You are here
Home > Preporuke > Sigurnosni nedostaci programske jezgre

Sigurnosni nedostaci programske jezgre

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

——————————————————————————–
Fedora Update Notification
FEDORA-2018-8dc60a4feb
2018-01-23 21:16:49.691288
——————————————————————————–

Name : kernel
Product : Fedora 26
Version : 4.14.14
Release : 200.fc26
URL : http://www.kernel.org/
Summary : The Linux kernel
Description :
The kernel meta package

——————————————————————————–
Update Information:

The 4.14.14 stable update contains a number of important fixes across the tree.
This update also includes some PPC mitigations, and has been built with a
retpoline capable compiler for improved Spectre mitigation on x86_64.
——————————————————————————–
References:

[ 1 ] Bug #1533891 – CVE-2018-5333 kernel: Null pointer dereference in rds_atomic_free_op() allowing denial-of-service
https://bugzilla.redhat.com/show_bug.cgi?id=1533891
[ 2 ] Bug #1533890 – CVE-2018-5332 kernel: rds_message_alloc_sgs() function doesn’t validate value used during DMA page allocation causes heap out-of-bounds write
https://bugzilla.redhat.com/show_bug.cgi?id=1533890
[ 3 ] Bug #1533909 – CVE-2018-5344 kernel: drivers/block/loop.c mishandles lo_release serialization allowing denial-of-service
https://bugzilla.redhat.com/show_bug.cgi?id=1533909
——————————————————————————–

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade kernel’ at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list — package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

——————————————————————————–
Fedora Update Notification
FEDORA-2018-262eb7c289
2018-01-23 21:42:17.543761
——————————————————————————–

Name : kernel
Product : Fedora 27
Version : 4.14.14
Release : 300.fc27
URL : http://www.kernel.org/
Summary : The Linux kernel
Description :
The kernel meta package

——————————————————————————–
Update Information:

The 4.14.14 stable update contains a number of important fixes across the tree.
This update also includes some PPC mitigations, and has been built with a
retpoline capable compiler for improved Spectre mitigation on x86_64.
——————————————————————————–
References:

[ 1 ] Bug #1533891 – CVE-2018-5333 kernel: Null pointer dereference in rds_atomic_free_op() allowing denial-of-service
https://bugzilla.redhat.com/show_bug.cgi?id=1533891
[ 2 ] Bug #1533890 – CVE-2018-5332 kernel: rds_message_alloc_sgs() function doesn’t validate value used during DMA page allocation causes heap out-of-bounds write
https://bugzilla.redhat.com/show_bug.cgi?id=1533890
[ 3 ] Bug #1533909 – CVE-2018-5344 kernel: drivers/block/loop.c mishandles lo_release serialization allowing denial-of-service
https://bugzilla.redhat.com/show_bug.cgi?id=1533909
——————————————————————————–

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade kernel’ at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list — package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

AutorPetar Bertok
Cert idNCERT-REF-2018-01-0161-ADV
CveCERT-CVE-DUMMY
ID izvornikaCERT-ORIGID-DUMMY
ProizvodCERT-DUMMY-PRODUCT
Izvorhttp://www.adobe.com/
Top
More in Preporuke
Sigurnosni nedostaci programskog paketa mariadb python

Otkriveni su sigurnosni nedostaci u programskom paketu mariadb python za operacijski sustav Fedora. Otkriveni nedostaci potencijalnim napadačima omogućuju stjecanje viših...

Close