Mehrere Probleme in Linux
ID: | FEDORA-2018-262eb7c289 |
Distribution: | Fedora |
Plattformen: | Fedora 27 |
Datum: | Mi, 24. Januar 2018, 07:24 |
Referenzen: | http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5332
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5333 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5344 |
Applikationen: | Linux |
Originalnachricht |
|
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2018-262eb7c289 2018-01-23 21:42:17.543761 -------------------------------------------------------------------------------- Name : kernel Product : Fedora 27 Version : 4.14.14 Release : 300.fc27 URL : http://www.kernel.org/ Summary : The Linux kernel Description : The kernel meta package -------------------------------------------------------------------------------- Update Information: The 4.14.14 stable update contains a number of important fixes across the tree. This update also includes some PPC mitigations, and has been built with a retpoline capable compiler for improved Spectre mitigation on x86_64. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1533891 - CVE-2018-5333 kernel: Null pointer dereference in rds_atomic_free_op() allowing denial-of-service https://bugzilla.redhat.com/show_bug.cgi?id=1533891 [ 2 ] Bug #1533890 - CVE-2018-5332 kernel: rds_message_alloc_sgs() function doesn't validate value used during DMA page allocation causes heap out-of-bounds write https://bugzilla.redhat.com/show_bug.cgi?id=1533890 [ 3 ] Bug #1533909 - CVE-2018-5344 kernel: drivers/block/loop.c mishandles lo_release serialization allowing denial-of-service https://bugzilla.redhat.com/show_bug.cgi?id=1533909 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade kernel' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org |