Fedora alert FEDORA-2016-ee3a114958 (kernel)
From: | updates@fedoraproject.org | |
To: | package-announce@lists.fedoraproject.org | |
Subject: | [SECURITY] Fedora 23 Update: kernel-4.8.8-100.fc23 | |
Date: | Thu, 24 Nov 2016 08:29:52 +0000 (UTC) | |
Message-ID: | <20161124082952.D89B960F8CA9@bastion01.phx2.fedoraproject.org> |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-ee3a114958 2016-11-24 00:27:04.919269 -------------------------------------------------------------------------------- Name : kernel Product : Fedora 23 Version : 4.8.8 Release : 100.fc23 URL : http://www.kernel.org/ Summary : The Linux kernel Description : The kernel meta package -------------------------------------------------------------------------------- Update Information: The 4.8.8 stable kernel update contains a number of important fixes across the tree. ---- The 4.8.7 kernel rebase contains new hardware support, additional features, and a number of important bug fixes across the tree. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1393904 - CVE-2016-8645 kernel: a BUG() statement can be hit in net/ipv4/tcp_input.c https://bugzilla.redhat.com/show_bug.cgi?id=1393904 [ 2 ] Bug #1393350 - CVE-2016-8630 kernel: kvm: x86: NULL pointer dereference during instruction decode https://bugzilla.redhat.com/show_bug.cgi?id=1393350 [ 3 ] Bug #1389259 - CVE-2016-9084 kernel: Integer overflow when using kzalloc in vfio driver https://bugzilla.redhat.com/show_bug.cgi?id=1389259 [ 4 ] Bug #1389258 - CVE-2016-9083 kernel: State machine confusion bug in vfio driver leading to memory corruption https://bugzilla.redhat.com/show_bug.cgi?id=1389258 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade kernel' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgr... All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org