FEDORA-2017-b93e6de389 — security update for kernel

unpushed

kernel-4.11.6-200.fc25

FEDORA-2017-b93e6de389 created by labbott 7 years ago for Fedora 25

The 4.11.6 update contains a number of important fixes across the tree, including the recently announced "stack clash"

Reboot Required

After installing this update it is required that you reboot your system to ensure the changes supplied by this update are applied properly.

This update has been submitted for testing by labbott.

7 years ago

hreindl commented & provided feedback 7 years ago

karma

works for me

anonymous commented & provided feedback 7 years ago

Works for me.

Kernel regression test skipped the first two tests and triggers selinux (selinuxuser_execheap).

karma: +1

Test Case kernel regression

dhgutteridge commented & provided feedback 7 years ago

karma

No regressions noted x86_64 and i686 PAE.

This update has been pushed to testing.

7 years ago

naphan commented & provided feedback 7 years ago

karma

Works. x86_64, GNOME (Core2 Quad, 8 GiB, AMD RV635).

Test Case kernel regression

labbott commented 7 years ago

This update has been unpushed.

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

kernel-4.11.6-200.fc25

Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

7 years ago

in testing

7 years ago

BZ#1442912 Kernels > 4.10 enable extra debugging on b43

BZ#1459326 BUG: audit records being sent to the console even when auditd is running

BZ#1461333 CVE-2017-1000364 kernel: heap/stack gap jumping via unbounded stack allocations

BZ#1462819 CVE-2017-1000364 kernel: heap/stack gap jumping via unbounded stack allocations [fedora-all]

BZ#1462827 CVE-2017-1000365 kernel: RLIMIT_STACK/RLIMIT_INFINITY string size limitation bypass [fedora-all]

BZ#1462828 CVE-2017-1000370 kernel: offset2lib patch protection bypass [fedora-all]

BZ#1462829 CVE-2017-1000371 kernel: offset2lib allows for the stack guard page to be jumped over [fedora-all]

BZ#1462833 CVE-2017-1000379 kernel: Incorrectly mapped contents of PIE executable [fedora-all]

kernel-4.11.6-200.fc25

Automated Test Results

None

Test Cases


0	2	Test Case kernel regression