Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 66

Vulnerabilities 4

• Medium 5.6
  CVE-2019-1125 Public exploit

  Windows Kernel Information Disclosure Vulnerability

  An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory. An attacker who successfully exploited the vulnerability could read privileged data across trust boundaries. To exploit this vulnerability,…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows Debian Ubuntu
  Sep 3, 2019
• Unscored —
  CVE-2017-17805

  The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowi…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 20, 2017
• Unscored —
  CVE-2018-17972

  An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does n…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 3, 2018
• Unscored —
  CVE-2019-5489 Public exploit

  The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe pag…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jan 7, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/articles/4329821
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1528312
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1636349
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1664110
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1724389
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2473.json
• report
  https://access.redhat.com/security/cve/CVE-2017-17805
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-17805
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-17805
• report
  https://access.redhat.com/security/cve/CVE-2018-17972
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-17972
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-17972
• report
  https://access.redhat.com/security/cve/CVE-2019-1125
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-1125
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-1125
• report
  https://access.redhat.com/security/cve/CVE-2019-5489
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-5489
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-5489