Fedora 34: 2021-a963f04012 Critical: Kernel-Headers Security Fix

Kernel-headers includes the C header files that specify the interface

between the Linux kernel and userspace libraries and programs. The

header files define structures and constants that are needed for

building most standard programs and are also needed for rebuilding the

glibc package.

The 5.11.16 stable kernel update contains a number of important fixes across the

tree.

* Wed Apr 21 2021 Justin M. Forbes - 5.11.16-300

- Linux v5.11.16

[ 1 ] Bug #1948772 - CVE-2021-23133 kernel: Race condition in sctp_destroy_sock list_del

https://bugzilla.redhat.com/show_bug.cgi?id=1948772

[ 2 ] Bug #1951595 - CVE-2021-29155 kernel: protection for sequences of pointer arithmetic operations against speculatively out-of-bounds loads can be bypassed to leak content of kernel memory

https://bugzilla.redhat.com/show_bug.cgi?id=1951595

su -c 'dnf upgrade --advisory FEDORA-2021-a963f04012' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure