Gah, wrong filelists...

correct ones:
SRPMS:
kernel-linus-4.4.74-1.mga5.src.rpm


i586:
kernel-linus-desktop-4.4.74-1.mga5-1-1.mga5.i586.rpm
kernel-linus-desktop-devel-4.4.74-1.mga5-1-1.mga5.i586.rpm
kernel-linus-desktop-devel-latest-4.4.74-1.mga5.i586.rpm
kernel-linus-desktop-latest-4.4.74-1.mga5.i586.rpm
kernel-linus-source-4.4.74-1.mga5-1-1.mga5.noarch.rpm
kernel-linus-source-latest-4.4.74-1.mga5.noarch.rpm


x86_64:
kernel-linus-desktop-4.4.74-1.mga5-1-1.mga5.x86_64.rpm
kernel-linus-desktop-devel-4.4.74-1.mga5-1-1.mga5.x86_64.rpm
kernel-linus-desktop-devel-latest-4.4.74-1.mga5.x86_64.rpm
kernel-linus-desktop-latest-4.4.74-1.mga5.x86_64.rpm
kernel-linus-source-4.4.74-1.mga5-1-1.mga5.noarch.rpm
kernel-linus-source-latest-4.4.74-1.mga5.noarch.rpm

Testing M5_64 real hardware with Radeon video.
 kernel-linus-latest-4.4.74-1.mga5
 kernel-linus-4.4.74-1.mga5-1-1.mga5

$ uname -r
4.4.74-1.mga5

Grub boot menu entries always uncertain, but I think this is the Linus kernel.
Boots OK, tried LibreOffice Write File menu open, OK.

CC: (none) => lewyssmith

Advisory, also aded to svn:

  This kernel-linus update is based on upstream 4.4.74 and fixes atleast
  the following security issues:

  The ipxitf_ioctl function in net/ipx/af_ipx.c in the Linux kernel through
  4.11.1 mishandles reference counts, which allows local users to cause a
  denial of service (use-after-free) or possibly have unspecified other
  impact via a failed SIOCGIFADDR ioctl call for an IPX interface
  (CVE-2017-7487).

  The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the
  Linux kernel through 4.10.15 allows attackers to cause a denial of service
  (double free) or possibly have unspecified other impact by leveraging use
  of the accept system call (CVE-2017-8890).

  The IPv6 fragmentation implementation in the Linux kernel through 4.11.1
  does not consider that the nexthdr field may be associated with an invalid
  option, which allows local users to cause a denial of service (out-of-bounds
  read and BUG) or possibly have unspecified other impact via crafted socket
  and send system calls (CVE-2017-9074).

  The sctp_v6_create_accept_sk function in net/sctp/ipv6.c in the Linux kernel
  through 4.11.1 mishandles inheritance, which allows local users to cause a
  denial of service or possibly have unspecified other impact via crafted
  system calls, a related issue to CVE-2017-8890 (CVE-2017-9075).

  The dccp_v6_request_recv_sock function in net/dccp/ipv6.c in the Linux kernel
  through 4.11.1 mishandles inheritance, which allows local users to cause a
  denial of service or possibly have unspecified other impact via crafted
  system calls, a related issue to CVE-2017-8890 (CVE-2017-9076).

  The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel
  through 4.11.1 mishandles inheritance, which allows local users to cause a
  denial of service or possibly have unspecified other impact via crafted
  system calls, a related issue to CVE-2017-8890 (CVE-2017-9077).

  The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel
  through 4.11.3 is too late in checking whether an overwrite of an skb data
  structure may occur, which allows local users to cause a denial of service
  (system crash) via crafted system calls (CVE-2017-9242).

  The vmw_gb_surface_define_ioctl function (accessible via
  DRM_IOCTL_VMW_GB_SURFACE_CREATE) in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c
  in the Linux kernel through 4.11.4 defines a backup_handle variable but
  does not give it an initial value. If one attempts to create a GB surface,
  with a previously allocated DMA buffer to be used as a backup buffer, the
  backup_handle variable does not get written to and is then later returned
  to user space, allowing local users to obtain sensitive information from
  uninitialized kernel memory via a crafted ioctl call (CVE-2017-9605).

  A vulnerability was found in the Linux kernel's lp_setup() function where it
  doesn't apply any bounds checking when passing "lp=none". This can result
  into overflow of the parport_nr[] array. An attacker with control over kernel
  command line can overwrite kernel code and data with fixed (0xff) values
  (CVE-2017-1000363).

  A flaw was found in the way memory was being allocated on the stack for
  user space binaries. If heap (or different memory region) and stack memory
  regions were adjacent to each other, an attacker could use this flaw to
  jump over the stack guard gap, cause controlled memory corruption on process
  stack or the adjacent memory region, and thus increase their privileges on
  the system. This is a kernel-side mitigation which increases the stack guard
  gap size from one page to 1 MiB to make successful exploitation of this
  issue more difficult (CVE-2017-1000364).

  sound/core/timer.c in the Linux kernel before 4.11.5 is vulnerable to a
  data race in the ALSA /dev/snd/timer driver resulting in local users being
  able to read information belonging to other users, i.e., uninitialized
  memory contents may be disclosed when a read and an ioctl happen at the
  same time (CVE-2017-1000380).

  Other changes in this kernel:
  - enable support for SMB2 (mga#20886)

 For other upstream fixes in this update, see the referenced changelogs.

Whiteboard: (none) => advisory

Looks good enough... validating to get it out

Keywords: (none) => validated_update
Whiteboard: advisory => advisory MGA5-32-OK MGA5-64-OK
CC: (none) => sysadmin-bugs

An update for this issue has been pushed to the Mageia Updates repository.

http://advisories.mageia.org/MGASA-2017-0188.html

Status: ASSIGNED => RESOLVED
Resolution: (none) => FIXED