kernel security and bug fix update

[2.6.9-67.0.15.0.1.EL]

• fix skb alignment that was causing sendto() to fail with EFAULT (Olaf Kirch) [orabug 6845794]
• fix entropy flag in bnx2 driver to generate entropy pool (John Sobecki) [orabug 5931647]
• fix enomem due to larger mtu size page alloc (Zach Brown) [orabug 5486128]
• fix per_cpu() api bug_on with rds (Zach Brown) [orabug 5760648]
• remove patch sysrq-b that queues upto keventd thread [orabug 6125546]
• allow more than 4GB hugepage for single user (Herbert van den Bergh) [orabug 6002738]
• netrx/netpoll race avoidance (Tina Yang) [orabug 6143381]
  [2.6.9-67.0.15]
  -fix kabi breakage in 67.0.14
  [2.6.9-67.0.14]
  -fs: serialize file access for dnotify (Alexander Viro) [443437] {CVE-2008-1669}
  -update: fix race condition in dnotify (Alexander Viro) [439756] {CVE-2008-1375}
  [2.6.9-67.0.13]
  -Revert: Add HP DL580 G5 to bfsort whitelist (Tony Camuso) [437976]
  [2.6.9-67.0.12]
  -fs: fix race condition in dnotify (Alexander Viro) [439756] {CVE-2008-1375}
  [2.6.9-67.0.11]
  -nfs: High vm pagecache reclaim latency on systems with large highmem to lowmem ratio fix (Larry Woodman) [438345]
  -nfs: Fix nfs read performance regression. Introduce a new tunable (Larry Woodman) [438477]
  -Retry: check to see if agp is valid before reporting aperture size warnings (Brian Maly) [392771 431897]
  -Ensure IV is in linear part of the skb to avoid BUG due to OOB access (Thomas Graf) [427245] {CVE-2007-6282}
  -fix unprivileged crash on x86_64 cs corruption (Jarod Wilson) [439786] {CVE-2008-1615}
  [2.6.9-67.0.10]
  -update: do not return zero in mmap (Vitaly Mayatskikh) [400811]
  -neofb: avoid overwriting fb_info fields (Vitaly Mayatskikh) [430251]
  -[NET] link_watch: always schedule urgent events (Don Dutile) [436102]
  -nlm: fix a client side race on blocking locks (Jeff Layton) [436129]
  -nlm: cleanup for blocked locks (Jeff Layton) [436129]
  -Add HP DL580 G5 to bfsort whitelist (Tony Camuso) [437976]
  -nfs: Discard pagecache data for dirs on denty_iput (Jeff Layton) [437788]
  [2.6.9-67.0.9]
  -[NET] link_watch: handle jiffies wraparound (Vince Worthington) [436749]
  -libata: un-blacklist hitachi drives to enable NCQ (David Milburn) [436499]
  -libata: sata_nv may send commands with duplicate tags (David Milburn) [436499]
  [2.6.9-67.0.8]
  -Insufficient range checks in fault handlers with mremap (Vitaly Mayatskikh) [428968] {CVE-2008-0007}
  -[MOXA] buffer overflow in moxa driver (Vitaly Mayatskikh) [423131] {CVE-2005-0504}
  -Fix unix stream socket recv race condition (Hideo AOKI) [435122]