diff options
| author | Justin M. Forbes <jforbes@fedoraproject.org> | 2017-05-22 09:03:42 -0500 |
|---|---|---|
| committer | Justin M. Forbes <jforbes@fedoraproject.org> | 2017-05-22 09:03:42 -0500 |
| commit | 9f8b4e17d7a6f5c0d1db440f1f0cdb9d3508e9fc (patch) | |
| tree | b26eb64ec8d07015188444203e6cac8150ce0654 /kernel.spec | |
| parent | bc1e93ab0b68b94e8f283921dd045bf7e77140b9 (diff) | |
| download | kernel-9f8b4e17d7a6f5c0d1db440f1f0cdb9d3508e9fc.tar.gz kernel-9f8b4e17d7a6f5c0d1db440f1f0cdb9d3508e9fc.tar.xz kernel-9f8b4e17d7a6f5c0d1db440f1f0cdb9d3508e9fc.zip | |
Fix CVE-2017-8890 CVE-2017-9074 CVE-2017-9075 CVE-2017-9076 CVE-2017-9077
Diffstat (limited to 'kernel.spec')
| -rw-r--r-- | kernel.spec | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/kernel.spec b/kernel.spec index 76a754287..1a493c201 100644 --- a/kernel.spec +++ b/kernel.spec @@ -611,6 +611,18 @@ Patch865: 0001-ipx-call-ipxitf_put-in-ioctl-error-path.patch Patch866: 0001-SUNRPC-Refactor-svc_set_num_threads.patch Patch867: 0002-NFSv4-Fix-callback-server-shutdown.patch +#CVE-2017-8890 rhbz 1450972 +Patch868: 0001-dccp-tcp-do-not-inherit-mc_list-from-parent.patch + +#CVE-2017-9074 rhbz 1452679 +Patch869: 0001-ipv6-Prevent-overrun-when-parsing-v6-header-options.patch + +#CVE-2017-9075 rhbz 1452691 +Patch870: 0001-sctp-do-not-inherit-ipv6_-mc-ac-fl-_list-from-parent.patch + +#CVE-2017-9076 CVE-2017-9077 rhbz 1452688 1452744 +Patch871: 0001-ipv6-dccp-do-not-inherit-ipv6_mc_list-from-parent.patch + # END OF PATCH DEFINITIONS %endif @@ -2182,6 +2194,8 @@ fi %changelog * Mon May 22 2017 Justin M. Forbes <jforbes@fedoraproject.org> - 4.10.17-200 - Linux v4.10.17 +- Fix CVE-2017-8890 CVE-2017-9074 CVE-2017-9075 CVE-2017-9076 CVE-2017-9077 + (rhbz 1452688 1450972 1452679 1452691 1452688 1452744) * Thu May 18 2017 Justin M. Forbes <jforbes@fedoraproject.org> - Fix CVE-2017-9059 (rhbz 1451386 1451996) |