Fedora 31 Kernel Headers Security Advisory: Critical DoS and Memory Leak

Kernel-headers includes the C header files that specify the interface

between the Linux kernel and userspace libraries and programs. The

header files define structures and constants that are needed for

building most standard programs and are also needed for rebuilding the

glibc package.

The 5.3.11 stable kernel update contains a number of important security updates

across the tree, including mitigations for the most recent hardware issues

disclosed on Nov 12.

* Tue Nov 12 2019 Justin M. Forbes - 5.3.11-300

- Linux v5.3.11

[ 1 ] Bug #1753062 - CVE-2019-11135 hw: TSX Transaction Asynchronous Abort (TAA)

https://bugzilla.redhat.com/show_bug.cgi?id=1753062

[ 2 ] Bug #1646768 - CVE-2018-12207 hw: Machine Check Error on Page Size Change (IPU)

https://bugzilla.redhat.com/show_bug.cgi?id=1646768

[ 3 ] Bug #1724393 - CVE-2019-0154 hw: Intel GPU Denial Of Service while accessing MMIO in lower power state

https://bugzilla.redhat.com/show_bug.cgi?id=1724393

[ 4 ] Bug #1724398 - CVE-2019-0155 hw: Intel GPU blitter manipulation can allow for arbitrary kernel memory write

https://bugzilla.redhat.com/show_bug.cgi?id=1724398

[ 5 ] Bug #1758414 - CVE-2019-0117 hw: Intel SGX information leak

https://bugzilla.redhat.com/show_bug.cgi?id=1758414

su -c 'dnf upgrade --advisory FEDORA-2019-68d7f68507' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/