Stay Secure with the Latest Linux Advisories

security advisoryFedoraremote DoS

Fedora: 2019-6c3d89b3d0 Critical: Kernel-Headers Multiple DoS Fix

Update to v5.1.11 - Fixes CVE-2019-11477 - Fixes CVE-2019-11479 - Fixes CVE-2019-11478. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-6c3d89b3d0 2019-06-18 18:13:13.317423 --------------------------------------------------------------------------------Name : kernel-headers Product : Fedora 30 Version : 5.1.11 Release : 300.fc30 URL : https://www.kernel.org/ Summary : Header files for the Linux kernel for use by glibc Description : Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package. --------------------------------------------------------------------------------Update Information: Update to v5.1.11 - Fixes CVE-2019-11477 - Fixes CVE-2019-11479 - Fixes CVE-2019-11478 --------------------------------------------------------------------------------ChangeLog: * Mon Jun 17 2019 Jeremy Cline - 5.1.11-300 - Linux v5.1.11 * Mon Jun 17 2019 Jeremy Cline - 5.1.10-300 - Linux v5.1.10 * Tue Jun 11 2019 Jeremy Cline - 5.1.9-300 - Linux v5.1.9 * Sun Jun 9 2019 Jeremy Cline - 5.1.8-300 - Linux v5.1.8 * Tue Jun 4 2019 Jeremy Cline - 5.1.7-300 - Linux v5.1.7 * Sat May 25 2019 Jeremy Cline - 5.1.5-300 - Linux v5.1.5 * Wed May 22 2019 Jeremy Cline - 5.1.4-300 - Linux v5.1.4 * Wed May 15 2019 Justin M. Forbes - 5.0.16-300 - Linux v5.0.16 --------------------------------------------------------------------------------References: [ 1 ] Bug #1719128 - CVE-2019-11478 Kernel: tcp: excessive resource consumption while processing SACK blocks allows remote denial of service https://bugzilla.redhat.com/show_bug.cgi?id=1719128 [ 2 ] Bug #1719129 - CVE-2019-11479 Kernel: tcp: excessive resource consumption for TCP connections withlow MSS allows remote denial of service https://bugzilla.redhat.com/show_bug.cgi?id=1719129 [ 3 ] Bug #1719123 - CVE-2019-11477 Kernel: tcp: integer overflow while processing SACK blocks allows remote denial of service https://bugzilla.redhat.com/show_bug.cgi?id=1719123 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-6c3d89b3d0' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Kernel-headers patch released in Fedora 30 addresses various DoS threats, upgrading to version 5.1.11.. kernel headers, Fedora, remote denial of service, security update, Linux security. . Severity: Critical. LinuxSecurity.com Team

Jun 18, 2019 •Critical Fedora