Fedora 27: 2018-262eb7c289 Critical Kernel Update - Spectre Mitigation

The kernel meta package

The 4.14.14 stable update contains a number of important fixes across the tree.

This update also includes some PPC mitigations, and has been built with a

retpoline capable compiler for improved Spectre mitigation on x86_64.

[ 1 ] Bug #1533891 - CVE-2018-5333 kernel: Null pointer dereference in rds_atomic_free_op() allowing denial-of-service

https://bugzilla.redhat.com/show_bug.cgi?id=1533891

[ 2 ] Bug #1533890 - CVE-2018-5332 kernel: rds_message_alloc_sgs() function doesn't validate value used during DMA page allocation causes heap out-of-bounds write

https://bugzilla.redhat.com/show_bug.cgi?id=1533890

[ 3 ] Bug #1533909 - CVE-2018-5344 kernel: drivers/block/loop.c mishandles lo_release serialization allowing denial-of-service

https://bugzilla.redhat.com/show_bug.cgi?id=1533909

su -c 'dnf upgrade kernel' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org