Fedora 28: 2018-3857a8b41a Critical: Kernel Headers Threat

Kernel-headers includes the C header files that specify the interface

between the Linux kernel and userspace libraries and programs. The

header files define structures and constants that are needed for

building most standard programs and are also needed for rebuilding the

glibc package.

The v4.19.5 stable update contains important fixes across the tree

[ 1 ] Bug #1652656 - CVE-2018-19407 kernel: kvm: NULL pointer dereference in vcpu_scan_ioapic in arch/x86/kvm/x86.c

https://bugzilla.redhat.com/show_bug.cgi?id=1652656

[ 2 ] Bug #1649017 - CVE-2018-16862 kernel: cleancache: Infoleak of deleted files after reuse of old inodes

https://bugzilla.redhat.com/show_bug.cgi?id=1649017

su -c 'dnf upgrade --advisory FEDORA-2018-3857a8b41a' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/