Stay Secure with the Latest Linux Advisories

security advisorykernel updateFedora

Fedora 25 Kernel Update: FEDORA-2017-273b67d5ee Addresses Inheritance Flaws

The 4.10.17 stable kernel update contains a number of important fixes across the tree.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-273b67d5ee 2017-05-25 19:36:40.051375 --------------------------------------------------------------------------------Name : kernel Product : Fedora 25 Version : 4.10.17 Release : 200.fc25 URL : https://www.kernel.org/ Summary : The Linux kernel Description : The kernel meta package --------------------------------------------------------------------------------Update Information: The 4.10.17 stable kernel update contains a number of important fixes across the tree. --------------------------------------------------------------------------------References: [ 1 ] Bug #1452744 - CVE-2017-9077 kernel: net: tcp_v6_syn_recv_sock function mishandles inheritance https://bugzilla.redhat.com/show_bug.cgi?id=1452744 [ 2 ] Bug #1452688 - CVE-2017-9076 kernel: net: IPv6 DCCP implementation mishandles inheritance https://bugzilla.redhat.com/show_bug.cgi?id=1452688 [ 3 ] Bug #1452691 - CVE-2017-9075 kernel: net: sctp_v6_create_accept_sk function mishandles inheritance https://bugzilla.redhat.com/show_bug.cgi?id=1452691 [ 4 ] Bug #1452679 - CVE-2017-9074 kernel: net: IPv6 fragmentation implementation of nexthdr field may be associated with an invalid option https://bugzilla.redhat.com/show_bug.cgi?id=1452679 [ 5 ] Bug #1450972 - CVE-2017-8890 kernel: Double free in the inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c https://bugzilla.redhat.com/show_bug.cgi?id=1450972 [ 6 ] Bug #1451386 - CVE-2017-9059 kernel: Module reference leak due to improper shut down of callback channel on umount https://bugzilla.redhat.com/show_bug.cgi?id=1451386 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c'dnf upgrade kernel' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . A new kernel version for Fedora 25 introduces multiple security enhancements and significant upgrades to the system's efficiency.. Kernel Update, Inheritance Fix, System Performance, Fedora 25, Security Update. . Severity: Important. LinuxSecurity.com Team

May 26, 2017 •Important Fedora