[SECURITY] Fedora 20 Update: kernel-3.12.7-300.fc20

updates at fedoraproject.org updates at fedoraproject.org
Tue Jan 14 08:38:18 UTC 2014


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-0696
2014-01-12 03:54:38
--------------------------------------------------------------------------------

Name        : kernel
Product     : Fedora 20
Version     : 3.12.7
Release     : 300.fc20
URL         : http://www.kernel.org/
Summary     : The Linux kernel
Description :
The kernel package contains the Linux kernel (vmlinuz), the core of any
Linux operating system.  The kernel handles the basic functions
of the operating system: memory allocation, process allocation, device
input and output, etc.

--------------------------------------------------------------------------------
Update Information:

The 3.12.7 stable update contains a number of important fixes across the tree.
--------------------------------------------------------------------------------
ChangeLog:

* Fri Jan 10 2014 Justin M. Forbes <jforbes at fedoraproject.org - 3.12.7-300
- Linux v3.12.7
* Wed Jan  8 2014 Josh Boyer <jwboyer at fedoraproject.org>
- Backport support for ALPS Dolphin devices (rhbz 953211)
- Enable BCMA_DRIVER_GPIO by turning on GPIOLIB everywhere (rhbz 1021098)
* Mon Jan  6 2014 Josh Boyer <jwboyer at fedoraproject.org>
- Add support for BCM57786 devices to tg3 (rhbz 1044471)
- Fix use after free crash in KVM (rhbz 1047892)
- Fix oops in KVM with invalid root_hpa (rhbz 924916)
- CVE-2013-4579: ath9k_htc improper MAC update (rhbz 1032753 1033072)
* Sat Dec 28 2013 Peter Robinson <pbrobinson at fedoraproject.org>
- Update am33xx (BeagleBone) cpsw patch to upstream version
* Mon Dec 23 2013 Justin M. Forbes <jforbes at fedoraproject.org - 3.12.6-300
- Linux v3.12.6
* Fri Dec 20 2013 Josh Boyer <jwboyer at fedoraproject.org>
- Add patches to fix dummy gssd entry (rhbz 1037793)
* Wed Dec 18 2013 Josh Boyer <jwboyer at fedoraproject.org>
- Fix nowatchdog-on-virt.patch to actually work in KVM guests
* Tue Dec 17 2013 Josh Boyer <jwboyer at fedoraproject.org> - 3.12.5-302
- Add patch to avoid using queued trim on M500 SSD (rhbz 1024002)
* Mon Dec 16 2013 Josh Boyer <jwboyer at fedoraproject.org>
- Fix host lockup in bridge code when starting from virt guest (rhbz 1025770)
* Fri Dec 13 2013 Josh Boyer <jwboyer at fedoraproject.org> 3.12.5-301
- More keys fixes from upstream to fix keyctl_get_persisent crash (rhbz 1043033)
* Fri Dec 13 2013 Justin M. Forbes <jforbes at fedoraproject.org - 3.12.5-300
- Linux v3.12.5 rebase
* Thu Dec 12 2013 Josh Boyer <jwboyer at fedoraproject.org>
- CVE-2013-4587 kvm: out-of-bounds access (rhbz 1030986 1042071)
- CVE-2013-6376 kvm: BUG_ON in apic_cluster_id (rhbz 1033106 1042099)
- CVE-2013-6368 kvm: cross page vapic_addr access (rhbz 1032210 1042090)
- CVE-2013-6367 kvm: division by 0 in apic_get_tmcct (rhbz 1032207 1042081)
* Wed Dec 11 2013 Josh Boyer <jwboyer at fedoraproject.org>
- Add patches to support ETPS/2 Elantech touchpads (rhbz 1030802)
* Tue Dec 10 2013 Josh Boyer <jwboyer at fedoraproject.org>
- CVE-2013-XXXX net: memory leak in recvmsg (rhbz 1039845 1039874)
* Fri Dec  6 2013 Peter Robinson <pbrobinson at fedoraproject.org>
- Fix up ARM usb gadget config to make it useful
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1032753 - CVE-2013-4579 kernel: ath9k_htc driver improperly updates MAC
        https://bugzilla.redhat.com/show_bug.cgi?id=1032753
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update kernel' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


More information about the package-announce mailing list