Fedora 29: kernel Security Update 2019-87e7046631
Summary
The kernel meta package
The 4.20.14 stable kernel update contains a number of important fixes across the
tree.
* Tue Mar 5 2019 Justin M. Forbes
- Linux v4.20.14
* Wed Feb 27 2019 Justin M. Forbes
- Linux v4.20.13
- Fix for NFS issue (rhbz 1683382)
* Mon Feb 25 2019 Justin M. Forbes
- Linux v4.20.12
* Fri Feb 22 2019 Justin M. Forbes
- Fix CVE-2019-8980 (rhbz 1679972 1679974)
* Wed Feb 20 2019 Justin M. Forbes
- Linux v4.20.11
* Tue Feb 19 2019 Justin M. Forbes
- Fix CVE-2019-8912 (rhbz 1678685 1678686)
* Fri Feb 15 2019 Justin M. Forbes
- Linux v4.20.10
* Tue Feb 12 2019 Justin M. Forbes
- Linux v4.20.8
- Fixes CVE-2019-7221 (rhbz 1671904 1673676)
- Fixes CVE-2019-6974 (rhbz 1671913 1673681)
- Fixes CVE-2019-7222 (rhbz 1671930 1673686)
* Mon Feb 11 2019 Peter Robinson
- Minor Arm fixes and enhancements
* Wed Feb 6 2019 Justin M. Forbes
- Linux v4.20.7
* Thu Jan 31 2019 Justin M. Forbes
- Linux v4.20.6
* Mon Jan 28 2019 Justin M. Forbes
- Linux v4.20.5
- Fix CVE-2018-16880 (rhbz 1656472 1669545)
* Wed Jan 23 2019 Hans de Goede
- Add upstream patch fixing backlight control not working on some laptops
with a Nvidia GPU (rhbz#1663613, rhbz#1665505)
* Wed Jan 23 2019 Justin M. Forbes
- Linux v4.20.4
* Thu Jan 17 2019 Justin M. Forbes
- Linux v4.20.3 rebase
* Mon Jan 14 2019 Jeremy Cline
- Linux v4.19.15
- Fix CVE-2019-3459 and CVE-2019-3460 (rbhz 1663176 1663179 1665925)
* Wed Jan 9 2019 Jeremy Cline
- Linux v4.19.14
* Wed Jan 9 2019 Justin M. Forbes
- Fix CVE-2019-3701 (rhbz 1663729 1663730)
* Mon Jan 7 2019 Hans de Goede
- Add patch to fix bluetooth on RPI 3B+ registering twice (rhbz#1661961)
* Sat Dec 29 2018 Jeremy Cline
- Linux v4.19.13
* Thu Dec 27 2018 Hans de Goede
- Set CONFIG_REALTEK_PHY=y to workaround realtek ethernet issues (rhbz 1650984)
* Mon Dec 24 2018 Peter Robinson
- Another fix for issue affecting Raspberry Pi 3-series WiFi (rhbz 1652093)
* Sat Dec 22 2018 Peter Robinson
- Linux v4.19.12
* Thu Dec 20 2018 Jeremy Cline
- Linux v4.19.11
* Mon Dec 17 2018 Jeremy Cline
- Linux v4.19.10
* Fri Dec 14 2018 Peter Robinson
- Fix Raspberry Pi issues affecting WiFi (rhbz 1652093)
* Thu Dec 13 2018 Jeremy Cline
- Linux v4.19.9
* Tue Dec 11 2018 Hans de Goede
- Really fix non functional hotkeys on Asus FX503VD (#1645070)
* Mon Dec 10 2018 Jeremy Cline
- Linux v4.19.8
* Thu Dec 6 2018 Peter Robinson
- Fix for ethernet LEDs on Raspberry Pi 3B+
* Wed Dec 5 2018 Jeremy Cline
- Linux v4.19.7
* Wed Dec 5 2018 Jeremy Cline
- Fix corruption bug in direct dispatch for blk-mq
* Tue Dec 4 2018 Justin M. Forbes
- Fix CVE-2018-19824 (rhbz 1655816 1655817)
* Mon Dec 3 2018 Jeremy Cline
- Fix very quiet speakers on the Thinkpad T570 (rhbz 1554304)
* Mon Dec 3 2018 Hans de Goede
- Fix non functional hotkeys on Asus FX503VD (#1645070)
* Sun Dec 2 2018 Jeremy Cline
- Linux v4.19.6
* Thu Nov 29 2018 Jeremy Cline
- Fix a problem with some rtl8168 chips (rhbz 1650984)
- Fix slowdowns and crashes for AMD GPUs in pre-PCIe-v3 slots
* Tue Nov 27 2018 Jeremy Cline
- Linux v4.19.5
- Fix CVE-2018-16862 (rhbz 1649017 1653122)
- Fix CVE-2018-19407 (rhbz 1652656 1652658)
* Mon Nov 26 2018 Jeremy Cline
- Fixes a null pointer dereference with Nvidia and vmwgfx drivers (rhbz 1650224)
* Fri Nov 23 2018 Peter Robinson
- Linux v4.19.4
* Thu Nov 22 2018 Peter Robinson
- Fixes for Rockchips 3399 devices
* Wed Nov 21 2018 Jeremy Cline
- Linux v4.19.3
* Tue Nov 20 2018 Hans de Goede
- Turn on CONFIG_PINCTRL_GEMINILAKE on x86_64 (rhbz#1639155)
- Add a patch fixing touchscreens on HP AMD based laptops (rhbz#1644013)
- Add a patch fixing KIOX010A accelerometers (rhbz#1526312)
* Sat Nov 17 2018 Peter Robinson
- Fix WiFi on Raspberry Pi 3 on aarch64 (rhbz 1649344)
- Fixes for Raspberry Pi hwmon driver and firmware interface
* Fri Nov 16 2018 Hans de Goede
- Add patches from 4.20 fixing black screen on CHT devices with i915.fastboot=1
* Thu Nov 15 2018 Hans de Goede
- Add patch fixing touchpads on some Apollo Lake devices not working (#1526312)
* Wed Nov 14 2018 Jeremy Cline
- Linux v4.19.2
- Fix CVE-2018-18710 (rhbz 1645140 1648485)
* Mon Nov 12 2018 Laura Abbott
- Linux v4.18.18
* Mon Nov 5 2018 Laura Abbott
- Linux v4.18.17
* Tue Oct 23 2018 Laura Abbott
- Add i915 eDP fixes
[ 1 ] Bug #1686136 - CVE-2019-9213 kernel: lack of check for mmap minimum address in expand_downwards in mm/mmap.c leads to NULL pointer dereferences exploit on non-SMAP platforms
https://bugzilla.redhat.com/show_bug.cgi?id=1686136
su -c 'dnf upgrade --advisory FEDORA-2019-87e7046631' at the command
line. For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/
FEDORA-2019-87e7046631 2019-03-10 18:22:48.729645 Product : Fedora 29 Version : 4.20.14 Release : 200.fc29 URL : https://www.kernel.org/ Summary : The Linux kernel Description : The kernel meta package The 4.20.14 stable kernel update contains a number of important fixes across the tree. * Tue Mar 5 2019 Justin M. Forbes - 4.20.14-200 - Linux v4.20.14 * Wed Feb 27 2019 Justin M. Forbes - 4.20.13-200 - Linux v4.20.13 - Fix for NFS issue (rhbz 1683382) * Mon Feb 25 2019 Justin M. Forbes - 4.20.12-200 - Linux v4.20.12 * Fri Feb 22 2019 Justin M. Forbes - Fix CVE-2019-8980 (rhbz 1679972 1679974) * Wed Feb 20 2019 Justin M. Forbes - 4.20.11-200 - Linux v4.20.11 * Tue Feb 19 2019 Justin M. Forbes - Fix CVE-2019-8912 (rhbz 1678685 1678686) * Fri Feb 15 2019 Justin M. Forbes - 4.20.10-200 - Linux v4.20.10 * Tue Feb 12 2019 Justin M. Forbes - 4.20.8-200 - Linux v4.20.8 - Fixes CVE-2019-7221 (rhbz 1671904 1673676) - Fixes CVE-2019-6974 (rhbz 1671913 1673681) - Fixes CVE-2019-7222 (rhbz 1671930 1673686) * Mon Feb 11 2019 Peter Robinson - Minor Arm fixes and enhancements * Wed Feb 6 2019 Justin M. Forbes - 4.20.7-200 - Linux v4.20.7 * Thu Jan 31 2019 Justin M. Forbes - 4.20.6-200 - Linux v4.20.6 * Mon Jan 28 2019 Justin M. Forbes - 4.20.5-200 - Linux v4.20.5 - Fix CVE-2018-16880 (rhbz 1656472 1669545) * Wed Jan 23 2019 Hans de Goede - Add upstream patch fixing backlight control not working on some laptops with a Nvidia GPU (rhbz#1663613, rhbz#1665505) * Wed Jan 23 2019 Justin M. Forbes - 4.20.4-200 - Linux v4.20.4 * Thu Jan 17 2019 Justin M. Forbes - 4.20.3-200 - Linux v4.20.3 rebase * Mon Jan 14 2019 Jeremy Cline - 4.19.15-300 - Linux v4.19.15 - Fix CVE-2019-3459 and CVE-2019-3460 (rbhz 1663176 1663179 1665925) * Wed Jan 9 2019 Jeremy Cline - 4.19.14-300 - Linux v4.19.14 * Wed Jan 9 2019 Justin M. Forbes - Fix CVE-2019-3701 (rhbz 1663729 1663730) * Mon Jan 7 2019 Hans de Goede - Add patch to fix bluetooth on RPI 3B+ registering twice (rhbz#1661961) * Sat Dec 29 2018 Jeremy Cline - 4.19.13-300 - Linux v4.19.13 * Thu Dec 27 2018 Hans de Goede - Set CONFIG_REALTEK_PHY=y to workaround realtek ethernet issues (rhbz 1650984) * Mon Dec 24 2018 Peter Robinson 4.19.12-301 - Another fix for issue affecting Raspberry Pi 3-series WiFi (rhbz 1652093) * Sat Dec 22 2018 Peter Robinson 4.19.12-300 - Linux v4.19.12 * Thu Dec 20 2018 Jeremy Cline - 4.19.11-300 - Linux v4.19.11 * Mon Dec 17 2018 Jeremy Cline - 4.19.10-300 - Linux v4.19.10 * Fri Dec 14 2018 Peter Robinson 4.19.9-301 - Fix Raspberry Pi issues affecting WiFi (rhbz 1652093) * Thu Dec 13 2018 Jeremy Cline - 4.19.9-300 - Linux v4.19.9 * Tue Dec 11 2018 Hans de Goede - Really fix non functional hotkeys on Asus FX503VD (#1645070) * Mon Dec 10 2018 Jeremy Cline - 4.19.8-300 - Linux v4.19.8 * Thu Dec 6 2018 Peter Robinson - Fix for ethernet LEDs on Raspberry Pi 3B+ * Wed Dec 5 2018 Jeremy Cline - 4.19.7-300 - Linux v4.19.7 * Wed Dec 5 2018 Jeremy Cline - Fix corruption bug in direct dispatch for blk-mq * Tue Dec 4 2018 Justin M. Forbes - Fix CVE-2018-19824 (rhbz 1655816 1655817) * Mon Dec 3 2018 Jeremy Cline - Fix very quiet speakers on the Thinkpad T570 (rhbz 1554304) * Mon Dec 3 2018 Hans de Goede - Fix non functional hotkeys on Asus FX503VD (#1645070) * Sun Dec 2 2018 Jeremy Cline - 4.19.6-300 - Linux v4.19.6 * Thu Nov 29 2018 Jeremy Cline - Fix a problem with some rtl8168 chips (rhbz 1650984) - Fix slowdowns and crashes for AMD GPUs in pre-PCIe-v3 slots * Tue Nov 27 2018 Jeremy Cline - 4.19.5-300 - Linux v4.19.5 - Fix CVE-2018-16862 (rhbz 1649017 1653122) - Fix CVE-2018-19407 (rhbz 1652656 1652658) * Mon Nov 26 2018 Jeremy Cline - Fixes a null pointer dereference with Nvidia and vmwgfx drivers (rhbz 1650224) * Fri Nov 23 2018 Peter Robinson - 4.19.4-300 - Linux v4.19.4 * Thu Nov 22 2018 Peter Robinson - Fixes for Rockchips 3399 devices * Wed Nov 21 2018 Jeremy Cline - 4.19.3-300 - Linux v4.19.3 * Tue Nov 20 2018 Hans de Goede - Turn on CONFIG_PINCTRL_GEMINILAKE on x86_64 (rhbz#1639155) - Add a patch fixing touchscreens on HP AMD based laptops (rhbz#1644013) - Add a patch fixing KIOX010A accelerometers (rhbz#1526312) * Sat Nov 17 2018 Peter Robinson 4.19.2-301 - Fix WiFi on Raspberry Pi 3 on aarch64 (rhbz 1649344) - Fixes for Raspberry Pi hwmon driver and firmware interface * Fri Nov 16 2018 Hans de Goede - Add patches from 4.20 fixing black screen on CHT devices with i915.fastboot=1 * Thu Nov 15 2018 Hans de Goede - Add patch fixing touchpads on some Apollo Lake devices not working (#1526312) * Wed Nov 14 2018 Jeremy Cline - 4.19.2-300 - Linux v4.19.2 - Fix CVE-2018-18710 (rhbz 1645140 1648485) * Mon Nov 12 2018 Laura Abbott - 4.18.18-300 - Linux v4.18.18 * Mon Nov 5 2018 Laura Abbott - 4.18.17-300 - Linux v4.18.17 * Tue Oct 23 2018 Laura Abbott - Add i915 eDP fixes [ 1 ] Bug #1686136 - CVE-2019-9213 kernel: lack of check for mmap minimum address in expand_downwards in mm/mmap.c leads to NULL pointer dereferences exploit on non-SMAP platforms https://bugzilla.redhat.com/show_bug.cgi?id=1686136 su -c 'dnf upgrade --advisory FEDORA-2019-87e7046631' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org Fedora Code of Conduct: List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/
Change Log
References