FEDORA-2018-262eb7c289 — security update for kernel

stable

kernel-4.14.14-300.fc27

FEDORA-2018-262eb7c289 created by jforbes 6 years ago for Fedora 27

The 4.14.14 stable update contains a number of important fixes across the tree. This update also includes some PPC mitigations, and has been built with a retpoline capable compiler for improved Spectre mitigation on x86_64.

Reboot Required

After installing this update it is required that you reboot your system to ensure the changes supplied by this update are applied properly.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2018-262eb7c289

This update has been submitted for testing by jforbes.

6 years ago

ibims commented & provided feedback 6 years ago

karma

works for me on core i5-3470 ond x86_64. Thanks for building.

puiterwijk commented & provided feedback 6 years ago

karma

Boot test fine on x86_64, aarch64, ppc64, ppc64le. x86_^4 indicates full generic retpoline.

sgraf commented & provided feedback 6 years ago

karma

Works as expected.

$ grep . /sys/devices/system/cpu/vulnerabilities/*
/sys/devices/system/cpu/vulnerabilities/meltdown:Mitigation: PTI
/sys/devices/system/cpu/vulnerabilities/spectre_v1:Vulnerable
/sys/devices/system/cpu/vulnerabilities/spectre_v2:Mitigation: Full generic retpoline
$ uname -a
Linux unknown 4.14.14-300.fc27.x86_64 #1 SMP Fri Jan 19 13:19:54 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux

g6avk commented & provided feedback 6 years ago

karma

Works for me.. Regression tests pass OK.
x86_64 work station, Plasma DE, X-server, nVidia card GTX 650 (GK107) /nouveau

jbwillia commented & provided feedback 6 years ago

karma

wfm nvidia and Vbox drivers built

dhgutteridge commented & provided feedback 6 years ago

karma

No regressions noted on x86_64 and i686+PAE.

nivag commented & provided feedback 6 years ago

karma

basic functionality works, at least the i7-3610QM failed the default regression test (full logs each machine uploaded): desktop 16GB Intel i7-3770 CPU, laptop 16GB Intel i7-3610QM CPU, laptop 8GB Intel i5-2520M CPU Lenovo T420 - all using the Mate Desktop Environment

fixide commented & provided feedback 6 years ago

karma

Works work me. 64 + I7 4770K. Thanks

jag commented & provided feedback 6 years ago

karma

WFM

jag commented & provided feedback 6 years ago

karma

Any special reason why +1 for kernel regression tests won't show up like karma and critpath?

dhgutteridge commented 6 years ago

@jag, kernel regression test feedback going missing is probably related to a bug I filed against Bodhi last night: https://github.com/fedora-infra/bodhi/issues/2130.

This update has been pushed to testing.

6 years ago

This update has been submitted for batched by jforbes.

6 years ago

This update has been submitted for stable by jforbes.

6 years ago

jonnyfahrenheit commented & provided feedback 6 years ago

karma

kernel-4.14.14-200.fc26 works for me now on Ovirt guest (X5355 intel Xeon, dell poweredge 2950 hosting server) after kernel panic on 4.14.11-200.fc26 and 4.14.13-200.fc26. pti and retpoline present in cat /etc/cpuinfo...

Thanks everyone!

Jonny

jayjayjazz commented & provided feedback 6 years ago

karma

Works fine for me on x86_64.

imabug provided feedback 6 years ago

karma

mfdgroot provided feedback 6 years ago

karma

mfdgroot provided feedback 6 years ago

nivag commented 6 years ago

In my previous post for this kernel version: I indicated that the kernel regression test failed, but this site failed to record that!

yanqiyu commented & provided feedback 6 years ago

karma

Works on a Hyper-V guest (Surface pro 4) And a Vultr VPS.

This update has been pushed to stable.

6 years ago

anonymous commented 6 years ago

karma: +1

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

passed

Builds

kernel-4.14.14-300.fc27

Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

6 years ago

in testing

6 years ago

in stable

6 years ago

BZ#1532458 kernel panic running 4.14.11-300.fc27 in a Centos6 KVM

BZ#1533890 CVE-2018-5332 kernel: rds_message_alloc_sgs() function doesn't validate value used during DMA page allocation causes heap out-of-bounds write

BZ#1533891 CVE-2018-5333 kernel: Null pointer dereference in rds_atomic_free_op() allowing denial-of-service

BZ#1533895 CVE-2018-5332 CVE-2018-5333 kernel: various flaws [fedora-all]

BZ#1533909 CVE-2018-5344 kernel: drivers/block/loop.c mishandles lo_release serialization allowing denial-of-service

BZ#1533911 CVE-2018-5344 kernel: drivers/block/loop.c mishandles lo_release serialization allowing denial-of-service [fedora-all]

kernel-4.14.14-300.fc27

Automated Test Results

passed

Test Cases


0	0	Test Case kernel regression