——————————————————————————–
Fedora Update Notification
FEDORA-2016-06f1572324
2016-06-02 09:08:25.194561
——————————————————————————–

Name : kernel
Product : Fedora 23
Version : 4.5.5
Release : 201.fc23
URL : http://www.kernel.org/
Summary : The Linux kernel
Description :
The kernel meta package

——————————————————————————–
Update Information:

The 4.5.5 stable update contains a number of important fixes across the tree.
—- The 4.5.4 stable update contains a number of important fixes across the
tree. —- The 4.5.3 stable rebase contains enhanced hardware support,
additional features, and a number of important fixes across the tree.
——————————————————————————–
References:

[ 1 ] Bug #1300257 – CVE-2016-0758 kernel: tags with indefinite length can corrupt pointers in asn1_find_indefinite_length()
https://bugzilla.redhat.com/show_bug.cgi?id=1300257
[ 2 ] Bug #1332139 – CVE-2016-3713 kernel: kvm: out-of-bounds access in set_var_mtrr_msr
https://bugzilla.redhat.com/show_bug.cgi?id=1332139
[ 3 ] Bug #1337528 – CVE-2016-4913 kernel: Information leak when handling NM entries containing NUL
https://bugzilla.redhat.com/show_bug.cgi?id=1337528
[ 4 ] Bug #1337806 – CVE-2016-4440 Kernel: kvm: vmx: incorrect state update leading to MSR access
https://bugzilla.redhat.com/show_bug.cgi?id=1337806
[ 5 ] Bug #1334643 – CVE-2016-4569 kernel: Information leak in Linux sound module in timer.c
https://bugzilla.redhat.com/show_bug.cgi?id=1334643
[ 6 ] Bug #1334303 – CVE-2016-4558 kernel: bpf: refcnt overflow
https://bugzilla.redhat.com/show_bug.cgi?id=1334303
[ 7 ] Bug #1334307 – CVE-2016-4557 kernel: Use after free vulnerability via double fdput
https://bugzilla.redhat.com/show_bug.cgi?id=1334307
[ 8 ] Bug #1333712 – CVE-2016-4581 kernel: Slave being first propagated copy causes oops in propagate_mnt
https://bugzilla.redhat.com/show_bug.cgi?id=1333712
[ 9 ] Bug #1333309 – CVE-2016-4485 kernel: Information leak in llc module
https://bugzilla.redhat.com/show_bug.cgi?id=1333309
[ 10 ] Bug #1333316 – CVE-2016-4486 kernel: Information leak in rtnetlink
https://bugzilla.redhat.com/show_bug.cgi?id=1333316
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update kernel’ at the command line.
For more information, refer to “Managing Software with yum”,
available at https://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://lists.fedoraproject.org/admin/lists/package-announce@lists.fedoraproject.org