FEDORA-2019-6c3d89b3d0 — security update for kernel and kernel-headers

stable

kernel-5.1.11-300.fc30 and kernel-headers-5.1.11-300.fc30

FEDORA-2019-6c3d89b3d0 created by jcline 3 years ago for Fedora 30

Update to v5.1.11

Fixes CVE-2019-11477
Fixes CVE-2019-11479
Fixes CVE-2019-11478

Reboot Required

After installing this update it is required that you reboot your system to ensure the changes supplied by this update are applied properly.

How to install

sudo dnf upgrade --refresh --advisory=FEDORA-2019-6c3d89b3d0

This update has been submitted for testing by jcline.

3 years ago

This update test gating status has been changed to 'waiting'.

3 years ago

This update test gating status has been changed to 'ignored'.

3 years ago

nivag commented & provided feedback 3 years ago

karma

works for me: desktop 16GB Intel i7-3770 CPU, using the Mate Desktop Environment. Regression tests passed.

Test Case kernel regression

This update has been pushed to testing.

3 years ago

crcinau commented & provided feedback 3 years ago

karma

Tested in numerous Xen DomU's with no issues.

BZ#1719123 CVE-2019-11477 Kernel: tcp: integer overflow while processing SACK blocks allows remote denial of service

BZ#1719128 CVE-2019-11478 Kernel: tcp: excessive resource consumption while processing SACK blocks allows remote denial of service

BZ#1719129 CVE-2019-11479 Kernel: tcp: excessive resource consumption for TCP connections with low MSS allows remote denial of service

BZ#1721254 CVE-2019-11477 kernel: tcp: integer overflow while processing SACK blocks allows remote denial of service [fedora-all]

BZ#1721255 CVE-2019-11479 kernel: tcp: excessive resource consumption for TCP connections with low MSS allows remote denial of service [fedora-all]

BZ#1721256 CVE-2019-11478 kernel: tcp: excessive resource consumption while processing SACK blocks allows remote denial of service [fedora-all]

Test Case kernel regression

rgessner commented & provided feedback 3 years ago

karma

Works. I5-8400

Test Case kernel regression

imabug provided feedback 3 years ago

karma

Test Case kernel regression

mimat provided feedback 3 years ago

karma

Test Case kernel regression

masami commented & provided feedback 3 years ago

karma

wfm on i7-9700K. Regression test passed. network worked fine.

Test Case kernel regression

This update has been submitted for stable by jcline.

3 years ago

lmouillart provided feedback 3 years ago

karma

atim provided feedback 3 years ago

karma

Test Case kernel regression

xvitaly commented & provided feedback 3 years ago

karma

WFM.

shecks commented & provided feedback 3 years ago

karma

Both the default and performance kernel tests passed. Intel i7-6850K, ASUS X99 MB, 64G RAM, RX 590 GPU

Test Case kernel regression

ibims provided feedback 3 years ago

karma

Test Case kernel regression

goodmirek provided feedback 3 years ago

karma

Test Case kernel regression

pwhalen commented & provided feedback 3 years ago

karma

Tested on aarch64(mustang) and armhfp(rpi3).

This update has been pushed to stable.

3 years ago

Please login to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

kernel-5.1.11-300.fc30

kernel-headers-5.1.11-300.fc30

Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

3 years ago

in testing

3 years ago

in stable

3 years ago

BZ#1719123 CVE-2019-11477 Kernel: tcp: integer overflow while processing SACK blocks allows remote denial of service

BZ#1719128 CVE-2019-11478 Kernel: tcp: excessive resource consumption while processing SACK blocks allows remote denial of service

BZ#1719129 CVE-2019-11479 Kernel: tcp: excessive resource consumption for TCP connections with low MSS allows remote denial of service

BZ#1721254 CVE-2019-11477 kernel: tcp: integer overflow while processing SACK blocks allows remote denial of service [fedora-all]

BZ#1721255 CVE-2019-11479 kernel: tcp: excessive resource consumption for TCP connections with low MSS allows remote denial of service [fedora-all]

BZ#1721256 CVE-2019-11478 kernel: tcp: excessive resource consumption while processing SACK blocks allows remote denial of service [fedora-all]

kernel-5.1.11-300.fc30

kernel-headers-5.1.11-300.fc30

Automated Test Results

ignored

Test Cases


0	10	Test Case kernel regression