Fedora 35: 2021-a093973910 Important Kernel Security Fixes

The kernel meta package

The 5.14.16 stable kernel update contains a number of important fixes across the

tree.

* Wed Nov 3 2021 Justin M. Forbes [5.14.16-1]

- Update release for usb fix rebuild (Justin M. Forbes)

- Revert "xhci: Set HCD flag to defer primary roothub registration" (Justin M. Forbes)

- Revert "usb: core: hcd: Add support for deferring roothub registration" (Justin M. Forbes)

* Tue Nov 2 2021 Justin M. Forbes [5.14.16-0]

- Changelog entry for 5.14.15 (Justin M. Forbes)

[ 1 ] Bug #2000694 - CVE-2021-3772 kernel: sctp: Invalid chunks may be used to remotely remove existing associations

https://bugzilla.redhat.com/show_bug.cgi?id=2000694

[ 2 ] Bug #2016692 - CVE-2021-42327 kernel: heap-based buffer overflow in dp_link_settings_write() in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

https://bugzilla.redhat.com/show_bug.cgi?id=2016692

[ 3 ] Bug #2020362 - CVE-2021-43267 kernel: Insufficient validation of user-supplied sizes for the MSG_CRYPTO message type

https://bugzilla.redhat.com/show_bug.cgi?id=2020362

su -c 'dnf upgrade --advisory FEDORA-2021-a093973910' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure