Unbreakable Enterprise kernel security and bugfix update

2.6.39-400.21.1 - SPEC: v2.6.39-400.21.1 Maxim Uvarov - xen/mmu: On early bootup, flush the TLB when changing RO-RW bits Xen provided pagetables. Konrad Rzeszutek Wilk 2.6.39-400.20.1 - SPEC: v2.6.39-400.20.1 Maxim Uvarov - PCI: Set device power state to PCID0 for device without native PM support...

Unbreakable Enterprise kernel Security update

2.6.39-400.17.2 - x86/msr: Add capabilities check Alan Cox Orabug: 16405007 CVE-2013-0268...

Unbreakable Enterprise kernel security update

2.6.32-300.39.4 - exec: do not leave bprm-interp on stack Kees Cook Orabug: 16286741 CVE-2012-4530 - exec: use -ELOOP for max recursion depth Kees Cook Orabug: 16286741 CVE-2012-4530 2.6.32-300.39.3 - Xen: Fix stack corruption in xenfailsafecallback for 32bit PVOPS guests. Frediano Ziglio Orabug:...

Unbreakable Enterprise kernel security update

2.6.32-300.39.2 - ext4: fix undefined behavior in ext4fillflexinfo Xi Wang orabug 16020245 CVE-2012-2100 - Divide by zero in TCP congestion control Algorithm Jesper Dangaard Brouer orabug 16020447 CVE-2012-4565 - ipv6: discard overlapping fragment Luis Henriques orabug 16021354 CVE-2012-4444...

Unbreakable Enterprise kernel security update

2.6.39-300.17.3 - mm/hotplug: correctly add new zone to all other nodes zone lists Jiang Liu Orabug: 16020976 Bug-db: 14798 CVE-2012-5517 - Divide by zero in TCP congestion control Algorithm. Jesper Dangaard Brouer Orabug: 16020656 Bug-db: 14798 CVE-2012-4565 - Fix length of buffer copied in...

Unbreakable Enterprise kernel security update

2.6.32-300.39.1 - hugepages: fix use after free bug in 'quota' handling 15842385 CVE-2012-2133 - mm: Hold a file reference in madviseremove 15842884 CVE-2012-3511 - udf: Fortify loading of sparing table 15843730 CVE-2012-3400 - udf: Avoid run away loop when partition table length is corrupt...

Unbreakable Enterprise kernel Security update

2.6.39-200.34.1 - net/sfc limit number of segments per skb on tx Maxim Uvarov Orabug: 14769994 CVE-2012-3412...

Unbreakable Enterprise kernel Security update

2.6.39-200.33.1 - sfc: Replace some literal constants with EFXPAGESIZE/EFXBUFSIZE Ben Hutchings Orabug: 14769994 - CVE-2012-3412 sfc: Fix maximum number of TSO segments and minimum TX queue size Ben Hutchings Orabug: 14769994 CVE-2012-3412...

Unbreakable Enterprise kernel security and bugfix update

2.6.39-200.24.1.el5uek - Revert 'Add Oracle VM guest messaging driver' Guru Anbalagane Orabug: 14233627 2.6.39-200.23.1.el5uek - SPEC: add block/net modules to list used by installer Guru Anbalagane Orabug: 14224837 2.6.39-200.22.1.el5uek - NFSv4: include bitmap in nfsv4 get acl data Andy Adamson...

Unbreakable Enterprise kernel security and bugfix update

2.6.39-100.10.1.el6uek - thp: avoid atomic64read in pmdreadatomic for 32bit PAE Andrea Arcangeli Orabug: 14217003 2.6.39-100.9.1.el6uek - mm: pmdreadatomic: fix 32bit PAE pmd walk vs pmdpopulate SMP race condition Andrea Arcangeli Bugdb: 13966 CVE-2012-2373 - mm: thp: fix pmdbad triggering in cod...

Unbreakable Enterprise kernel security and bugfix update

kernel-uek: 2.6.32-300.27.1.el6uek - net: sock: validate datalen before allocating skb Jason Wang Bugdb: 13966CVE-2012-2136 - fcaps: clear the same personality flags as suid when fcaps are used Eric Paris Bugdb: 13966 CVE-2012-2123 - Revert 'nfs: when attempting to open a directory, fall back on...

Unbreakable Enterprise kernel security update

2.6.39-100.7.1.el6uek - KVM: Ensure all vcpus are consistent with in-kernel irqchip settings Avi Kivity Bugdb: 13871 CVE-2012-1601 - jbd2: clear BHDelay & BHUnwritten in journalunmapbuffer Eric Sandeen Bugdb: 13871 CVE-2011-4086...

Unbreakable Enterprise kernel security and bug fix update

2.6.32-300.21.1.el6uek - regset: Return -EFAULT, not -EIO, on host-side memory fault H. Peter Anvin CVE-2012-1097 - regset: Prevent null pointer reference on readonly regsets H. Peter Anvin CVE-2012-1097 - cifs: fix dentry refcount leak when opening a FIFO on lookup Jeff Layton CVE-2012-1090 -...

Unbreakable Enterprise kernel security and bug fix update

2.6.32-300.11.1.el6uek - fs xfs: Fix possible memory corruption in xfsreadlink Carlos Maiolino CVE-2011-4077 - scsi increase qla2xxx firmware ready time-out Joe Jin - scsi qla2xxx: Module parameter to control use of async or sync port login Joe Jin - net tg3: Fix single-vector MSI-X code Joe Jin ...

Unbreakable Enterprise kernel security and bug fix update

2.6.32-300.7.1.el6uek - Revert "proc: enable writing to /proc/pid/mem" orabug 13619701 CVE-2012-0056 - PATCH x86, tsc: Skip TSC synchronization checks for tsc=reliable Suresh Siddha 2.6.32-300.6.1.el6uek - tracing: Fix null pointer deref with SENDSIGFORCED Oleg Nesterov orabug 13611655...

Unbreakable Enterprise kernel security and bug fix update

2.6.32-200.19.1.el6uek - Apply new fix for CVE-2011-1576. 2.6.32-200.18.1.el6uek - Revert 'proc: fix a race in doioaccounting' 2.6.32-200.17.1.el6uek - net: Fix memory leak/corruption on VLAN GRODROP CVE-2011-1576 - iommu-api: Extension to check for interrupt remapping CVE-2011-1898 - KVM: IOMMU:...

Unbreakable Enterprise kernel security fix update

A 2.6.32-100.28.17.el6 - net Extend prot-slab size when add sock extend fields. 2.6.32-100.28.16.el6 - kernel: Fix unlimited socket backlog DoS CVE-2010-4251 - RDS: Fix congestion issues for loopback - rds: prevent BUGON triggering on congestion map updates CVE-2011-1023 - epoll: prevent creating...

Unbreakable enterprise kernel security update

2.6.32-100.20.1.el5 - fs xfs: return inode fork offset in bulkstat for fsr Dave Chinner - fs xfs: always use iget in bulkstat Dave Chinner CVE-2010-2943 - fs xfs: validate untrusted inode numbers during lookup Dave Chinner CVE-2 010-2943 - fs xfs: rename XFSIGETBULKSTAT to XFSIGETUNTRUSTED Dave...