--------------------------------------------------------------------------------Fedora Update Notification
FEDORA-2019-68d7f68507
2019-11-13 06:35:24.660460
--------------------------------------------------------------------------------Name        : kernel
Product     : Fedora 31
Version     : 5.3.11
Release     : 300.fc31
URL         : https://www.kernel.org/
Summary     : The Linux kernel
Description :
The kernel meta package

--------------------------------------------------------------------------------Update Information:

The 5.3.11 stable kernel update contains a number of important security updates
across the tree, including mitigations for the most recent hardware issues
disclosed on Nov 12.
--------------------------------------------------------------------------------ChangeLog:

* Tue Nov 12 2019 Justin M. Forbes  - 5.3.11-300
- Linux v5.3.11
- Fixes CVE-2019-11135	(rhbz 1753062 1771649)
- Fixes CVE-2018-12207	(rhbz 1646768 1771645)
- Fixes CVE-2019-0154	(rhbz 1724393 1771642)
- Fixes CVE-2019-0155	(rhbz 1724398 1771644)
* Mon Nov 11 2019 Laura Abbott  - 5.3.10-300
- Linux v5.3.10
* Thu Nov  7 2019 Jeremy Cline 
- Add support for a number of Macbook keyboards and touchpads (rhbz 1769465)
* Wed Nov  6 2019 Laura Abbott  - 5.3.9-300
- Linux v5.3.9
* Tue Oct 29 2019 Laura Abbott  - 5.3.8-300
- Linux v5.3.8
--------------------------------------------------------------------------------References:

  [ 1 ] Bug #1753062 - CVE-2019-11135 hw: TSX Transaction Asynchronous Abort (TAA)
        https://bugzilla.redhat.com/show_bug.cgi?id=1753062
  [ 2 ] Bug #1646768 - CVE-2018-12207 hw: Machine Check Error on Page Size Change (IPU)
        https://bugzilla.redhat.com/show_bug.cgi?id=1646768
  [ 3 ] Bug #1724393 - CVE-2019-0154 hw: Intel GPU Denial Of Service while accessing MMIO in lower power state
        https://bugzilla.redhat.com/show_bug.cgi?id=1724393
  [ 4 ] Bug #1724398 - CVE-2019-0155 hw: Intel GPU blitter manipulation can allow for arbitrary kernel memory write
        https://bugzilla.redhat.com/show_bug.cgi?id=1724398
  [ 5 ] Bug #1758414 - CVE-2019-0117 hw: Intel SGX information leak
        https://bugzilla.redhat.com/show_bug.cgi?id=1758414
--------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-68d7f68507' at the command
line. For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
--------------------------------------------------------------------------------_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Fedora 31: kernel FEDORA-2019-68d7f68507

November 13, 2019
The 5.3.11 stable kernel update contains a number of important security updates across the tree, including mitigations for the most recent hardware issues disclosed on Nov 12.

Summary

The kernel meta package

The 5.3.11 stable kernel update contains a number of important security updates

across the tree, including mitigations for the most recent hardware issues

disclosed on Nov 12.

* Tue Nov 12 2019 Justin M. Forbes - 5.3.11-300

- Linux v5.3.11

- Fixes CVE-2019-11135 (rhbz 1753062 1771649)

- Fixes CVE-2018-12207 (rhbz 1646768 1771645)

- Fixes CVE-2019-0154 (rhbz 1724393 1771642)

- Fixes CVE-2019-0155 (rhbz 1724398 1771644)

* Mon Nov 11 2019 Laura Abbott - 5.3.10-300

- Linux v5.3.10

* Thu Nov 7 2019 Jeremy Cline

- Add support for a number of Macbook keyboards and touchpads (rhbz 1769465)

* Wed Nov 6 2019 Laura Abbott - 5.3.9-300

- Linux v5.3.9

* Tue Oct 29 2019 Laura Abbott - 5.3.8-300

- Linux v5.3.8

[ 1 ] Bug #1753062 - CVE-2019-11135 hw: TSX Transaction Asynchronous Abort (TAA)

https://bugzilla.redhat.com/show_bug.cgi?id=1753062

[ 2 ] Bug #1646768 - CVE-2018-12207 hw: Machine Check Error on Page Size Change (IPU)

https://bugzilla.redhat.com/show_bug.cgi?id=1646768

[ 3 ] Bug #1724393 - CVE-2019-0154 hw: Intel GPU Denial Of Service while accessing MMIO in lower power state

https://bugzilla.redhat.com/show_bug.cgi?id=1724393

[ 4 ] Bug #1724398 - CVE-2019-0155 hw: Intel GPU blitter manipulation can allow for arbitrary kernel memory write

https://bugzilla.redhat.com/show_bug.cgi?id=1724398

[ 5 ] Bug #1758414 - CVE-2019-0117 hw: Intel SGX information leak

https://bugzilla.redhat.com/show_bug.cgi?id=1758414

su -c 'dnf upgrade --advisory FEDORA-2019-68d7f68507' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

FEDORA-2019-68d7f68507 2019-11-13 06:35:24.660460 Product : Fedora 31 Version : 5.3.11 Release : 300.fc31 URL : https://www.kernel.org/ Summary : The Linux kernel Description : The kernel meta package The 5.3.11 stable kernel update contains a number of important security updates across the tree, including mitigations for the most recent hardware issues disclosed on Nov 12. * Tue Nov 12 2019 Justin M. Forbes - 5.3.11-300 - Linux v5.3.11 - Fixes CVE-2019-11135 (rhbz 1753062 1771649) - Fixes CVE-2018-12207 (rhbz 1646768 1771645) - Fixes CVE-2019-0154 (rhbz 1724393 1771642) - Fixes CVE-2019-0155 (rhbz 1724398 1771644) * Mon Nov 11 2019 Laura Abbott - 5.3.10-300 - Linux v5.3.10 * Thu Nov 7 2019 Jeremy Cline - Add support for a number of Macbook keyboards and touchpads (rhbz 1769465) * Wed Nov 6 2019 Laura Abbott - 5.3.9-300 - Linux v5.3.9 * Tue Oct 29 2019 Laura Abbott - 5.3.8-300 - Linux v5.3.8 [ 1 ] Bug #1753062 - CVE-2019-11135 hw: TSX Transaction Asynchronous Abort (TAA) https://bugzilla.redhat.com/show_bug.cgi?id=1753062 [ 2 ] Bug #1646768 - CVE-2018-12207 hw: Machine Check Error on Page Size Change (IPU) https://bugzilla.redhat.com/show_bug.cgi?id=1646768 [ 3 ] Bug #1724393 - CVE-2019-0154 hw: Intel GPU Denial Of Service while accessing MMIO in lower power state https://bugzilla.redhat.com/show_bug.cgi?id=1724393 [ 4 ] Bug #1724398 - CVE-2019-0155 hw: Intel GPU blitter manipulation can allow for arbitrary kernel memory write https://bugzilla.redhat.com/show_bug.cgi?id=1724398 [ 5 ] Bug #1758414 - CVE-2019-0117 hw: Intel SGX information leak https://bugzilla.redhat.com/show_bug.cgi?id=1758414 su -c 'dnf upgrade --advisory FEDORA-2019-68d7f68507' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Change Log

References

Update Instructions

Severity
Product : Fedora 31
Version : 5.3.11
Release : 300.fc31
URL : https://www.kernel.org/
Summary : The Linux kernel

Related News