--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-06f1572324
2016-06-02 09:08:25.194561
--------------------------------------------------------------------------------
Name : kernel
Product : Fedora 23
Version : 4.5.5
Release : 201.fc23
URL :
http://www.kernel.org/
Summary : The Linux kernel
Description :
The kernel meta package
--------------------------------------------------------------------------------
Update Information:
The 4.5.5 stable update contains a number of important fixes across the tree.
---- The 4.5.4 stable update contains a number of important fixes across the
tree. ---- The 4.5.3 stable rebase contains enhanced hardware support,
additional features, and a number of important fixes across the tree.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1300257 - CVE-2016-0758 kernel: tags with indefinite length can corrupt
pointers in asn1_find_indefinite_length()
https://bugzilla.redhat.com/show_bug.cgi?id=1300257
[ 2 ] Bug #1332139 - CVE-2016-3713 kernel: kvm: out-of-bounds access in
set_var_mtrr_msr
https://bugzilla.redhat.com/show_bug.cgi?id=1332139
[ 3 ] Bug #1337528 - CVE-2016-4913 kernel: Information leak when handling NM entries
containing NUL
https://bugzilla.redhat.com/show_bug.cgi?id=1337528
[ 4 ] Bug #1337806 - CVE-2016-4440 Kernel: kvm: vmx: incorrect state update leading to
MSR access
https://bugzilla.redhat.com/show_bug.cgi?id=1337806
[ 5 ] Bug #1334643 - CVE-2016-4569 kernel: Information leak in Linux sound module in
timer.c
https://bugzilla.redhat.com/show_bug.cgi?id=1334643
[ 6 ] Bug #1334303 - CVE-2016-4558 kernel: bpf: refcnt overflow
https://bugzilla.redhat.com/show_bug.cgi?id=1334303
[ 7 ] Bug #1334307 - CVE-2016-4557 kernel: Use after free vulnerability via double
fdput
https://bugzilla.redhat.com/show_bug.cgi?id=1334307
[ 8 ] Bug #1333712 - CVE-2016-4581 kernel: Slave being first propagated copy causes oops
in propagate_mnt
https://bugzilla.redhat.com/show_bug.cgi?id=1333712
[ 9 ] Bug #1333309 - CVE-2016-4485 kernel: Information leak in llc module
https://bugzilla.redhat.com/show_bug.cgi?id=1333309
[ 10 ] Bug #1333316 - CVE-2016-4486 kernel: Information leak in rtnetlink
https://bugzilla.redhat.com/show_bug.cgi?id=1333316
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update kernel' at the command line.
For more information, refer to "Managing Software with yum",
available at
https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------