-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2018-49bda79bd5 2018-08-03 19:56:29.278593 --------------------------------------------------------------------------------
Name : kernel Product : Fedora 27 Version : 4.17.11 Release : 100.fc27 URL : https://www.kernel.org/ Summary : The Linux kernel Description : The kernel meta package
-------------------------------------------------------------------------------- Update Information:
The 4.17.11 stable update contains a number of important fixes across the tree. Also of note, starting with this release, kernel-headers is built from a different srpm. The contents should be the same, but there were some benefits to breaking it from the kernel build. ---- The 4.17.10 stable kernel update contains a number of important fixes across the tree. -------------------------------------------------------------------------------- ChangeLog:
* Mon Jul 30 2018 Justin M. Forbes jforbes@fedoraproject.org - 4.17.11-100 - Linux v4.17.11 - Turn off kernel-headers for the split - Fix CVE-2018-14678 (rhbz 1608559 1608560) * Wed Jul 25 2018 Justin M. Forbes jforbes@fedoraproject.org - 4.17.10-100 - Linux v4.17.10 * Mon Jul 23 2018 Justin M. Forbes jforbes@fedoraproject.org - 4.17.9-200 - Linux v4.17.9 - Fix emergency shell with ext4 rootfs (rhbz 1602971) * Mon Jul 23 2018 Jeremy Cline jeremy@jcline.org - Fix iwlwifi module load failure (rhbz 1607092) * Tue Jul 17 2018 Justin M. Forbes jforbes@fedoraproject.org - 4.17.7-100 - Linux v4.17.7 * Thu Jul 12 2018 Jeremy Cline jeremy@jcline.org - Avoid an early WARN_ON in Xen (rhbz 1592976) - Fix perceived dead xhci host (rhbz 1597333) * Thu Jul 12 2018 Dan Hor��k dan@danny.cz - Enable HDA sound drivers on PPC * Wed Jul 11 2018 Jeremy Cline jcline@redhat.com - 4.17.6-100 - Linux v4.17.6 * Wed Jul 11 2018 Jeremy Cline jeremy@jcline.org - Add device ID for RTL8822BE in the Asus ROG GL702ZC (rhbz 1599917) * Mon Jul 9 2018 Jeremy Cline jcline@redhat.com - 4.17.5-100 - Linux v4.17.5 - Fix CVE-2018-13405 (rhbz 1599161 1599162) * Thu Jul 5 2018 Justin M. Forbes jforbes@fedoraproject.org - Fix CVE-2018-13053 (rhbz 1597747 1597748) - Fix CVE-2018-12896 (rhbz 1597759 1597760) - Fix CVE-2018-13093 (rhbz 1597766 1597767) - Fix CVE-2018-13094 (rhbz 1597771 1597772) - Fix CVE-2018-13095 (rhbz 1597775 1597777) * Tue Jul 3 2018 Justin M. Forbes jforbes@fedoraproject.org - 4.17.4-100 - Linux v4.17.4 * Fri Jun 29 2018 Jeremy Cline jeremy@jcline.org - Revert the CRNG init patches (rhbz 1572944) * Thu Jun 28 2018 Jeremy Cline jeremy@jcline.org - Fix CVE-2018-12714 (rhbz 1595835 1595837) * Tue Jun 26 2018 Jeremy Cline jcline@redhat.com - 4.17.3-100 - Linux v4.17.3 - Don't log an error if RTC_NVMEM isn't enabled (rhbz 1568276) * Mon Jun 25 2018 Laura Abbott labbott@fedoraproject.org - Some webcam fixes (rhbz 1592454 1590304) - Fix for armv7 siginfo ABI regression (rhbz 1591516) * Fri Jun 22 2018 Justin M. Forbes jforbes@fedoraproject.org - Fix CVE-2018-12633 (rhbz 1594170 1594172) * Fri Jun 22 2018 Justin M. Forbes jforbes@fedoraproject.org - 4.17.2-100 - Linux v4.17.2 rebase * Thu Jun 21 2018 Jeremy Cline jcline@redhat.com - 4.16.17-200 - Linux v4.16.17 * Sun Jun 17 2018 Jeremy Cline jcline@redhat.com - 4.16.16-200 - Linux v4.16.16 * Tue Jun 12 2018 Jeremy Cline jeremy@jcline.org - Fix a crash in ath10k when bandwidth changes (rhbz 1577106) - Fix kexec_file_load pefile signature verification (rhbz 1470995) * Tue Jun 12 2018 Justin M. Forbes jforbes@fedoraproject.org - Fix CVE-2018-12232 (rhbz 1590215 1590216) * Mon Jun 11 2018 Jeremy Cline jeremy@jcline.org - 4.16.15-200 - Fix for the keyboard backlight on Dell XPS 13 9370 - Linux v4.16.15 * Mon Jun 11 2018 Justin M. Forbes jforbes@fedoraproject.org - Fix CVE-2018-10853 (rhbz 1589890 1589892) * Tue Jun 5 2018 Jeremy Cline jcline@redhat.com - 4.16.14-200 - Linux v4.16.14 * Mon Jun 4 2018 Jeremy Cline jeremy@jcline.org - Drop SanDisk SD7UB3Q*G1001 NOLPM quirk (rhbz 1583207) * Wed May 30 2018 Jeremy Cline jcline@redhat.com - 4.16.13-200 - Linux v4.16.13 - Fixes CVE-2018-11506 (rhbz 1583210 1583213) * Fri May 25 2018 Jeremy Cline jcline@redhat.com - 4.16.12-200 - Linux v4.16.12 - Fix CVE-2018-10840 (rhbz 1582346 1582348) - Fix for incorrect error message about parsing PCCT (rhbz 1435837) * Tue May 22 2018 Jeremy Cline jcline@redhat.com - 4.16.11-200 - Linux v4.16.11 * Mon May 21 2018 Justin M. Forbes jforbes@fedoraproject.org - 4.16.10-201 - Fix CVE-2018-3639 (rhbz 1566890 1580713) * Mon May 21 2018 Jeremy Cline jcline@redhat.com - 4.16.10-200 - Linux v4.16.10 * Sun May 20 2018 Hans de Goede hdegoede@redhat.com - Enable GPIO_AMDPT, PINCTRL_AMD and X86_AMD_PLATFORM_DEVICE Kconfig options to fix i2c and GPIOs not working on AMD based laptops (rhbz#1510649) * Thu May 17 2018 Justin M. Forbes jforbes@fedoraproject.org - Fix CVE-2018-1120 (rhbz 1575472 1579542) * Thu May 17 2018 Jeremy Cline jcline@redhat.com - 4.16.9-200 - Linux v4.16.9 - Silence unwanted "swiotlb buffer is full" warnings (rhbz 1556797) * Wed May 9 2018 Jeremy Cline jeremy@jcline.org - 4.16.8-201 - Bump the release for a re-build * Wed May 9 2018 Jeremy Cline jeremy@jcline.org - Workaround for m400 uart irq firmware description (rhbz 1574718) * Wed May 9 2018 Jeremy Cline jeremy@jcline.org - 4.16.8-200 - Linux v4.16.8 * Mon May 7 2018 Jeremy Cline jeremy@jcline.org - Fix issue with KVM on older Core 2 processors (rhbz 1566258) * Sat May 5 2018 Peter Robinson pbrobinson@fedoraproject.org - ARM and Raspberry Pi fixes - Fix USB-2 on Tegra devices * Fri May 4 2018 Laura Abbott labbott@redhat.com - Fix for building out of tree modules on powerpc (rhbz 1574604) * Fri May 4 2018 Justin M. Forbes jforbes@fedoraproject.org - Fix CVE-2018-10322 (rhbz 1571623 1571624) - Fix CVE-2018-10323 (rhbz 1571627 1571630) * Wed May 2 2018 Jeremy Cline jeremy@jcline.org - 4.16.7-200 - Linux v4.16.7 * Tue May 1 2018 Jeremy Cline jeremy@jcline.org - 4.16.6-202 - Revert the entire random series from 4.16.4 (rhbz 1572944) * Tue May 1 2018 Jeremy Cline jeremy@jcline.org - 4.16.6-201 - Revert the fix for CVE-2018-1108 (rhbz 1572944) * Mon Apr 30 2018 Jeremy Cline jeremy@jcline.org - 4.16.6-200 - Linux v4.16.6 * Fri Apr 27 2018 Jeremy Cline jeremy@jcline.org - 4.16.5-200 - Fix an issue with bluetooth autosupsend on some XPS 13 9360 (rhbz 1514836) - Fix prlimit64 with RLIMIT_CPU ignored (rhbz 1568337) - Linux v4.16.5 * Fri Apr 27 2018 Peter Robinson pbrobinson@fedoraproject.org - Enable QLogic NICs on ARM * Wed Apr 25 2018 Jeremy Cline jeremy@jcline.org - Fix a kernel oops when using Thunderbolt 3 docks (rhbz 1565131) * Tue Apr 24 2018 Jeremy Cline jeremy@jcline.org - 4.16.4-200 - Fix a regression in backlight interfaces for some laptops (rhbz 1571036) - Linux v4.16.4 * Sun Apr 22 2018 Peter Robinson pbrobinson@fedoraproject.org - Add quirk patch to fix X-Gene 1 console on HP m400/Mustang (RHBZ 1531140) - Add fixes for Marvell a37xx EspressoBin - Update to latest Raspberry Pi 3+ fixes - More fixes for lan78xx on the Raspberry Pi 3+ * Thu Apr 19 2018 Jeremy Cline jeremy@jcline.org - 4.16.3-200 - Linux v4.16.3 * Thu Apr 19 2018 Peter Robinson pbrobinson@fedoraproject.org - Enable UFS storage options on ARM - Add support for Pocket Beagle * Tue Apr 17 2018 Peter Robinson pbrobinson@fedoraproject.org - Enable drivers for Xilinx ZYMQ-MP Ultra96 * Mon Apr 16 2018 Laura Abbott labbott@fedoraproject.org - Fix for hang on removal of macsec module (rhbz 1566410) * Thu Apr 12 2018 Jeremy Cline jeremy@jcline.org - 4.16.2-200 - Linux v4.16.2 * Thu Apr 12 2018 Laura Abbott labbott@redhat.com - 4.15.17-300 - Linux v4.15.17 * Thu Apr 12 2018 Justin M. Forbes jforbes@fedoraproject.org - Fix CVE-2018-10021 (rhbz 1566407 1566409) * Mon Apr 9 2018 Laura Abbott labbott@redhat.com - 4.15.16-300 - Linux v4.15.16 * Mon Apr 2 2018 Laura Abbott labbott@redhat.com - 4.15.15-300 - Linux v4.15.15 * Thu Mar 29 2018 Laura Abbott labbott@redhat.com - 4.15.14-300 - Linux v4.15.14 * Thu Mar 29 2018 Jeremy Cline jeremy@jcline.org - Fix mounting NFS with kerberos (rhbz 1558977) * Mon Mar 26 2018 Laura Abbott labbott@redhat.com - 4.15.13-300 - Linux v4.15.13 * Thu Mar 22 2018 Laura Abbott labbott@redhat.com - 4.15.12-301 - Rebuild for kernel-devel fix * Thu Mar 22 2018 Jeremy Cline jeremy@jcline.org - Fix for nouveau backlight regression (rhbz 1511786) * Wed Mar 21 2018 Laura Abbott labbott@redhat.com - 4.15.12-300 - Linux v4.15.12 * Mon Mar 19 2018 Laura Abbott labbott@redhat.com - 4.15.11-300 - Linux v4.15.11 * Mon Mar 19 2018 Justin M. Forbes jforbes@fedoraproject.org - Fix CVE-2017-18232 (rhbz 1558066 1558067) * Thu Mar 15 2018 Laura Abbott labbott@redhat.com - 4.15.10-300 - Linux v4.15.10 - Fix for dock booting (rhbz 1549042) - Fix THP bug (rhbz 1546709) * Mon Mar 12 2018 Laura Abbott labbott@redhat.com - 4.15.9-300 - Linux v4.15.9 * Mon Mar 12 2018 Justin M. Forbes jforbes@fedoraproject.org - Fix CVE-2018-7995 (rhbz 1553911 1553918) - Fix CVE-2018-8043 (rhbz 1554199 1554200) * Fri Mar 9 2018 Laura Abbott labbott@redhat.com - 4.15.8-300 - Linux v4.15.8 * Thu Mar 8 2018 Justin M. Forbes jforbes@fedoraproject.org - Fix CVE-2018-7757 (rhbz 1553361 1553363) * Tue Mar 6 2018 Laura Abbott labbott@redhat.com - Fixes for IPMI crash (rbhz 1549316) * Mon Mar 5 2018 Justin M. Forbes jforbes@fedoraproject.org - Fix CVE-2018-5803 (rhbz 1551051 1551053) * Fri Mar 2 2018 Justin M. Forbes jforbes@fedoraproject.org - Fix CVE-2018-1065 (rhbz 1547824 1547831) * Wed Feb 28 2018 Laura Abbott labbott@redhat.com - 4.15.7-300 - Linux v4.15.7 - Fix IPMI crash (rhbz 1549316) * Mon Feb 26 2018 Laura Abbott labbott@redhat.com - 4.15.6-300 - Linux v4.15.6 * Fri Feb 23 2018 Laura Abbott labbott@redhat.com - 4.15.5-300 - Linux v4.15.5 * Mon Feb 19 2018 Laura Abbott labbott@redhat.com - 4.15.4-300 - Linux v4.15.4 * Mon Feb 19 2018 Justin M. Forbes jforbes@fedoraproject.org - Fix CVE-2018-1000026 (rhbz 1541846 1546744) * Thu Feb 15 2018 Fran��ois Cami fcami@fedoraproject.org - Enable CONFIG_DRM_AMDGPU_SI * Tue Feb 13 2018 Laura Abbott labbott@redhat.com - 4.15.3-300 - Linux v4.15.3 - Fix for b43 wifi (rhbz 1544821) - Turn off a few powersave options for rebase * Sun Feb 11 2018 Peter Robinson pbrobinson@fedoraproject.org 4.15.2-301 - Add Exynos5 patch (second part of series) to fix USB-3 devices on some Odroid devices - Fix up and re-enable adv7511 - Fix loading of i.MX6 cpufreq driver (rhbz 1466991) - Improvements/fixes for Raspberry Pi HDMI monitor detection - Fix regression with AllWinner (sunxi) crypto PRNG, and module loading * Wed Feb 7 2018 Laura Abbott labbott@redhat.com - 4.15.2-300 - Linux v4.15.2 rebase - Enable Jack sound on Thinkpad Dock (rhbz 1543326) * Wed Feb 7 2018 Justin M. Forbes jforbes@fedoraproject.org - 4.14.18-300 - Linux v4.14.18 * Mon Feb 5 2018 Justin M. Forbes jforbes@fedoraproject.org - 4.14.17-300 - Linux v4.14.17 * Wed Jan 31 2018 Justin M. Forbes jforbes@fedoraproject.org - 4.14.16-300 - Linux v4.14.16 * Mon Jan 29 2018 Justin M. Forbes jforbes@fedoraproject.org - Fix CVE-2018-5750 (rhbz 1539706 1539708) - Fix softlockup (rhbz 1492664 1492665) * Sat Jan 27 2018 Laura Abbott labbott@fedoraproject.org - Add support for Wacom tablet (rhbz 1539238) * Fri Jan 26 2018 Justin M. Forbes jforbes@fedoraproject.org - 4.14.15-301 - Revert retpoline vermagic tag * Wed Jan 24 2018 Justin M. Forbes jforbes@fedoraproject.org - 4.14.15-300 - Linux v4.14.15 - Fix CVE-2018-1000004 (rhbz 1535315 1535316) * Tue Jan 23 2018 Laura Abbott labbott@fedoraproject.org - Fix for nouveau crash (rhbz 1513150) * Thu Jan 18 2018 Justin M. Forbes jforbes@fedoraproject.org - 4.14.14-300 - Add some ppc mitigations from upstream * Wed Jan 17 2018 Justin M. Forbes jforbes@fedoraproject.org - Linux v4.14.14 - Fixes (rhbz 1532458) * Fri Jan 12 2018 Jeremy Cline jeremy@jcline.org - Fix for CVE-2018-5344 (rhbz 1533909 1533911) - Fix for CVE-2018-5332 (rhbz 1533890 1533895) - Fix for CVE-2018-5333 (rhbz 1533891 1533895) * Wed Jan 10 2018 Justin M. Forbes jforbes@fedoraproject.org - 4.14.13-300 - Linux v4.14.13 - Iniital retpoline fixes for Spectre v2 * Mon Jan 8 2018 Laura Abbott labbott@redhat.com - Disable CONFIG_RESET_ATTACK_MITIGATION (rhbz 1532058) * Fri Jan 5 2018 Laura Abbott labbott@redhat.com - Copy module linker script (rhbz 1531182) * Fri Jan 5 2018 Justin M. Forbes jforbes@fedoraproject.org - 4.14.12-300 - Linux v4.14.12 * Thu Jan 4 2018 Hans de Goede hdegoede@redhat.com - Add a patch to filter false positive kbd backlight change events (#1514969) * Wed Jan 3 2018 Justin M. Forbes jforbes@fedoraproject.org - 4.14.11-300 - Linux v4.14.11 * Mon Jan 1 2018 Laura Abbott labbott@redhat.com - 4.14.10-300 - Linux v4.14.10 * Tue Dec 26 2017 Justin M. Forbes jforbes@fedoraproject.org - 4.14.9-300 - Linux v4.14.9 - Fixes CVE-2017-17862 CVE-2017-17863 CVE-2017-17864 (rhbz 1529120 1529123 1529124 1529125) - Fixes CVE-2017-17852 CVE-2017-17853 CVE-2017-17854 CVE-2017-17855 CVE-2017-17856 CVE-2017-17857 (rhbz 1530269 1530270 1530271 1530272 1530273 1530274 1530279) * Wed Dec 20 2017 Justin M. Forbes jforbes@fedoraproject.org - 4.14.8-300 - Linux v4.14.8 * Wed Dec 20 2017 Jeremy Cline jeremy@jcline.org - Backport fix e1000_check_for_copper_link_ich8lan return value * Tue Dec 19 2017 Justin M. Forbes jforbes@fedoraproject.org - Fix CVE-2017-17741 (rhbz 1527112 1527113) * Mon Dec 18 2017 Justin M. Forbes jforbes@fedoraproject.org - 4.14.7-300 - Linux v4.14.7 - Fix CVE-2017-17712 (rhbz 1526427 1526933) * Thu Dec 14 2017 Jeremy Cline jeremy@jcline.org - 4.14.6-300 - Linux v4.14.6 - Security fix for CVE-2017-17449 (rhbz 1525762 1525763) - Security fix for CVE-2017-17450 (rhbz 1525761 1525764) - Security fix for CVE-2017-17448 (rhbz 1525768 1525769) * Wed Dec 13 2017 Jeremy Cline jeremy@jcline.org - Fix CVE-2017-17558 (rhbz 1525474 1525476) - Revert exec: avoid RLIMIT_STACK races with prlimit() * Tue Dec 12 2017 Jeremy Cline jeremy@jcline.org - Fix CVE-2017-8824 (rhbz 1519591 1520764) * Mon Dec 11 2017 Jeremy Cline jeremy@jcline.org - Re-fix USB null pointer dereference on ThinkPad X1 (rhbz 1462175) * Mon Dec 11 2017 Jeremy Cline jeremy@jcline.org - 4.14.5-300 - Linux v4.14.5 - Re-enable driver for the Behringer BCD 2000 * Wed Dec 6 2017 Peter Robinson pbrobinson@fedoraproject.org 4.14.4-300 - Linux v4.14.4 - Fixes for dwmac-sun8i for A64/Pine64 - Fixes for Cavium ThunderX (rhbz 1521190) * Mon Dec 4 2017 Justin M. Forbes jforbes@fedoraproject.org - 4.14.3-300 - Linux v4.14.3 rebase * Thu Nov 30 2017 Jeremy Cline jeremy@jcline.org - 4.13.16-302 - Fix CVE-2017-1000405 (rhbz 1516514 1519115) * Wed Nov 29 2017 Jeremy Cline jeremy@jcline.org - 4.13.16-301 - Fix USB null pointer dereference on ThinkPad X1 (rhbz 1462175) - Patches ppc64, ppc64le mm failure (rhbz 1518707) * Mon Nov 27 2017 Jeremy Cline jeremy@jcline.org - 4.13.16-300 - Linux v4.13.16 - Fix CVE-2017-16649 (rhbz 1516267 1516274) - Fix CVE-2017-16650 (rhbz 1516265 1516274) - Fix CVE-2017-16644 (rhbz 1516273 1516274) - Fix CVE-2017-16647 (rhbz 1516270 1516274) * Tue Nov 21 2017 Justin M. Forbes jforbes@fedoraproject.org - Fix cursor issues with QXL (rhbz 1507931) * Tue Nov 21 2017 Jeremy Cline jeremy@jcline.org - 4.13.15-300 - Linux v4.13.15 * Mon Nov 20 2017 Laura Abbott labbott@redhat.com - Enable driver for the Behringer BCD 2000 (rhbz 1514945) * Sun Nov 19 2017 Jeremy Cline jeremy@jcline.org - 4.13.14-300 - Linux v4.13.14 * Wed Nov 15 2017 Jeremy Cline jeremy@jcline.org - 4.13.13-300 - Linux v4.13.13 - Fix CVE-2017-15115 (rhbz 1513346 1513345) * Wed Nov 15 2017 Peter Robinson pbrobinson@fedoraproject.org - Add fix for vc4 interupts * Wed Nov 8 2017 Jeremy Cline jeremy@jcline.org - 4.13.12-300 - Linux v4.13.12 * Wed Nov 8 2017 Justin M. Forbes jforbes@fedoraproject.org - Fix CVE-2017-16532 (rhbz 1510835 1510854) - Fix CVE-2017-16538 (rhbz 1510826 1510854) * Mon Nov 6 2017 Laura Abbott labbott@redhat.com - Patches for ThinkPad X1 Carbon Gen5 Touchpad (rhbz 1509461) - Fix for KVM regression on some machines (rhbz 1490803) * Thu Nov 2 2017 Jeremy Cline jeremy@jcline.org - 4.13.11-300 - Linux v4.13.11 - Fix CVE-2017-12193 (rhbz 1501215 1508717) - SMB3: Validate negotiate request must always be signed (rhbz 1502606) - Backport new SELinux NNP/nosuid patch to resolve interactions with systemd * Wed Nov 1 2017 Laura Abbott labbott@fedoraproject.org - Add fix for potential mlxsw firmware incompatibility * Mon Oct 30 2017 Hans de Goede jwrdegoede@fedoraproject.org - Fix 0001-platform-x86-peaq-wmi-Add-DMI-check-before-binding-t.patch having a dmi_table which lacks a terminating entry * Fri Oct 27 2017 Jeremy Cline jeremy@jcline.org - 4.13.10-300 - Linux v4.13.10 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1608559 - CVE-2018-14678 xen: Uninitialized state in x86 PV failsafe callback path (XSA-274) https://bugzilla.redhat.com/show_bug.cgi?id=1608559 --------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-49bda79bd5' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
package-announce@lists.fedoraproject.org