kernel security and bug fix update

[2.6.18-194.8.1.0.1.el5]

• [xen] check to see if hypervisor supports memory reservation change
  (Chuck Anderson) [orabug 7556514]
• Add entropy support to igb (John Sobecki) [orabug 7607479]
• [nfs] convert ENETUNREACH to ENOTCONN [orabug 7689332]
• [NET] Add xen pv/bonding netconsole support (Tina Yang) [orabug 6993043]
  [bz 7258]
• [mm] shrink_zone patch (John Sobecki,Chris Mason) [orabug 6086839]
• fix aacraid not to reset during kexec (Joe Jin) [orabug 8516042]
• [nfsd] fix failure of file creation from hpux client (Wen gang Wang)
  [orabug 7579314]
• [qla] fix qla not to query hccr (Guru Anbalagane) [Orabug 8746702]
• [net] bonding: fix xen+bonding+netconsole panic issue (Joe Jin) [orabug 9504524]
• [rds] Patch rds to 1.4.2-14 (Andy Grover) [orabug 9471572, 9344105]
  RDS: Fix BUG_ONs to not fire when in a tasklet
  ipoib: Fix lockup of the tx queue
  RDS: Do not call set_page_dirty() with irqs off (Sherman Pun)
  RDS: Properly unmap when getting a remote access error (Tina Yang)
  RDS: Fix locking in rds_send_drop_to()
• [mm] Enahance shrink_zone patch allow full swap utilization, and also be
  NUMA-aware (John Sobecki, Chris Mason, Herbert van den Bergh)
  [orabug 9245919]
  [2.6.18-194.8.1.el5]
• [net] cnic: fix bnx2x panic w/multiple interfaces enabled (Stanislaw Gruszka) [607087 602402]
  [2.6.18-194.7.1.el5]
• [virt] don’t compute pvclock adjustments if we trust tsc (Glauber Costa) [601080 570824]
• [virt] add a global synchronization point for pvclock (Glauber Costa) [601080 570824]
• [virt] enable pvclock flags in vcpu_time_info structure (Glauber Costa) [601080 570824]
• [misc] add atomic64_cmpxcgh to x86_64 include files (Glauber Costa) [601080 570824]
• [x86] grab atomic64 types from upstream (Glauber Costa) [601080 570824]
  [2.6.18-194.6.1.el5]
• [fs] gfs2: fix permissions checking for setflags ioctl (Steven Whitehouse) [595580 595399] {CVE-2010-1641}
• [mm] clear page errors when issuing a fresh read of page (Rik van Riel) [599739 590763]
• [misc] keys: do not find already freed keyrings (Vitaly Mayatskikh) [585099 585100] {CVE-2010-1437}
• [net] sctp: file must be valid before setting timeout (Jiri Pirko) [598355 578261]
• [net] tg3: fix panic in tg3_interrupt (John Feeney) [600498 569106]
• [net] e1000/e1000e: implement simple interrupt moderation (Andy Gospodarek) [599332 586416]
• [net] cnic: Fix crash during bnx2x MTU change (Stanislaw Gruszka) [596385 582367]
• [net] bxn2x: add dynamic lro disable support (Stanislaw Gruszka) [596385 582367]
• [net] implement dev_disable_lro api for RHEL5 (Stanislaw Gruszka) [596385 582367]
• [x86_64] fix time drift due to faulty lost tick tracking (Ulrich Obergfell) [601090 579711]
• [net] neigh: fix state transitions via Netlink request (Jiri Pirko) [600215 485903]
• [mm] fix hugepage corruption using vm.drop_caches (Larry Woodman) [599737 579469]
• [nfs] don’t unhash dentry in nfs_lookup_revalidate (Jeff Layton) [596384 582321]
• [fs] remove unneccessary f_ep_lock from fasync_helper (Lachlan McIlroy) [599730 567479]
• [xen] set hypervisor present CPUID bit (Paolo Bonzini) [599734 573771]
  [2.6.18-194.5.1.el5]
• [net] bonding: fix broken multicast with round-robin mode (Andy Gospodarek) [594057 570645]
• [net] tg3: fix INTx fallback when MSI fails (Steve Best) [592844 587666]
• [net] sched: fix SFQ qdisc crash w/limit of 2 packets (Jiri Pirko) [594054 579774]
• [nfs] revert retcode check in nfs_revalidate_mapping() (Jeff Layton) [594061 557423]
• [misc] futex: handle futex value corruption gracefully (Jerome Marchand) [563093 480396] {CVE-2010-0622}
• [misc] futex: handle user space corruption gracefully (Jerome Marchand) [563093 480396] {CVE-2010-0622}
• [misc] futex: fix fault handling in futex_lock_pi (Jerome Marchand) [563093 480396] {CVE-2010-0622}
• [net] e1000: fix WoL init when WoL disabled in EEPROM (Dean Nelson) [591493 568561]
• [virtio] fix GFP flags passed by virtio balloon driver (Amit Shah) [591611 584683]
• [net] sctp: fix skb_over_panic w/too many unknown params (Neil Horman) [584657 584658] {CVE-2010-1173}
• [acpi] fix WARN on unregister in power meter driver (Matthew Garrett) [592846 576246]
• [mm] keep get_unmapped_area_prot functional (Danny Feng) [556709 556710] {CVE-2010-0291}
• [mm] switch do_brk to get_unmapped_area (Danny Feng) [556709 556710] {CVE-2010-0291}
• [mm] take arch_mmap_check into get_unmapped_area (Danny Feng) [556709 556710] {CVE-2010-0291}
• [mm] get rid of open-coding in ia64_brk (Danny Feng) [556709 556710] {CVE-2010-0291}
• [mm] unify sys_mmap* functions (Danny Feng) [556709 556710] {CVE-2010-0291}
• [mm] kill ancient cruft in s390 compat mmap (Danny Feng) [556709 556710] {CVE-2010-0291}
• [mm] fix pgoff in have to relocate case of mremap (Danny Feng) [556709 556710] {CVE-2010-0291}
• [mm] fix the arch checks in MREMAP_FIXED case (Danny Feng) [556709 556710] {CVE-2010-0291}
• [mm] fix checks for expand-in-place mremap (Danny Feng) [556709 556710] {CVE-2010-0291}
• [mm] add new vma_expandable helper function (Danny Feng) [556709 556710] {CVE-2010-0291}
• [mm] move MREMAP_FIXED into its own header (Danny Feng) [556709 556710] {CVE-2010-0291}
• [mm] move locating vma code and checks on it (Danny Feng) [556709 556710] {CVE-2010-0291}
  [2.6.18-194.4.1.el5]
• [acpi] warn on hot-add of memory exceeding 4G boundary (Prarit Bhargava) [587957 571544]
• [net] tipc: fix various oopses in uninitialized code (Neil Horman) [578058 558693] {CVE-2010-1187}
• [block] cfq-iosched: fix IOPRIO_CLASS_IDLE accounting (Jeff Moyer) [588219 574285]
• [block] cfq-iosched: async queue allocation per priority (Jeff Moyer) [588219 574285]
• [block] cfq-iosched: fix async queue behaviour (Jeff Moyer) [588219 574285]
• [block] cfq-iosched: propagate down request sync flag (Jeff Moyer) [588219 574285]
• [block] introduce the rq_is_sync macro (Jeff Moyer) [588219 574285]
• [fs] vfs: fix LOOKUP_FOLLOW on automount symlinks (Jeff Layton) [567815 567816] {CVE-2010-1088}
• [nfs] fix an oops when truncating a file (Jeff Layton) [567194 567195] {CVE-2010-1087}
• [fs] fix kernel oops while copying from ext3 to gfs2 (Abhijith Das) [586008 555754] {CVE-2010-1436}