follows:

  • CVE-2019-11477: SACK Panic (Linux >= 2.6.29): A sequence of SACKs may be crafted such that one can trigger an integer overflow, leading to a kernel panic.
  • CVE-2019-11478: SACK Slowness (Linux < 4.15) or Excess Resource Usage (all Linux versions): It is possible to send a crafted sequence of SACKs which will fragment the TCP retransmission queue. 
  • CVE-2019-5599: SACK Slowness (FreeBSD 12 using the RACK TCP Stack): It is possible to send a crafted sequence of SACKs which will fragment the RACK send map.
  • CVE-2019-11479: Excess Resource Consumption Due to Low MSS Values (all Linux versions): An attacker can force the Linux kernel to segment its responses into multiple TCP segments, each of which contains only 8 bytes of data.


You can find more information about these vulnerabilities in the official security announcement.

Bitnami is working on updating all affected Virtual Machines and Cloud Images available through Bitnami, for all of our cloud provider partners. Once this update is complete, all new launches will be protected from these issues.

If you already have a running server (virtual machine) or if you have a Bitnami stack installed on your computer, you will need to update the operating system on your own. If a patched kernel is available from the operating system vendor, you can update it by following these instructions (depending on your distribution / operating system):

- Ubuntu / Debian

sudo apt-get update && sudo apt-get dist-upgrade 

- Oracle Linux, Red Hat, CentOS, and Amazon Linux

 sudo yum update 

After completing the steps above, reboot your server to get the fixed version of the kernel / operating system. The versions of the package that fix these vulnerabilities are the following:

- Ubuntu 16.04: 4.4.0-151-generic
- Ubuntu 16.04 for Azure: 4.15.0-1047-azure
- Debian 9: 4.9.168-1+deb9u3
- Oracle Linux 7: 4.1.12-124.28.3.el7uek or 4.14.35-1902.2.0.el7uek
- Red Hat: 3.10.0-957.21.3.el7
- CentOS: 3.10.0-957.21.3.el7
- Amazon Linux: 4.14.123-86.109.amzn1

If you have any questions about this process, please post to the Bitnami community support forum. We will be happy to help!
Labels: ,

Wednesday, August 15, 2018

L1 Terminal Fault: Privileged memory access vulnerability in Intel CPUs



Update (08/22)


The regressions affecting Ubuntu 14.04 have been fixed in kernel 3.13.0-116.163. Please check below for instructions on how to upgrade the Ubuntu 14.04 kernel.

Update (08/21)


Bitnami has now released all the Debian based images with the new kernel available. Updates are being propagated to the Bitnami Launchpads and the different Cloud Platforms.

Update (08/20)


Debian stretch's packages have been published to fix the security issue described here. The Bitnami team is working on publishing our solutions as soon as possible. If you have a running Debian instance, please upgrade the packages by following the documentation included below. 


Update (08/17)


A regression has been detected in Ubuntu 14.04 in certain instance types, which causes a kernel panic during boot time. More details can be found in Launchpad. Users are advised not to upgrade the kernel in Ubuntu 14.04 until a fix is released.

For users running other operating systems, it is highly recommended to create a full backup of the disk before upgrading the kernel version.

Update (08/16)


Bitnami has now released all the Ubuntu, Red Hat, CentOS and Oracle Linux based images with the new kernel available. Updates are being propagated to the Bitnami Launchpads and the different Cloud Platforms.

Description


On August 14th 2018, three vulnerabilities affecting x86 processors manufactured by Intel were disclosed:
The security issue is referred to as L1 Terminal Fault (L1TF) by the industry, and as “Foreshadow” by the security researcher.

The L1 Terminal Fault security issue exploits critical vulnerabilities in modern processors. It allows attackers to access sensitive data in a personal computer or third party clouds.

With L1TF, a malicious program can exploit an operating system’s Page Table by reading the data referenced to the virtual memory, before the CPU is able to confirm that a page table entry is valid. Once the Page Table Entry is set as invalid, the CPU signals a Terminal Fault to the OS.

L1 Terminal Fault affects the following systems:

  • Operating systems running virtual machines.
  • Cloud instances: Depending on the cloud provider's infrastructure, it might be even possible to steal data from other customers.


Our team is working on updating all the affected Virtual Machines and Cloud Images available through Bitnami in all our cloud providers. This will ensure that all new launches will be secured against this issue.

At this time, there are patches available for the following operating systems:
  • Debian
  • Ubuntu
  • Oracle Linux
  • Red Hat Enterprise Linux
  • CentOS
  • Amazon Linux
If you are running a Bitnami stack, or you have any running server or virtual machine, we encourage you to apply these patches immediately in order to avoid exploitation of this security issue. You need to update the operating system yourself.

In order to update your operating system, you must follow the instructions below (depending on your distribution or operating system):
  • Debian 9, Ubuntu 14, Ubuntu 16 and 18: Create a full backup of the disk, and then execute the command below.
sudo apt-get update && sudo apt-get dist-upgrade
  • Oracle Linux, Red Hat, CentOS and Amazon Linux: Create a full backup of the disk, and then execute the command below.
sudo yum update
  • Windows and macOS:
Update your system packages when the operating system suggests it. Enable the "Check for updates" option in Windows to get the latest updates and patches.

Once you have completed the steps above, you will have the updated kernel/operating system version after rebooting your server. If you are running on a Linux server, execute the following command to restart it:

sudo shutdown -r now 'Kernel upgrade requires reboot'

NOTE: If, after rebooting, you cannot access the instance via browser or SSH, it is highly likely that the cloud provider assigned a new dynamic IP address to your instance. In this case, enter your cloud provider administration panel to check the new IP address.

If you have any questions about this process, please post to our community support forum and we will be happy to help!

Check out the official Foreshadow site [4] and the RedHat article explaining the attack [5], for more information.

More information can be found in the following links:
Labels: ,

Monday, August 6, 2018

SegmentSmack: Linux Kernel TCP Vulnerability

[UPDATE 2018-08-08]

The Bitnami Team is happy to announce that the Bitnami Launchpad images for AWS, Azure, Google and Oracle (Debian) were updated with the security fix. We also updated the AWS Community and the Bitnami Cloud Hosting Debian images. We continue tracking the packages of the rest of the platforms to publish them as soon as possible.

If you are using a Bitnami Virtual Machine, we also updated those images using the new packages.

[UPDATE 2018-08-07]

Updated information of the affected kernels and methods to patch the images

----

A new security vulnerability in the Linux Kernel known as SegmentSmack (CVE-2018-5390) was publicly disclosed today. It allows attackers to trigger the most resource-intensive code paths for TCP stream reassembly with low rates of specially crafted packets, leading to a remote denial of service. 

The affected versions of the Linux kernel are versions 4.9+ and maintaining the denial of service condition requires continuous two-way TCP sessions to a reachable open port.

We believe it is of the utmost importance to quickly address any security issues in applications distributed by Bitnami. For that reason, our team is working to update all of the affected images available through Bitnami as quickly as possible.

If you have any existing running server (virtual machines) or if you have a Bitnami stack installed on your computer, you will need to update the operating system on your own. Once a new, patched kernel is available from the operating system vendor, you can update it by following the instructions below


Affected Platforms 



To check if your system is not vulnerable, execute the command below:

    uname -a

The output you obtain after running the above command indicates the version of the kernel package you currently have installed and running on your system. Only versions 4.9+ of the Linux kernel are vulnerable, find in the list below which are the kernel versions you should have to make sure that your system is not vulnerable:

Debian 8 (Jessie)
Debian Jessie kernel should be equal or greater than 3.16.57-2.

 Debian 9 (Stretch)
Debian Stretch kernel should be equal or greater than 4.9.110-3+deb9u1.

Ubuntu 16.04 in Azure
Ubuntu 16.04 kernel version in Azure should be equal or greater than 4.15.0-1019-azure.

Oracle Enterprise Linux
This distribution is not affected.

Other distributions: RHEL, CentOS, Ubuntu 16.04 in AWS, ...
There is not any new package for these Linux distributions at the moment of writing this.

How To Patch It 


 Debian / Ubuntu

    sudo apt-get update && sudo apt-get dist-upgrade

Oracle Enterprise Linux

 This distribution is not affected.

 Other distributions: RHEL, CentOS, Ubuntu 16.04 in AWS, ...

There is not any new package for these Linux distributions. (Keep checking back for updates!)

Reboot your server/operating system after running the commands.

Once you have completed the steps above, you will have the fixed version of the kernel/operating system running on your server. If you have any question about this process, please post it in our community support forum. We will be happy to help!
Labels: ,

Wednesday, May 23, 2018

Kernel Side-Channel Attack using Speculative Store Bypass

[2018-09-17]

Updated information with the commands to update the Debian packages

 [2018-05-25]

Bitnami has now released all the Ubuntu, Red Hat, CentOS and Oracle Linux based images with the new kernel available. Updates are being propagated to the Bitnami Launchpads and the different Cloud Platforms.

----

Description

A new CPU security vulnerability has been found. This, it is similar to the Meltdown and Spectre flaws that were revealed earlier this year. Labelled as “Speculative Store Bypass” or “Variant 4”, the latest vulnerability exploits the speculative execution that modern CPUs use.

Meltdown and Spectre exploit critical vulnerabilities in modern processors. These hardware bugs allow programs to steal the data available on the computer’s memory. They were publicly disclosed on January, 4th 2018.

This new vulnerability affects modern out-of-order execution processor cores from Intel, AMD, and ARM. This means that mobile devices are also affected. It can be potentially exploited by script files running within a program to lift sensitive information out of other parts of the application. Intel describes it as:

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

We believe it is of the utmost importance to quickly address any security issues in applications distributed by Bitnami. Our team is working on updating the affected Virtual Machines and Cloud Images available through Bitnami, for all of our cloud provider partners. This will ensure that all new launches will be secured against these issues. If you have an existing running server (virtual machines) or if you have a Bitnami stack installed on your computer, you will need to update the operating system on your own.

Once a new, patched kernel is available from the operating system vendor, you can update it by following these instructions (depending on your distribution/operating system):

  • Ubuntu

       sudo apt-get update && sudo apt-get dist-upgrade

  • Debian

       sudo apt-get update && sudo apt-get dist-upgrade

  • Oracle Linux, Red Hat, CentOS and Amazon Linux

       sudo yum update

  • Windows / OSX
   Update your system packages when the operating system suggests  
   to. Enable "Check for updates" in Windows in order to get the 
   latest updates and patches.

Once you have completed the steps above, you will have the fixed version of the kernel/operating system after rebooting your server.

If you have any questions about this process, please post to our community support forum and we will be happy to help!
Labels: , , ,

Thursday, January 4, 2018

Spectre and Meltdown: Privileged memory read vulnerability in several CPUs (Reading privileged memory with a side-channel)


If you are looking for the " MDS attacks against Intel CPUs and Zombieload vulnerability", please go to the link below for the latest updates and instructions on how to update your operating system immediately.

https://blog.bitnami.com/2019/05/mds-attacks-against-intel-cpus-and.html

_________________________________________________________________________________

Updates
[2018-02-08]
Summary:

Last year Google's Project Zero discovered three vulnerabilities affecting many modern processors. At this point most of the operating systems have released fixed kernels addressing these issues.

Debian considers CVE-2017-5715 and CVE-2017-5753 of medium severity and there is no estimated date for the kernel fixes release.

In order to completely address these issues processor or hypervisor updates might be required. If you have any questions about fully mitigating these issues in your servers, you should contact your cloud provider.

[2018-01-26]

[2018-01-23]
  • Bitnami is in the process of releasing the cloud images based on these platforms to include the patched kernels.
  • Spectre (CVE-2017-5715, CVE-2017-5753) fixes for kernel versions 4.4.x and 3.13.x have been released for Ubuntu 16.04 and Ubuntu 14.04.
[2018-01-12]
[2018-01-10]

[2018-01-08]
[2018-01-06]
  • Oracle Linux 7 patched kernel is now available. Bitnami continue working on releasing new images based on this OS. 
  • Bitnami has now released most of the images with the new kernel available in the Open Telekom Cloud Launchpad (95% done).

[2018-01-05]

  • Patched kernels have been released for Amazon Linux, CentOS and RedHat.
  • Bitnami is in the process of releasing new virtual machines and cloud images based on these platforms to include the patched kernels.
  • Please perform the security test to know if your servers have been affected. For steps on how to do so, you can follow our guide here: https://docs.bitnami.com/general/security/.

Description


On January, 4th 2018 three vulnerabilities affecting many modern processors were publicly disclosed:

  • Spectre (CVE-2017-5753, CVE-2017-5715)
  • Meltdown (CVE-2017-5754)

Meltdown and Spectre exploit critical vulnerabilities in modern processors. These hardware bugs allow programs to steal data, which is currently available on the computer’s memory. While programs are typically not permitted to read data from other programs, a malicious program could exploit Meltdown and Spectre to get hold of the secrets stored in the memory of other running programs. This might include: passwords stored in a password manager or browser, personal photos, emails, instant messages, and even business-critical documents.

Meltdown and Spectre affect the following platforms and devices:
  • Personal computers
  • Mobile devices
  • Cloud instances: Depending on the cloud provider's infrastructure, it might even be possible to steal data from other customers.
At this time, there are patches against Meltdown for Linux, Windows and OSX. This is translated into patched kernels, patched hypervisors, and new versions of operating systems. Note that the kernel fixes for this CPU bug will have a performance impact, estimated by some sources to be from 5% to around 30%, depending on workloads.

At the moment, there is work being done to harden software against future exploitation of Spectre.

----

We believe it is of the utmost importance to quickly address any security issues in applications distributed by Bitnami. Our team is working on updating all affected Virtual Machines and Cloud Images available through Bitnami, for all of our cloud provider partners. This will ensure that all new launches will be secured against these issues. If you have an existing running server (virtual machines) or if you have a Bitnami stack installed on your computer, you will need to update the operating system on your own.

Once a new, patched kernel is available from the operating system vendor, you can update it by following these instructions (depending on your distribution/operating system):
  • Ubuntu / Debian
sudo apt-get update && sudo apt-get dist-upgrade 
  • Oracle Linux, Red Hat, CentOS and Amazon Linux
sudo yum update 
  • Windows / OSX
    Update your system packages when the operating system suggests to. Enable "Check for updates" in Windows in order to get the latest updates and patches.

Once you have completed the steps above, you will have the fixed version of the kernel/operating system after rebooting your server.

If you have any questions about this process, please post to our community support forum and we will be happy to help!

For Frequently Asked Questions regarding these vulnerabilities, please take a look at the official webpage:
https://meltdownattack.com/#faq

More information can be found at the following links:
Labels: ,

Wednesday, February 22, 2017

Security notification: DCCP double-free kernel vulnerability (CVE-2017-6074)


[UPDATE 2017-02-28]

Updated blog post with the steps to update CentOS and Oracle Linux kernels

----

 [UPDATE 2017-02-23]

Updated blog post with the steps to update Debian and RedHat kernels

----

A new security vulnerability in the Linux kernel has been discovered. You can find more information about this vulnerability in the following research report: "DCCP double-free vulnerability".

Even though the Linux kernel code affected was implemented before 2006, it is not a remotely exploitable vulnerability. Therefore, you can continue using any of the Bitnami Cloud Images or Virtual Machines without being affected. We also want to let you know that our containers offering is not affected by this security vulnerability.

At the time of this post, a new patched kernel has only been released for Ubuntu. We will update this blog post as kernel patches for other distributions become available. You can update your appropriate kernel by running the following commands (you must run the command specific to your distribution):

Ubuntu 


 sudo apt-get update && sudo apt-get dist-upgrade 

 You will have the fixed version of the kernel after rebooting your server. You will get a similar output than this one when running `uname -a`

Linux ip-172-31-32-244 3.13.0-110-generic #157-Ubuntu SMP Mon Feb 20 11:54:05 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux

Debian


sudo apt-get update && sudo apt-get dist-upgrade 

You will have the fixed version of the kernel after rebooting your server. You will get a similar output than this one when running `uname -a`

Linux bitnami-wordpress-dm-1d22 3.16.0-4-amd64 #1 SMP Debian 3.16.39-1+deb8u1 (2017-02-22) x86_64 GNU/Linux

RedHat


sudo yum update 

You will have the fixed version of the kernel after rebooting your server. You will get a similar output than this one when running `uname -a`

Linux ip-10-99-173-165.ec2.internal 3.10.0-514.6.2.el7.x86_64 #1 SMP Fri Feb 17 19:21:31 EST 2017 x86_64 x86_64 x86_64 GNU/Linux

CentOS


sudo yum update 

You will have the fixed version of the kernel after rebooting your server. You will get a similar output than this one when running `uname -a`

Linux localhost.localdomain 3.10.0-514.6.2.el7.x86_64 #1 SMP Thu Feb 23 03:04:39 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux

Oracle Linux


sudo yum update 

You will have the fixed version of the kernel after rebooting your server. You will get a similar output than this one when running `uname -a`

Linux bitnami-wordpress-0 4.1.12-61.1.28.el6uek.x86_64 #2 SMP Thu Feb 23 20:03:53 PST 2017 x86_64 x86_64 x86_64 GNU/Linux

If you have any questions about this process, please post to our community support forum and we will be happy to help!
Labels: ,

Thursday, October 20, 2016

Dirty COW (CVE-2016-5195): Privilege escalation vulnerability in the Linux Kernel

[2016-10-26]

 All the affected cloud images and virtual machines have been successfully patched.

If you are using a Bitnami Cloud Hosting instance, you can easily patch it by following the guide below while we upgrade the base images.

 [2016-10-24]

The Bitnami Team is happy to announce that our images on Google, Azure, AWS Marketplace and regular images have been properly updated. Additionally, we will continue to work on releasing the images for our all of our cloud platform partners and virtual machines.

----

A new security vulnerability in the linux kernel has been discovered. You can find out more information about it in the following research report.

A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write (COW) breakage of private read-only memory mappings. An unprivileged local user could use this flaw to gain write access to otherwise read-only memory mappings and thus increase their privileges on the system.

This could be abused by an attacker to modify existing setuid files with instructions to elevate privileges.

We believe it is of the utmost importance to quickly address any security issues in applications distributed by Bitnami and our team is working to update all of the affected Virtual Machines and Cloud Images available through Bitnami for all Cloud Providers.

Once the new kernel is available, you can update it by running the following commands (you must run the command specific to your distribution):

  • Ubuntu / Debian
sudo apt-get update && sudo apt-get dist-upgrade 

You will have the fixed version of the kernel after rebooting your server.

  • Oracle Linux, Red Hat, CentOS and Amazon Linux
sudo yum update 

You will have the fixed version of the kernel after rebooting your server.

If you have any questions about this process, please post to our community support forum and we will be happy to help! 
Labels: , , , ,

Friday, August 12, 2016

Security Notification: Off-Path TCP Linux Kernel Vulnerability (CVE-2016-5696)

[UPDATE: 2016-08-22]

 BCH images have been updated properly. You can now launch new servers that mitigate the vulnerability.

 [UPDATE: 2016-08-18]

All the affected cloud images and virtual machines have been successfully patched.

 If you are using a Bitnami Cloud Hosting instance, you can easily patch it following the guide below while we upgrade the base images. 

[UPDATE: 2016-08-17]

 The Bitnami Team is happy to announce that the images of Google, Azure, 1&1 and GoDaddy have been updated properly. Additionally, we continue working on releasing the images for our all of our cloud platform partners, virtual machines and the native installers.

 ----

A new security vulnerability in the linux kernel has been discovered. You can find out more information about it in the following research report: "Off-Path TCP Exploits: Global Rate Limit Considered Dangerous".

Since the Linux kernel code affected was implemented in 2012 (in Linux Kernel 3.6), all Bitnami-packaged images might be affected by this issue if the kernel hasn't been updated. At the time of writing this post, a new patched kernel has NOT been released for Debian and Ubuntu distributions that are the base OS for most of the Bitnami Virtual Machines. We will keep you updated in this blog post.

We believe it is of the utmost importance to quickly address any security issues in applications distributed by Bitnami and our team is working to update all of the affected Virtual Machines and Cloud Images available through Bitnami for all Cloud Providers. 

 In the meantime, you can mitigate this problem by applying the following patch in your system:
sysctl net.ipv4.tcp_challenge_ack_limit=1073741823; grep -q tcp_challenge_ack_limit /etc/sysctl.conf || echo "net.ipv4.tcp_challenge_ack_limit=1073741823" >> /etc/sysctl.conf
Please, note that this is just a temporary solution that makes it a lot harder for attackers to succeed in exploiting this vulnerability. You can find more information about this temporary fix in a writeup on the Akamai blog.

Once the new kernel is available, you can update it by running the following commands (you must run the command specific to your distribution):
  • Ubuntu 
sudo apt-get update && sudo apt-get dist-upgrade 
You will have the fixed version of the kernel after rebooting your server.

  • Debian 
sudo apt-get update && sudo apt-get dist-upgrade 
You will have the fixed version of the kernel after rebooting your server.

  • Oracle Linux 
sudo yum update
sudo yum upgrade
You will have the fixed version of the kernel after rebooting your server.


  • Amazon Linux & RedHat Linux
sudo yum clean all
sudo yum update kernel
You will have the fixed version of the kernel after rebooting your server. 
If you have any questions about this process, please post to our community support forum and we will be happy to help! 
Labels: , , ,

Friday, January 22, 2016

Security Notification: Linux kernel vulnerability (CVE-2016-0728)


UPDATE: January 22, 2016

 As of this posting, all affected Bitnami virtual machines and cloud images have been patched for Linux kernel vulnerability CVE-2016-0728. This includes all downloadable virtual machines as as well as Bitnami images on Amazon AWS, Bitnami Cloud Hosting, Centurylink, Digital Ocean, Google Cloud Platform, Microsoft Azure, Oracle Cloud Platform, and VMware vCloud Air public clouds.

 For instructions on how to patch currently running systems, please see below.

------------------------------------

A new security vulnerability in the linux kernel has been discovered. You can find out more information about it in this link.

Any Bitnami-packaged image that was launched before January 20th, 2016 could be vulnerable if it has the version 3.8 of the kernel or later.

We believe it is of the utmost importance to quickly address any security issues in applications distributed by Bitnami and our team is working to update all of the affected Virtual Machines and Cloud Images available through Bitnami for all Cloud Providers.

Please take a moment to check if your image is vulnerable by following the instructions in our wiki:

 https://wiki.bitnami.com/security/2016-01-20_LINUX_KERNEL_VULNERABILITY_(CVE-2016-0728)


You can update the version of the kernel running the following commands (you must run the command specific to your distribution):

  • Ubuntu 
sudo apt-get update && sudo apt-get dist-upgrade

You'll have the fixed version of the kernel after rebooting your server: 3.13.0-76-generic
  • Debian 
sudo apt-get update && sudo apt-get dist-upgrade

You'll have the fixed version of the kernel after rebooting your server: 3.16.7-ckt20-1

  • Oracle Linux 
sudo yum update
sudo yum upgrade

You'll have the fixed version of the kernel after rebooting your server: 3.8.13-118.2.5.el6uek.x86_64
  • Amazon Linux 
sudo yum clean all
sudo yum update kernel

You'll have the fixed version of the kernel after rebooting your server: 4.1.13-19.31.amzn1.x86_64
  • RedHat Linux. The version Red Hat 6.6 is not affected by this issue.

If you have any questions about this process, please post to our community support forum and we will be happy to help!
Labels: , , , , ,

Wednesday, May 14, 2014

Security fix for Linux kernel

A new version of the Linux kernel has been recently released in all distributions to fix a memory-corruption security issue CVE-2014-0196. This issue allowed unprivileged users to crash or execute malicious code on vulnerable systems.

We strongly recommend that all Bitnami users upgrade their Linux kernel. The process for upgrading is slightly different for the various platforms, but note that for every Linux distribution it will be necessary to reboot the machine in order to use the new kernel version.

- Bitnami Ubuntu based virtual machines and cloud images: Log in the machine and run the following commands:

 $ sudo apt-get update
$ sudo apt-get install linux-headers-virtual linux-image-virtual linux-virtual
$ sudo reboot

- Bitnami Red Hat and Amazon Linux based Cloud Images:

$ sudo yum update kernel
$ sudo reboot

After rebooting the server, you can check you are running a fixed kernel version with the following command:

$ uname -r

For those of you who use Ubuntu 12.04 ensure you are running the "3.2.0-61" version, for Red Hat 6 the "2.6.32-431.17.1" version and for Amazon Linux the "3.10.38-49.136" version.


Labels: , , ,
Subscribe to: Posts (Atom)


Copyright © 2005-2024 Broadcom.
All Rights Reserved. The term "Broadcom" refers to Broadcom Inc. and/or its subsidiaries.