kernel security and bug fix update

ID ELSA-2010-0839
Type oraclelinux
Reporter Oracle
Modified 2010-11-09T00:00:00


[2.6.18-] - [xen] check to see if hypervisor supports memory reservation change (Chuck Anderson) [orabug 7556514] - Add entropy support to igb (John Sobecki) [orabug 7607479] - [nfs] convert ENETUNREACH to ENOTCONN [orabug 7689332] - [NET] Add xen pv/bonding netconsole support (Tina Yang) [orabug 6993043] [bz 7258] - [mm] shrink_zone patch (John Sobecki,Chris Mason) [orabug 6086839] - fix aacraid not to reset during kexec (Joe Jin) [orabug 8516042] - [nfsd] fix failure of file creation from hpux client (Wen gang Wang) [orabug 7579314] - [qla] fix qla not to query hccr (Guru Anbalagane) [Orabug 8746702] - [net] bonding: fix xen+bonding+netconsole panic issue (Joe Jin) [orabug 9504524] - [rds] Patch rds to 1.4.2-14 (Andy Grover) [orabug 9471572, 9344105] RDS: Fix BUG_ONs to not fire when in a tasklet ipoib: Fix lockup of the tx queue RDS: Do not call set_page_dirty() with irqs off (Sherman Pun) RDS: Properly unmap when getting a remote access error (Tina Yang) RDS: Fix locking in rds_send_drop_to() - [mm] Enhance shrink_zone patch allow full swap utilization, and also be NUMA-aware (John Sobecki, Chris Mason, Herbert van den Bergh) [orabug 9245919] - [xen] PVHVM guest with PoD crashes under memory pressure (Chuck Anderson) [orabug 9107465] - [xen] PV guest with FC HBA hangs during shutdown (Chuck Anderson) [orabug 9764220] - Support 256GB+ memory for pv guest (Mukesh Rathor) [orabug 9450615] - fix overcommit memory to use percpu_counter for el5 (KOSAKI Motohiro, Guru Anbalagane) [orabug 6124033] - [ipmi] make configurable timeouts for kcs of ipmi [orabug 9752208] - [ib] fix memory corruption (Andy Grover) [orabug 9972346] [2.6.18-194.26.1.el5] - [net] mlx4: bump max log_mtts_per_seg memory reservation (Jay Fenlason) [643806 636198] [2.6.18-194.25.1.el5] - [fs] nfs: fix regression in NFS Direct I/O path (Steve Dickson) [647601 647297] [2.6.18-194.24.1.el5] - Changelog fix [2.6.18-194.23.1.el5] - [net] bonding: correctly process non-linear skbs (Andy Gospodarek) [644822 619070] - Syncing following patch from branched build: - [net] rds: fix local privilege escalation (Eugene Teo) [642897 642898] {CVE-2010-3904} [2.6.18-194.22.1.el5] - [fs] xfs: fix speculative allocation beyond eof (Dave Chinner) [643571 638753] [2.6.18-194.21.1.el5] - [scsi] qla2xxx: Correct use-after-free issue in terminate_rport_io callback (Chad Dupuis) [643135 567428] - [misc] futex: replace LOCK_PREFIX in futex.h (Peter Zijlstra) [633175 633176] {CVE-2010-3086} - [v4l] remove compat code for VIDIOCSMICROCODE (Mauro Carvalho Chehab) [642470 642471] {CVE-2010-2963} - [xen] hvm: correct accuracy of pmtimer (Andrew Jones) [641915 633028] - [net] bonding: fix IGMP report on slave during failover (Flavio Leitner) [640973 637764] - [fs] nfsv4: fix bug when server returns NFS4ERR_RESOURCE (Steve Dickson) [628889 620502] - [fs] nfsv4: ensure lockowners are labelled correctly (Steve Dickson) [628889 620502] - [fs] nfsv4: add support for RELEASE_LOCKOWNER operation (Steve Dickson) [628889 620502] - [fs] nfsv4: clean up for lockowner XDR encoding (Steve Dickson) [628889 620502] - [fs] nfsv4: ensure we track lock state in r/w requests (Steve Dickson) [628889 620502] - [time] implement fine grained accounting for PM timer (Ulrich Obergfell) [637069 586285] - [time] initialize tick_nsec based on kernel parameters (Ulrich Obergfell) [637069 586285] - [time] introduce 'pmtimer_fine_grained' kernel parameter (Ulrich Obergfell) [637069 586285] - [fs] nfs: wait for close before silly-renaming (Jeff Layton) [642628 565974] [2.6.18-194.20.1.el5] - [scsi] megaraid_sas: fix physical disk handling (Tomas Henzl) [619365 564249] - [scsi] lpfc: fix ioctl crash in lpfc_nlp_put (Rob Evers) [637727 625841] - [net] sched: fix info leak in traffic policing (Neil Horman) [636391 636392] {CVE-2010-3477} - [md] dm: fix deadlock with fsync vs. resize in lvm (Mikulas Patocka) [632255 624068] - [misc] fix race in pid generation causing immediate reuse (Dave Anderson) [638866 634850] - [scsi] fix disk spinup for shorter path restore times (Rob Evers) [634977 608109] - [fs] aio: check for multiplication overflow in io_submit (Jeff Moyer) [629448 629449] {CVE-2010-3067} - [fs] xfs: prevent reading uninitialized stack memory (Dave Chinner) [630806 630807] {CVE-2010-3078} - [fs] aio: fix cleanup in io_submit_one (Jeff Moyer) [631720 631721] {CVE-2010-3066} - [net] ipv4: fix buffer overflow in icmpmsg_put (Frantisek Hrbata) [634976 601391] - [xen] hvm: fix UP suspend/resume/migration w/PV drivers (Miroslav Rezanina) [630989 629773] - [fs] dlm: fix try 1cb failure, part 2 (Abhijith Das) [639073 504188] - [fs] dlm: no node callback when try 1cb lock req fails (David Teigland) [639073 504188] [2.6.18-194.19.1.el5] - [virt] xen: fix xennet driver to not corrupt data (Neil Horman) [637220 630129] - [pnp] ignore both UNSET and DISABLED ioresources (Prarit Bhargava) [629861 560540] - [pnp] reserve system board iomem and ioport resources (Prarit Bhargava) [629861 560540] - [net] bonding: fix ALB mode to balance traffic on VLANs (Andy Gospodarek) [630540 578531] - [net] qla3xxx: fix oops on too-long netdev priv structure (Neil Horman) [637206 620508] - [acpi] thinkpad-acpi: lock down video output state access (Don Howard) [629241 607037] [2.6.18-194.18.1.el5] - [s390] dasd: fix race between tasklet and dasd_sleep_on (Hendrik Brueckner) [638579 593756]