FEDORA-2019-91f6e7bb71 — security update for kernel

stable

kernel-5.3.13-300.fc31

FEDORA-2019-91f6e7bb71 created by labbott 5 years ago for Fedora 31

The 5.3.13 update contains a number of important fixes across the tree

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2019-91f6e7bb71

This update has been submitted for testing by labbott.

5 years ago

This update's test gating status has been changed to 'waiting'.

5 years ago

This update's test gating status has been changed to 'ignored'.

5 years ago

markec provided feedback 5 years ago

karma

ibims commented & provided feedback 5 years ago

karma

Works on baremetal (non EFI) AMD Ryzen 5 3600 with prop. nvidia driver from rpmfusion (GTX980 card), VirtualBox 6.0.14 from Oracle and Gnome-Desktop. Regression test passed (paxtest, selinux-dac-controls and libhugetlbfs skipped).

Test Case kernel regression

xvitaly commented & provided feedback 5 years ago

karma

WFM both on desktop and laptop. No regressions noted.

g6avk commented & provided feedback 5 years ago

karma

Works for me.
The Default and Performance tests pass OK. AMD 965, x86_64 work station, RAID-1, Plasma DE, X-server, nVidia card GTX 650 (GK107) + nVidia RPM's from Negativo17 (440.31)

Test Case kernel regression

This update has been pushed to testing.

5 years ago

This update can be pushed to stable now if the maintainer wishes

5 years ago

atim provided feedback 5 years ago

karma

Test Case kernel regression

pwalter commented & provided feedback 5 years ago

karma

Works

itrymybest80 commented & provided feedback 5 years ago

Default regression test FAILED due to paxtest and cachedrop; though 2nd run passed (also skipped libhugetlbfs), but the performance regression test passed with PRIME Z270-A, i5-7600K, 16GB and RX 580 on mesa 19.6.2.

Test Case kernel regression

elxreno commented & provided feedback 5 years ago

karma

WFM on my server and desktop. All tests passed.

Test Case kernel regression

bojan provided feedback 5 years ago

karma

chr77 commented & provided feedback 5 years ago

karma

Works for me. No regressions noted compared to previous version.

alciregi commented & provided feedback 5 years ago

karma

WFM. No regressions noted compared to previous version.

Test Case kernel regression

alciregi commented & provided feedback 5 years ago

karma

WFM. No regressions noted compared to previous version.

Test Case kernel regression

cairo provided feedback 5 years ago

karma

frantisekz commented & provided feedback 5 years ago

karma

Works fine on Thinkpad T470s

sassam commented & provided feedback 5 years ago

karma

Works for me on Thinkpad T440s
Regression test passed.

Test Case kernel regression

kparal commented & provided feedback 5 years ago

karma

seems to work fine on Thinkpad T480s

decathorpe commented & provided feedback 5 years ago

karma

Works great so far. Default and Performance regression test suite pass on both my systems: - ryzen 1700X + GTX 1070 (negativo17 drivers) - XPS 13 9370 (i7-8550U + UHD 620)

Test Case kernel regression

mharpau commented & provided feedback 5 years ago

karma

No issues on T480s, iGPU

Test Case kernel regression

agurenko commented & provided feedback 5 years ago

karma

Works well on Lenovo T460p

This update has been submitted for stable by labbott.

5 years ago

This update has been pushed to stable.

5 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

5 years ago

in testing

5 years ago

in stable

5 years ago

Builds

kernel-5.3.13-300.fc31

BZ#1773519 CVE-2019-14901 kernel: heap overflow in marvell/mwifiex/tdls.c

BZ#1774870 CVE-2019-14895 kernel: heap-based buffer overflow in mwifiex_process_country_ie() function in drivers/net/wireless/marvell/mwifiex/sta_ioctl.c

BZ#1774875 CVE-2019-14896 kernel: heap-based buffer overflow in lbs_ibss_join_existing function in drivers/net/wireless/marvell/libertas/cfg.c

BZ#1774879 CVE-2019-14897 kernel: stack-based buffer overflow in add_ie_rates function in drivers/net/wireless/marvell/libertas/cfg.c

BZ#1776139 CVE-2019-14895 kernel: heap-based buffer overflow in mwifiex_process_country_ie() function in drivers/net/wireless/marvell/mwifiex/sta_ioctl.c [fedora-all]

BZ#1776143 CVE-2019-14896 kernel: heap-based buffer overflow in lbs_ibss_join_existing function in drivers/net/wireless/marvell/libertas/cfg.c [fedora-all]

BZ#1776146 CVE-2019-14897 kernel: stack-based buffer overflow in add_ie_rates function in drivers/net/wireless/marvell/libertas/cfg.c [fedora-all]

BZ#1776184 CVE-2019-14901 kernel: heap overflow in marvell/mwifiex/tdls.c [fedora-all]

BZ#1776353 CVE-2019-19078 kernel: memory leak in the ath10k_usb_hif_tx_sg() function in drivers/net/wireless/ath/ath10k/usb.c leads to DoS

BZ#1776354 CVE-2019-19078 kernel: memory leak in the ath10k_usb_hif_tx_sg() function in drivers/net/wireless/ath/ath10k/usb.c leads to DoS [fedora-all]

kernel-5.3.13-300.fc31

Automated Test Results

ignored

Test Cases


-1	8	Test Case kernel regression