[SECURITY] Fedora 28 Update: kernel-4.18.9-200.fc28

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-e820fccd83
2018-09-22 20:49:57.250306
--------------------------------------------------------------------------------

Name        : kernel
Product     : Fedora 28
Version     : 4.18.9
Release     : 200.fc28
URL         : https://www.kernel.org/
Summary     : The Linux kernel
Description :
The kernel meta package

--------------------------------------------------------------------------------
Update Information:

The 4.18.9 stable update contains a number of important fixes across the tree.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Sep 20 2018 Laura Abbott <labbott(a)redhat.com&gt; - 4.18.9-200
- Linux v4.18.9
* Sun Sep 16 2018 Laura Abbott <labbott(a)redhat.com&gt; - 4.18.8-200
- Linux v4.18.8
* Fri Sep 14 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt;
- Additional Fixes for CVE-2018-5391 (rhbz 1616059)
* Thu Sep 13 2018 Laura Abbott <labbott(a)redhat.com&gt;
- Use the CPU RNG for entropy (rhbz 1572944)
* Thu Sep 13 2018 Laura Abbott <labbott(a)redhat.com&gt;
- HID fixes (rhbz 1627963 1628715)
* Mon Sep 10 2018 Laura Abbott <labbott(a)redhat.com&gt; - 4.18.7-200
- Linux v4.18.7
* Sun Sep  9 2018 Laura Abbott <labbott(a)redhat.com&gt; - 4.18.6-200
- Linux v4.18.6
* Fri Aug 24 2018 Laura Abbott <labbott(a)redhat.com&gt; - 4.18.5-200
- Linux v4.18.5
* Fri Aug 24 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt; - 4.17.19-200
- Linux v4.17.19
* Wed Aug 22 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt; - 4.17.18-200
- Linux v4.17.18
* Mon Aug 20 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt; - 4.17.17-200
- Linux v4.17.17
- Fix CVE-2018-15471 (rhbz 1610555 1618414)
* Wed Aug 15 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt; - 4.17.14-202
- Include missing Forshadow patches
* Tue Aug 14 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt; - 4.17.14-201
- Fix "Foreshadow" CVE-2018-3620 CVE-2018-3646 (rhbz 1585005 1615998)
* Thu Aug  9 2018 Justin M. Forbes <jforbes(a)redhat.com&gt; - 4.17.14-200
- Linux v4.17.14
* Wed Aug  8 2018 Justin M. Forbes <jforbes(a)redhat.com&gt; - 4.17.13-200
- Linux v4.17.13
* Fri Aug  3 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt; - 4.17.12-200
- Linux v4.17.12
- Fixes CVE-2018-14734 (rhbz 1611005 1611007)
- Fixes (rhbz 1609932)
* Wed Aug  1 2018 Peter Robinson <pbrobinson(a)fedoraproject.org&gt;
- Add fix for lan78xx RX packets (Raspberry Pi 3B+)
* Mon Jul 30 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt; - 4.17.11-200
- Linux v4.17.11
- Turn off kernel-headers for the split
- Fix CVE-2018-14678 (rhbz 1608559 1608560)
* Wed Jul 25 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt; - 4.17.10-200
- Linux v4.17.10
* Mon Jul 23 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt; - 4.17.9-200
- Linux v4.17.9
- Fix emergency shell with ext4 rootfs (rhbz 1602971)
* Mon Jul 23 2018 Jeremy Cline <jeremy(a)jcline.org&gt;
- Fix iwlwifi module load failure (rhbz 1607092)
* Tue Jul 17 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt; - 4.17.7-200
- Linux v4.17.7
* Thu Jul 12 2018 Jeremy Cline <jeremy(a)jcline.org&gt;
- Avoid an early WARN_ON in Xen (rhbz 1592976)
- Fix perceived dead xhci host (rhbz 1597333)
* Thu Jul 12 2018 Dan Hor��k <dan(a)danny.cz&gt;
- Enable HDA sound drivers on PPC
* Wed Jul 11 2018 Jeremy Cline <jcline(a)redhat.com&gt; - 4.17.6-200
- Linux v4.17.6
* Wed Jul 11 2018 Jeremy Cline <jeremy(a)jcline.org&gt;
- Add device ID for RTL8822BE in the Asus ROG GL702ZC (rhbz 1599917)
* Mon Jul  9 2018 Jeremy Cline <jcline(a)redhat.com&gt; - 4.17.5-200
- Linux v4.17.5
- Fix CVE-2018-13405 (rhbz 1599161 1599162)
* Thu Jul  5 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt; 
- Fix CVE-2018-13053 (rhbz 1597747 1597748)
- Fix CVE-2018-12896 (rhbz 1597759 1597760)
- Fix CVE-2018-13093 (rhbz 1597766 1597767)
- Fix CVE-2018-13094 (rhbz 1597771 1597772)
- Fix CVE-2018-13095 (rhbz 1597775 1597777)
* Tue Jul  3 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt; - 4.17.4-200
- Linux v4.17.4
* Fri Jun 29 2018 Jeremy Cline <jeremy(a)jcline.org&gt;
- Revert the CRNG init patches (rhbz 1572944)
* Thu Jun 28 2018 Jeremy Cline <jeremy(a)jcline.org&gt;
- Fix CVE-2018-12714 (rhbz 1595835 1595837)
* Tue Jun 26 2018 Laura Abbott <labbott(a)redhat.com&gt;
- Enable leds-pca9532 module (rhbz 1595163)
* Tue Jun 26 2018 Jeremy Cline <jcline(a)redhat.com&gt; - 4.17.3-200
- Linux v4.17.3
* Mon Jun 25 2018 Laura Abbott <labbott(a)fedoraproject.org&gt;
- Some webcam fixes (rhbz 1592454 1590304)
- Fix for armv7 siginfo ABI regression (rhbz 1591516)
* Fri Jun 22 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt;
- Fix CVE-2018-12633 (rhbz 1594170 1594172)
* Thu Jun 21 2018 Laura Abbott <labbott(a)fedoraproject.org&gt;
- Fix for Xen MTU issue (rhbz 1584216)
* Thu Jun 21 2018 Peter Robinson <pbrobinson(a)fedoraproject.org&gt;
- Add fix for 96boards DB410c
* Tue Jun 19 2018 Jeremy Cline <jeremy(a)jcline.org&gt;
- Re-apply the XPS 13 9370 backlight, ath10k bandwidth, and kexec patches
- Don't log an error if RTC_NVMEM isn't enabled (rhbz 1568276)
* Mon Jun 18 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt; - 4.17.2-200
- Linux v4.17.2 Rebase
* Sun Jun 17 2018 Jeremy Cline <jcline(a)redhat.com&gt; - 4.16.16-300
- Linux v4.16.16
* Tue Jun 12 2018 Jeremy Cline <jeremy(a)jcline.org&gt;
- Fix a crash in ath10k when bandwidth changes (rhbz 1577106)
- Fix kexec_file_load pefile signature verification (rhbz 1470995)
* Tue Jun 12 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt;
- Fix CVE-2018-12232 (rhbz 1590215 1590216)
* Mon Jun 11 2018 Jeremy Cline <jeremy(a)jcline.org&gt; - 4.16.15-300
- Fix for the keyboard backlight on Dell XPS 13 9370
- Linux v4.16.15
* Mon Jun 11 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt;
- Fix CVE-2018-10853 (rhbz 1589890 1589892)
* Tue Jun  5 2018 Jeremy Cline <jeremy(a)jcline.org&gt;
- Enable CONFIG_SCSI_DH on s390x (rhbz 1586189)
* Tue Jun  5 2018 Jeremy Cline <jcline(a)redhat.com&gt; - 4.16.14-300
- Linux v4.16.14
* Mon Jun  4 2018 Jeremy Cline <jeremy(a)jcline.org&gt;
- Drop SanDisk SD7UB3Q*G1001 NOLPM quirk (rhbz 1583207)
* Wed May 30 2018 Jeremy Cline <jcline(a)redhat.com&gt; - 4.16.13-300
- Linux v4.16.13
- Fixes CVE-2018-11506 (rhbz 1583210 1583213)
* Fri May 25 2018 Jeremy Cline <jcline(a)redhat.com&gt; - 4.16.12-300
- Linux v4.16.12
- Fix CVE-2018-10840 (rhbz 1582346 1582348)
- Fix for incorrect error message about parsing PCCT (rhbz 1435837)
* Tue May 22 2018 Jeremy Cline <jcline(a)redhat.com&gt; - 4.16.11-300
- Linux v4.16.11
* Mon May 21 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt; - 4.16.10-301
- Fix CVE-2018-3639 (rhbz 1566890 1580713)
* Mon May 21 2018 Jeremy Cline <jcline(a)redhat.com&gt; - 4.16.10-300
- Linux v4.16.10
* Sun May 20 2018 Hans de Goede <hdegoede(a)redhat.com&gt;
- Enable GPIO_AMDPT, PINCTRL_AMD and X86_AMD_PLATFORM_DEVICE Kconfig options
  to fix i2c and GPIOs not working on AMD based laptops (rhbz#1510649)
* Thu May 17 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt;
- Fix CVE-2018-1120 (rhbz 1575472 1579542)
* Thu May 17 2018 Jeremy Cline <jcline(a)redhat.com&gt; - 4.16.9-300
- Linux v4.16.9
- Silence unwanted "swiotlb buffer is full" warnings (rhbz 1556797)
* Wed May  9 2018 Jeremy Cline <jeremy(a)jcline.org&gt;
- Workaround for m400 uart irq firmware description (rhbz 1574718)
* Wed May  9 2018 Jeremy Cline <jeremy(a)jcline.org&gt; - 4.16.8-300
- Linux v4.16.8
* Mon May  7 2018 Jeremy Cline <jeremy(a)jcline.org&gt;
- Fix issue with KVM on older Core 2 processors (rhbz 1566258)
* Sat May  5 2018 Peter Robinson <pbrobinson(a)fedoraproject.org&gt;
- ARM and Raspberry Pi fixes
- Fix USB-2 on Tegra devices
* Fri May  4 2018 Laura Abbott <labbott(a)redhat.com&gt;
- Fix for building out of tree modules on powerpc (rhbz 1574604)
* Fri May  4 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt;
- Fix CVE-2018-10322 (rhbz 1571623 1571624)
- Fix CVE-2018-10323 (rhbz 1571627 1571630)
* Wed May  2 2018 Jeremy Cline <jeremy(a)jcline.org&gt; - 4.16.7-300
- Linux v4.16.7
* Tue May  1 2018 Jeremy Cline <jeremy(a)jcline.org&gt; - 4.16.6-302
- Revert the entire random series from 4.16.4 (rhbz 1572944)
* Tue May  1 2018 Jeremy Cline <jeremy(a)jcline.org&gt; - 4.16.6-301
- Revert the fix for CVE-2018-1108 (rhbz 1572944)
* Mon Apr 30 2018 Jeremy Cline <jeremy(a)jcline.org&gt; - 4.16.6-300
- Linux v4.16.6
* Fri Apr 27 2018 Jeremy Cline <jeremy(a)jcline.org&gt; - 4.16.5-300
- Fix an issue with bluetooth autosupsend on some XPS 13 9360 (rhbz 1514836)
- Fix prlimit64 with RLIMIT_CPU ignored (rhbz 1568337)
- Linux v4.16.5
* Fri Apr 27 2018 Peter Robinson <pbrobinson(a)fedoraproject.org&gt;
- Enable QLogic NICs on ARM
* Wed Apr 25 2018 Jeremy Cline <jeremy(a)jcline.org&gt;
- Fix a kernel oops when using Thunderbolt 3 docks (rhbz 1565131)
* Tue Apr 24 2018 Jeremy Cline <jeremy(a)jcline.org&gt; - 4.16.4-300
- Linux v4.16.4
- Fix a regression in backlight interfaces for some laptops (rhbz 1571036)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1631205 - CVE-2018-17182 kernel: Use-after-free in the vmacache_flush_all
function resulting in a possible privilege escalation
        https://bugzilla.redhat.com/show_bug.cgi?id=1631205
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-e820fccd83' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------