Sigurnosni nedostaci jezgre operacijskog sustava

Preporuke

by - 10. lipnja 2019.0

Detalji os-a: WN7
Važnost: IMP
Operativni sustavi: L
Kategorije: LFE

——————————————————————————–
Fedora Update Notification
FEDORA-2019-f40bd7826f
2019-06-10 00:52:33.021759
——————————————————————————–

Name : kernel-headers
Product : Fedora 30
Version : 5.1.7
Release : 300.fc30
URL : http://www.kernel.org/
Summary : Header files for the Linux kernel for use by glibc
Description :
Kernel-headers includes the C header files that specify the interface
between the Linux kernel and userspace libraries and programs. The
header files define structures and constants that are needed for
building most standard programs and are also needed for rebuilding the
glibc package.

——————————————————————————–
Update Information:

Update to v5.1.7
——————————————————————————–
ChangeLog:

* Tue Jun 4 2019 Jeremy Cline <jcline@redhat.com> – 5.1.7-300
– Linux v5.1.7
* Sat May 25 2019 Jeremy Cline <jcline@redhat.com> – 5.1.5-300
– Linux v5.1.5
* Wed May 22 2019 Jeremy Cline <jcline@redhat.com> – 5.1.4-300
– Linux v5.1.4
* Wed May 15 2019 Justin M. Forbes <jforbes@fedoraproject.org> – 5.0.16-300
– Linux v5.0.16
——————————————————————————–
References:

[ 1 ] Bug #1717003 – CVE-2019-12454 CVE-2019-12455 kernel: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1717003
[ 2 ] Bug #1715706 – CVE-2019-12379 kernel: memory leak in con_insert_unipair in drivers/tty/vt/consolemap.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1715706
[ 3 ] Bug #1715556 – CVE-2019-12382 kernel: unchecked kstrdup of fwstr in drm_load_edid_firmware leads to denial of service [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1715556
[ 4 ] Bug #1715502 – CVE-2019-12381 kernel: unchecked kmalloc of new_ra in ip_ra_control leads to denial of service [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1715502
[ 5 ] Bug #1715495 – CVE-2019-12380 kernel: memory allocation failure in the efi subsystem leads to denial of service [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1715495
[ 6 ] Bug #1715475 – CVE-2019-3846 kernel: Heap overflow in mwifiex_update_bss_desc_with_ie function in marvell/mwifiex/scan.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1715475
[ 7 ] Bug #1715460 – CVE-2019-12378 kernel: unchecked kmalloc of new_ra in ip6_ra_control leads to denial of service [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1715460
——————————————————————————–

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade –advisory FEDORA-2019-f40bd7826f’ at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list — package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org

Name : kernel
Product : Fedora 30
Version : 5.1.7
Release : 300.fc30
URL : https://www.kernel.org/
Summary : The Linux kernel
Description :
The kernel meta package

——————————————————————————–
Update Information:

Update to v5.1.7
——————————————————————————–
ChangeLog:

* Tue Jun 4 2019 Jeremy Cline <jcline@redhat.com> – 5.1.7-300
– Linux v5.1.7
– Fix CVE-2019-12455 (rhbz 1716990 1717003)
– Fix CVE-2019-12454 (rhbz 1716996 1717003)
* Mon Jun 3 2019 Justin M. Forbes <jforbes@fedoraproject.org>
– Fix CVE-2019-12378 (rhbz 1715459 1715460)
– Fix CVE-2019-3846 (rhbz 1713059 1715475)
– Fix CVE-2019-12380 (rhbz 1715494 1715495)
– Fix CVE-2019-12381 (rhbz 1715501 1715502)
– Fix CVE-2019-12382 (rhbz 1715554 1715556)
– Fix CVE-2019-12379 (rhbz 1715491 1715706)
* Fri May 31 2019 Laura Abbott <labbott@redhat.com> – 5.1.6-300
– Linux v5.1.6
* Sat May 25 2019 Jeremy Cline <jcline@redhat.com> – 5.1.5-300
– Linux v5.1.5
* Fri May 24 2019 Jeremy Cline <jcline@redhat.com> – 5.1.4-301
– Fix fstrim discarding too many blocks
* Wed May 22 2019 Jeremy Cline <jcline@redhat.com> – 5.1.4-300
– Linux v5.1.4
– Fix an issue with Bluetooth 2.0 and earlier devices (rhbz 1711468)
* Mon May 20 2019 Laura Abbott <labbott@redhat.com> – 5.0.17-300
– Linux v5.0.17
* Tue May 14 2019 Justin M. Forbes <jforbes@fedoraproject.org> – 5.0.16-300
– Linux v5.0.16
– Fixes CVE-2018-12126 (rhbz 1646781 1709976)
– Fixes CVE-2018-12127 (rhbz 1667782 1709978)
– Fixes CVE-2018-12130 (rhbz 1646784 1709989 1709996)
– Fixes CVE-2019-11091 (rhbz 1705312 1709983)
* Mon May 13 2019 Laura Abbott <labbott@redhat.com> – 5.0.15-300
– Linux v5.0.15
– Fixes CVE-2019-11884 (rhbz 1709837 1709838)
* Thu May 9 2019 Laura Abbott <labbott@redhat.com> – 5.0.14-300
– Linux v5.0.14
* Mon May 6 2019 Laura Abbott <labbott@redhat.com> – 5.0.13-300
– Linux v5.0.13
* Sat May 4 2019 Laura Abbott <labbott@redhat.com> – 5.0.12-300
– Linux v5.0.12
* Thu May 2 2019 Laura Abbott <labbott@redhat.com> – 5.0.11-300
– Linux v5.0.11
* Tue Apr 30 2019 Laura Abbott <labbott@redhat.com> – 5.0.10-300
– Linux v5.0.10
* Tue Apr 30 2019 Hans de Goede <hdegoede@redhat.com>
– Fix wifi on various ideapad models not working (rhbz#1703338)
* Thu Apr 25 2019 Justin M. Forbes <jforbes@fedoraproject.org>
– Fix CVE-2019-3900 (rhbz 1698757 1702940)
——————————————————————————–
References:

Autor	Toni Vugdelija
Cert id	NCERT-REF-2019-06-0001-ADV
Cve	CERT-CVE-DUMMY
ID izvornika	CERT-ORIGID-DUMMY
Proizvod	CERT-DUMMY-PRODUCT
Izvor	Adobe

Sigurnosni nedostaci jezgre operacijskog sustava

Archives

More in Preporuke

Sigurnosni nedostatak programskog paketa exim