FEDORA-2019-7bdeed7fc5 — security update for kernel, kernel-headers, & 1 more

stable

kernel-4.20.11-200.fc29, kernel-headers-4.20.11-200.fc29, & 1 more

FEDORA-2019-7bdeed7fc5 created by jforbes 6 years ago for Fedora 29

The 4.20.11 stable kernel update contains a number of important fixes across the tree.

Reboot Required

After installing this update it is required that you reboot your system to ensure the changes supplied by this update are applied properly.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2019-7bdeed7fc5

This update has been submitted for testing by jforbes.

6 years ago

This update has been pushed to testing.

6 years ago

nivag commented & provided feedback 6 years ago

karma

wfm: desktop 16GB Intel i7-3770 CPU, laptop 8GB Intel i5-2520M CPU Lenovo T420 - all using the Mate Desktop Environment (again the desktop is more than 10 times faster than the laptop -- NB in 4.20.5 the laptop was slightly faster than the desktop [both under 10 seconds] , much to my amazement)

Test Case kernel regression

pcw commented & provided feedback 6 years ago

karma

No issues noted using i3-7100T x86_64 8GB RAM laptop with external monitor

decathorpe commented & provided feedback 6 years ago

karma

Works great, regression test suite passes with both:

AMD ryzen 1st gen + Nvidia GTX 1070 / negativo17 drivers
dell XPS 13 9370 (intel i7-8550U + UHD 620)

Test Case kernel regression

bojan commented & provided feedback 6 years ago

karma

Works on T450s and XS35GTv2.

atim provided feedback 6 years ago

karma

Test Case kernel regression

xvitaly commented & provided feedback 6 years ago

karma

Works great.

imabug provided feedback 6 years ago

karma

Test Case kernel regression

maze commented & provided feedback 6 years ago

karma

Also fixes https://bugzilla.redhat.com/show_bug.cgi?id=1677858 which is a perf/powertop regression in 4.20.10 at least compared to 4.20.8

keberwein commented & provided feedback 6 years ago

karma

Works. No regressions found, seems to be in order.

ozeszty commented & provided feedback 6 years ago

karma

No regressions spotted on IvyBridge / Radeon HD 7670m hybrid.

Test Case kernel regression

anonymous commented & provided feedback 6 years ago

Works on T480s with i7-8650U

BZ#1678685 CVE-2019-8912 kernel: af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr

BZ#1678686 CVE-2019-8912 kernel: af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr [fedora-all]

goodmirek commented & provided feedback 6 years ago

karma

x86_64, CPU i5-7200U w/embedded GPU, model HP850G4, KDE5, VirtualBox, VPN IPsec/OpenVPN

Test Case kernel regression

nomos commented & provided feedback 6 years ago

karma

Tested on virtual machine with AMD Ryzen 5 2400G.

Test Case kernel regression

rgessner commented & provided feedback 6 years ago

karma

works fine on old Dell Latitude E6510 I5

Test Case kernel regression

andilinux commented & provided feedback 6 years ago

karma

works fine on Dell

g6avk commented & provided feedback 6 years ago

karma

Works for me..
The Default and Performance Regression tests pass OK. AMD 965, x86_64 work station, Plasma DE, X-server, nVidia card GTX 650 (GK107) + nVidia RPM's from Negativo17.

Test Case kernel regression

masami commented & provided feedback 6 years ago

karma

works fine for me on i7-5820K and kvm. regression test passed both environment.

Test Case kernel regression

daibhidh commented & provided feedback 6 years ago

karma

The problem reported in Red Hat Bugzilla – Bug 1678755 for kernel-4.20.8, when powertop was run appears fixed for me in kernel 4.20.11, so thanks for that. Computer: HP Pavilion 15 Notebook PC (G5F00EA#ABU) (Haswell) CPU: Intel(R) Core(TM) i3-4005U CPU @ 1.70GHz

dhgutteridge commented & provided feedback 6 years ago

karma

No regressions noted.

besser82 commented & provided feedback 6 years ago

karma

Works great! LGTM! =)

thomaswiest commented & provided feedback 6 years ago

karma

Tested on Dell Inspiron 7580 (2018) with i7-8565U and 16 Gig RAM - works perfectly! No more Segfaults from powertop. No regressions found.

Thank you!

Test Case kernel regression

ibims commented & provided feedback 6 years ago

karma

LGTM

Test Case kernel regression

gkaukola commented & provided feedback 6 years ago

karma

Works on my end.

Test Case kernel regression

mharpau commented & provided feedback 6 years ago

karma

No regressions on T480s iGPU.

Test Case kernel regression

hhlp commented & provided feedback 6 years ago

karma

lgtm pass default kernel test

thyzch commented & provided feedback 6 years ago

karma

dimitrisk commented & provided feedback 6 years ago

karma

No regressions, Thinkpad X250

dandim commented & provided feedback 6 years ago

karma

No problems

westwood commented & provided feedback 6 years ago

karma

Intel(R) Celeron(R) J4105 - powertop no longer crashing

filiperosset commented & provided feedback 6 years ago

karma

no regressions noted

renault commented & provided feedback 6 years ago

karma

Works fine, no regressions found on Lenovo E560, kernel tests passed except for paxtest as usual

This update has been submitted for batched by jforbes.

6 years ago

This update has been submitted for stable by jforbes.

6 years ago

rathann commented & provided feedback 6 years ago

karma

It looks like nobody noticed that 4.20.11-200.fc29 is not shipping nouveau driver:

# rpm -ql kernel-modules-4.20.11|grep nouveau.ko
# rpm -ql kernel-modules-4.20.10|grep nouveau.ko
/lib/modules/4.20.10-200.fc29.x86_64/kernel/drivers/gpu/drm/nouveau/nouveau.ko.xz

A serious regression for me.

rathann commented & provided feedback 6 years ago

karma

Actually, scratch that. It looks like dnf didn't install kernel-modules-4.20.11 and I haven't noticed. Sorry for the false alarm. All is fine.

This update has been pushed to stable.

6 years ago

boycottsystemd1 commented & provided feedback 6 years ago

$ uname -a Linux fedora 4.20.8-200.fc29.x86_64

dnf --security --refresh upgrade

doesn't offer this kernel. Is this really security update ?

ozeszty commented & provided feedback 6 years ago

@boycottsystemd1 https://ask.fedoraproject.org/en/question/112064/how-to-synchronise-the-latest-version-of-fedora-repo-available-with-my-computer/#112078

If you rerun dnf command with -v parameter, it will tell you from when is the metadata you're downloading - it'll probably still be the previous one.

brentrbrian commented & provided feedback 6 years ago

karma

Lenovo ideapad 330 15-ARR AMD 2700u Radeon Vega

clean boot without kernel parms
came up with proper GUI login

Fingers crossed, looks much better ...

Feb 26 14:45:04 kernel: [Firmware Bug]: AMD-Vi: IOAPIC[4] not in IVRS table Feb 26 14:45:04 kernel: [Firmware Bug]: AMD-Vi: IOAPIC[5] not in IVRS table Feb 26 14:45:04 kernel: [Firmware Bug]: AMD-Vi: No southbridge IOAPIC found

boycottsystemd1 commented & provided feedback 6 years ago

@ozeszty thank you

boycottsystemd1 commented & provided feedback 6 years ago

karma

no sound in palemoon

ALSA lib pcm_dmix.c:1108:(snd_pcm_dmix_open) unable to open slave

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

6 years ago

in testing

6 years ago

in stable

6 years ago

Builds

kernel-4.20.11-200.fc29

kernel-headers-4.20.11-200.fc29

kernel-tools-4.20.11-200.fc29

BZ#1678685 CVE-2019-8912 kernel: af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr

BZ#1678686 CVE-2019-8912 kernel: af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr [fedora-all]

kernel-4.20.11-200.fc29

kernel-headers-4.20.11-200.fc29

kernel-tools-4.20.11-200.fc29

Automated Test Results

ignored

Test Cases


0	13	Test Case kernel regression