Fedora 28 Kernel-Headers Update: FEDORA-2019-3da64f3e61 Critical Issues

Kernel-headers includes the C header files that specify the interface

between the Linux kernel and userspace libraries and programs. The

header files define structures and constants that are needed for

building most standard programs and are also needed for rebuilding the

glibc package.

The 4.20.8 stable kernel update contains a number of important fixes across the

tree.

[ 1 ] Bug #1671930 - CVE-2019-7222 Kernel: KVM: leak of uninitialized stack contents to guest

https://bugzilla.redhat.com/show_bug.cgi?id=1671930

[ 2 ] Bug #1671913 - CVE-2019-6974 Kernel: KVM: potential use-after-free via kvm_ioctl_create_device()

https://bugzilla.redhat.com/show_bug.cgi?id=1671913

[ 3 ] Bug #1671904 - CVE-2019-7221 Kernel: KVM: nVMX: use-after-free of the hrtimer for emulation of the preemption timer

https://bugzilla.redhat.com/show_bug.cgi?id=1671904

su -c 'dnf upgrade --advisory FEDORA-2019-3da64f3e61' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org