-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-73a733f4d9 2016-07-02 13:23:23.482017 --------------------------------------------------------------------------------
Name : kernel Product : Fedora 23 Version : 4.5.7 Release : 202.fc23 URL : http://www.kernel.org/ Summary : The Linux kernel Description : The kernel meta package
-------------------------------------------------------------------------------- Update Information:
The 4.5.7-202 kernel update contains a number of important security fixes. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1344721 - CVE-2016-1583 kernel: Stack overflow via ecryptfs and /proc/$pid/environ https://bugzilla.redhat.com/show_bug.cgi?id=1344721 [ 2 ] Bug #1341716 - CVE-2016-4470 kernel: Uninitialized variable in request_key handling causes kernel crash in error handling path https://bugzilla.redhat.com/show_bug.cgi?id=1341716 [ 3 ] Bug #1349886 - CVE-2016-4998 kernel: out of bounds reads when processing IPT_SO_SET_REPLACE setsockopt https://bugzilla.redhat.com/show_bug.cgi?id=1349886 [ 4 ] Bug #1350509 - CVE-2016-5829 kernel: Heap buffer overflow in hiddev driver https://bugzilla.redhat.com/show_bug.cgi?id=1350509 [ 5 ] Bug #1350811 - CVE-2016-5728 kernel: Race condition vulnerability in VOP driver https://bugzilla.redhat.com/show_bug.cgi?id=1350811 [ 6 ] Bug #1350845 - CVE-2016-1237 kernel: Missing check for permissions when setting ACL https://bugzilla.redhat.com/show_bug.cgi?id=1350845 --------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use su -c 'yum update kernel' at the command line. For more information, refer to "Managing Software with yum", available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
package-announce@lists.fedoraproject.org