[SECURITY] Fedora 27 Update: kernel-4.15.17-300.fc27

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-1e033dc308
2018-04-18 01:20:06.985027
--------------------------------------------------------------------------------

Name        : kernel
Product     : Fedora 27
Version     : 4.15.17
Release     : 300.fc27
URL         : http://www.kernel.org/
Summary     : The Linux kernel
Description :
The kernel meta package

--------------------------------------------------------------------------------
Update Information:

The 4.15.17 update contains a number of important fixes across the tree.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Apr 12 2018 Laura Abbott <labbott(a)redhat.com&gt; - 4.15.17-300
- Linux v4.15.17
* Thu Apr 12 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt;
- Fix CVE-2018-10021 (rhbz 1566407 1566409)
* Mon Apr  9 2018 Laura Abbott <labbott(a)redhat.com&gt; - 4.15.16-300
- Linux v4.15.16
* Mon Apr  2 2018 Laura Abbott <labbott(a)redhat.com&gt; - 4.15.15-300
- Linux v4.15.15
* Thu Mar 29 2018 Laura Abbott <labbott(a)redhat.com&gt; - 4.15.14-300
- Linux v4.15.14
* Thu Mar 29 2018 Jeremy Cline <jeremy(a)jcline.org&gt;
- Fix mounting NFS with kerberos (rhbz 1558977)
* Mon Mar 26 2018 Laura Abbott <labbott(a)redhat.com&gt; - 4.15.13-300
- Linux v4.15.13
* Thu Mar 22 2018 Laura Abbott <labbott(a)redhat.com&gt; - 4.15.12-301
- Rebuild for kernel-devel fix
* Thu Mar 22 2018 Jeremy Cline <jeremy(a)jcline.org&gt;
- Fix for nouveau backlight regression (rhbz 1511786)
* Wed Mar 21 2018 Laura Abbott <labbott(a)redhat.com&gt; - 4.15.12-300
- Linux v4.15.12
* Mon Mar 19 2018 Laura Abbott <labbott(a)redhat.com&gt; - 4.15.11-300
- Linux v4.15.11
* Mon Mar 19 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt;
- Fix CVE-2017-18232 (rhbz 1558066 1558067)
* Thu Mar 15 2018 Laura Abbott <labbott(a)redhat.com&gt; - 4.15.10-300
- Linux v4.15.10
- Fix for dock booting (rhbz 1549042)
- Fix THP bug (rhbz 1546709)
* Mon Mar 12 2018 Laura Abbott <labbott(a)redhat.com&gt; - 4.15.9-300
- Linux v4.15.9
* Mon Mar 12 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt;
- Fix CVE-2018-7995 (rhbz 1553911 1553918)
- Fix CVE-2018-8043 (rhbz 1554199 1554200)
* Fri Mar  9 2018 Laura Abbott <labbott(a)redhat.com&gt; - 4.15.8-300
- Linux v4.15.8
* Thu Mar  8 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt;
- Fix CVE-2018-7757 (rhbz 1553361 1553363)
* Tue Mar  6 2018 Laura Abbott <labbott(a)redhat.com&gt;
- Fixes for IPMI crash (rbhz 1549316)
* Mon Mar  5 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt;
- Fix CVE-2018-5803 (rhbz 1551051 1551053)
* Fri Mar  2 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt;
- Fix CVE-2018-1065 (rhbz 1547824 1547831)
* Wed Feb 28 2018 Laura Abbott <labbott(a)redhat.com&gt; - 4.15.7-300
- Linux v4.15.7
- Fix IPMI crash (rhbz 1549316)
* Mon Feb 26 2018 Laura Abbott <labbott(a)redhat.com&gt; - 4.15.6-300
- Linux v4.15.6
* Fri Feb 23 2018 Laura Abbott <labbott(a)redhat.com&gt; - 4.15.5-300
- Linux v4.15.5
* Mon Feb 19 2018 Laura Abbott <labbott(a)redhat.com&gt; - 4.15.4-300
- Linux v4.15.4
* Mon Feb 19 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt;
- Fix CVE-2018-1000026 (rhbz 1541846 1546744)
* Thu Feb 15 2018 Fran��ois Cami <fcami(a)fedoraproject.org&gt;
- Enable CONFIG_DRM_AMDGPU_SI
* Tue Feb 13 2018 Laura Abbott <labbott(a)redhat.com&gt; - 4.15.3-300
- Linux v4.15.3
- Fix for b43 wifi (rhbz 1544821)
- Turn off a few powersave options for rebase
* Sun Feb 11 2018 Peter Robinson <pbrobinson(a)fedoraproject.org&gt; 4.15.2-301
- Add Exynos5 patch (second part of series) to fix USB-3 devices on some Odroid devices
- Fix up and re-enable adv7511
- Fix loading of i.MX6 cpufreq driver (rhbz 1466991)
- Improvements/fixes for Raspberry Pi HDMI monitor detection
- Fix regression with AllWinner (sunxi) crypto PRNG, and module loading
* Wed Feb  7 2018 Laura Abbott <labbott(a)redhat.com&gt; - 4.15.2-300
- Linux v4.15.2 rebase
- Enable Jack sound on Thinkpad Dock (rhbz 1543326)
* Wed Feb  7 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt; - 4.14.18-300
- Linux v4.14.18
* Mon Feb  5 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt; - 4.14.17-300
- Linux v4.14.17
* Wed Jan 31 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt; - 4.14.16-300
- Linux v4.14.16
* Mon Jan 29 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt;
- Fix CVE-2018-5750 (rhbz 1539706 1539708)
- Fix softlockup (rhbz 1492664 1492665)
* Sat Jan 27 2018 Laura Abbott <labbott(a)fedoraproject.org&gt;
- Add support for Wacom tablet (rhbz 1539238)
* Fri Jan 26 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt; - 4.14.15-301
- Revert retpoline vermagic tag
* Wed Jan 24 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt; - 4.14.15-300
- Linux v4.14.15
- Fix CVE-2018-1000004 (rhbz 1535315 1535316)
* Tue Jan 23 2018 Laura Abbott <labbott(a)fedoraproject.org&gt;
- Fix for nouveau crash (rhbz 1513150)
* Thu Jan 18 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt; - 4.14.14-300
- Add some ppc mitigations from upstream
* Wed Jan 17 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt;
- Linux v4.14.14
- Fixes (rhbz 1532458)
* Fri Jan 12 2018 Jeremy Cline <jeremy(a)jcline.org&gt;
- Fix for CVE-2018-5344 (rhbz 1533909 1533911)
- Fix for CVE-2018-5332 (rhbz 1533890 1533895)
- Fix for CVE-2018-5333 (rhbz 1533891 1533895)
* Wed Jan 10 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt; - 4.14.13-300
- Linux v4.14.13
- Iniital retpoline fixes for Spectre v2
* Mon Jan  8 2018 Laura Abbott <labbott(a)redhat.com&gt;
- Disable CONFIG_RESET_ATTACK_MITIGATION (rhbz 1532058)
* Fri Jan  5 2018 Laura Abbott <labbott(a)redhat.com&gt;
- Copy module linker script (rhbz 1531182)
* Fri Jan  5 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt; - 4.14.12-300
- Linux v4.14.12
* Thu Jan  4 2018 Hans de Goede <hdegoede(a)redhat.com&gt;
- Add a patch to filter false positive kbd backlight change events (#1514969)
* Wed Jan  3 2018 Justin M. Forbes <jforbes(a)fedoraproject.org&gt; - 4.14.11-300
- Linux v4.14.11
* Mon Jan  1 2018 Laura Abbott <labbott(a)redhat.com&gt; - 4.14.10-300
- Linux v4.14.10
* Tue Dec 26 2017 Justin M. Forbes <jforbes(a)fedoraproject.org&gt; - 4.14.9-300
- Linux v4.14.9
- Fixes CVE-2017-17862 CVE-2017-17863 CVE-2017-17864 (rhbz 1529120 1529123 1529124
1529125)
- Fixes CVE-2017-17852 CVE-2017-17853 CVE-2017-17854 CVE-2017-17855 CVE-2017-17856
CVE-2017-17857
  (rhbz 1530269 1530270 1530271 1530272 1530273 1530274 1530279)
* Wed Dec 20 2017 Justin M. Forbes <jforbes(a)fedoraproject.org&gt; - 4.14.8-300
- Linux v4.14.8
* Wed Dec 20 2017 Jeremy Cline <jeremy(a)jcline.org&gt;
- Backport fix e1000_check_for_copper_link_ich8lan return value
* Tue Dec 19 2017 Justin M. Forbes <jforbes(a)fedoraproject.org&gt;
- Fix CVE-2017-17741 (rhbz 1527112 1527113)
* Mon Dec 18 2017 Justin M. Forbes <jforbes(a)fedoraproject.org&gt; - 4.14.7-300
- Linux v4.14.7
- Fix CVE-2017-17712 (rhbz 1526427 1526933)
* Thu Dec 14 2017 Jeremy Cline <jeremy(a)jcline.org&gt; - 4.14.6-300
- Linux v4.14.6
- Security fix for CVE-2017-17449 (rhbz 1525762 1525763)
- Security fix for CVE-2017-17450 (rhbz 1525761 1525764)
- Security fix for CVE-2017-17448 (rhbz 1525768 1525769)
* Wed Dec 13 2017 Jeremy Cline <jeremy(a)jcline.org&gt;
- Fix CVE-2017-17558 (rhbz 1525474 1525476)
- Revert exec: avoid RLIMIT_STACK races with prlimit()
* Tue Dec 12 2017 Jeremy Cline <jeremy(a)jcline.org&gt;
- Fix CVE-2017-8824 (rhbz 1519591 1520764)
* Mon Dec 11 2017 Jeremy Cline <jeremy(a)jcline.org&gt;
- Re-fix USB null pointer dereference on ThinkPad X1 (rhbz 1462175)
* Mon Dec 11 2017 Jeremy Cline <jeremy(a)jcline.org&gt; - 4.14.5-300
- Linux v4.14.5
- Re-enable driver for the Behringer BCD 2000
* Wed Dec  6 2017 Peter Robinson <pbrobinson(a)fedoraproject.org&gt; 4.14.4-300
- Linux v4.14.4
- Fixes for dwmac-sun8i for A64/Pine64
- Fixes for Cavium ThunderX (rhbz 1521190)
* Mon Dec  4 2017 Justin M. Forbes <jforbes(a)fedoraproject.org&gt; - 4.14.3-300
- Linux v4.14.3 rebase
* Thu Nov 30 2017 Jeremy Cline <jeremy(a)jcline.org&gt; - 4.13.16-302
- Fix CVE-2017-1000405 (rhbz 1516514 1519115)
* Wed Nov 29 2017 Jeremy Cline <jeremy(a)jcline.org&gt; - 4.13.16-301
- Fix USB null pointer dereference on ThinkPad X1 (rhbz 1462175)
- Patches ppc64, ppc64le mm failure (rhbz 1518707)
* Mon Nov 27 2017 Jeremy Cline <jeremy(a)jcline.org&gt; - 4.13.16-300
- Linux v4.13.16
- Fix CVE-2017-16649 (rhbz 1516267 1516274)
- Fix CVE-2017-16650 (rhbz 1516265 1516274)
- Fix CVE-2017-16644 (rhbz 1516273 1516274)
- Fix CVE-2017-16647 (rhbz 1516270 1516274)
* Tue Nov 21 2017 Justin M. Forbes <jforbes(a)fedoraproject.org&gt;
- Fix cursor issues with QXL (rhbz 1507931)
* Tue Nov 21 2017 Jeremy Cline <jeremy(a)jcline.org&gt; - 4.13.15-300
- Linux v4.13.15
* Mon Nov 20 2017 Laura Abbott <labbott(a)redhat.com&gt;
- Enable driver for the Behringer BCD 2000 (rhbz 1514945)
* Sun Nov 19 2017 Jeremy Cline <jeremy(a)jcline.org&gt; - 4.13.14-300
- Linux v4.13.14
* Wed Nov 15 2017 Jeremy Cline <jeremy(a)jcline.org&gt; - 4.13.13-300
- Linux v4.13.13
- Fix CVE-2017-15115 (rhbz 1513346 1513345)
* Wed Nov 15 2017 Peter Robinson <pbrobinson(a)fedoraproject.org&gt;
- Add fix for vc4 interupts
* Wed Nov  8 2017 Jeremy Cline <jeremy(a)jcline.org&gt; - 4.13.12-300
- Linux v4.13.12
* Wed Nov  8 2017 Justin M. Forbes <jforbes(a)fedoraproject.org&gt;
- Fix CVE-2017-16532 (rhbz 1510835 1510854)
- Fix CVE-2017-16538 (rhbz 1510826 1510854)
* Mon Nov  6 2017 Laura Abbott <labbott(a)redhat.com&gt;
- Patches for ThinkPad X1 Carbon Gen5 Touchpad (rhbz 1509461)
- Fix for KVM regression on some machines (rhbz 1490803)
* Thu Nov  2 2017 Jeremy Cline <jeremy(a)jcline.org&gt; - 4.13.11-300
- Linux v4.13.11
- Fix CVE-2017-12193 (rhbz 1501215 1508717)
- SMB3: Validate negotiate request must always be signed (rhbz 1502606)
- Backport new SELinux NNP/nosuid patch to resolve interactions with systemd
* Wed Nov  1 2017 Laura Abbott <labbott(a)fedoraproject.org&gt;
- Add fix for potential mlxsw firmware incompatibility
* Mon Oct 30 2017 Hans de Goede <jwrdegoede(a)fedoraproject.org&gt;
- Fix 0001-platform-x86-peaq-wmi-Add-DMI-check-before-binding-t.patch
  having a dmi_table which lacks a terminating entry
* Fri Oct 27 2017 Jeremy Cline <jeremy(a)jcline.org&gt; - 4.13.10-300
- Linux v4.13.10
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1566407 - CVE-2018-10021 kernel: ata qc leak in
drivers/scsi/libsas/sas_scsi_host.c allows local users to cause denial-of-service
        https://bugzilla.redhat.com/show_bug.cgi?id=1566407
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-1e033dc308' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------