-
Wed May 11 2011 Joe Jin [2.6.32-100.28.15.el5]
- sctp: fix to calc the INIT/INIT-ACK chunk length correctly is set {CVE-2011-1573}
- dccp: fix oops on Reset after close {CVE-2011-1093}
- bridge: netfilter: fix information leak {CVE-2011-1080}
- Bluetooth: bnep: fix buffer overflow {CVE-2011-1079}
- net: don't allow CAP_NET_ADMIN to load non-netdev kernel modules {CVE-2011-1019}
- ipip: add module alias for tunl0 tunnel device
- gre: add module alias for gre0 tunnel device
- drm/radeon/kms: check AA resolve registers on r300 {CVE-2011-1016}
- drm/radeon: fix regression with AA resolve checking {CVE-2011-1016}
- drm: fix unsigned vs signed comparison issue in modeset ctl ioctl {CVE-2011-1013}
- proc: protect mm start_code/end_code in /proc/pid/stat {CVE-2011-0726}
- ALSA: caiaq - Fix possible string-buffer overflow {CVE-2011-0712}
- xfs: zero proper structure size for geometry calls {CVE-2011-0711}
- xfs: prevent leaking uninitialized stack memory in FSGEOMETRY_V1 {CVE-2011-0711}
- ima: fix add LSM rule bug {CVE-2011-0006}
- IB/uverbs: Handle large number of entries in poll CQ {CVE-2010-4649, CVE-2011-1044}
- CAN: Use inode instead of kernel address for /proc file {CVE-2010-4565}
-
Wed May 04 2011 Joe Jin [2.6.32-100.28.14.el5]
- IB/qib: fix qib compile warning.
- IB/core: Allow device-specific per-port sysfs files.
- dm crypt: add plain64 iv.
- firmware: add firmware for qib.
- Infiniband: Add QLogic PCIe QLE InfiniBand host channel adapters support.
-
Wed Apr 13 2011 Joe Jin [2.6.32-100.28.11.el5]
- fs/partitions: Validate map_count in Mac partition tables {CVE-2011-1010}
- nfs4: Ensure that ACL pages sent over NFS were not allocated from
the slab (v3) {CVE-2011-1090}
-
Wed Apr 13 2011 Joe Jin [2.6.32-100.28.10.el5]
- Use cciss for some Smart Array controller for OL5 [orabug 11899706]
- Add CONFIG_UEK5 option [orabug 11899706]
- CVEs from RHSA-2011-0421
- install_special_mapping skips security_file_mmap check {CVE-2010-4346}
- orinoco: fix TKIP countermeasure behaviour {CVE-2010-4648}
- net: clear heap allocation for ethtool_get_regs() {CVE-2010-4655}
- usb: iowarrior: don't trust report_size for buffer size {CVE-2010-4656}
- [media] [v3,media] av7110: check for negative array offset {CVE-2011-0521}
- RDMA/cma: Fix crash in request handlers {CVE-2011-0695}
- IB/cm: Bump reference count on cm_id before invoking callback {CVE-2011-0695}
- gro: reset skb_iif on reuse {CVE-2011-1478}
-
Wed Mar 16 2011 Guru Anbalagane [2.6.32-100.28.9.el5]
- sync up with uek6 version
-
Tue Mar 15 2011 Chuck Anderson [2.6.32-100.26.4.el5]
- [block] check for proper length of iov entries earlier in blk_rq_map_user_iov
(Xiaotian Feng) {CVE-2010-4668}
- scm: lower SCM_MAX_FD (Eric Dumazet) {CVE-2010-4249}
- perf_events: Fix perf_counter_mmap() hook in mprotect() (Pekka Enberg)
{CVE-2010-4169}
- tcp: Increase TCP_MAXSEG socket option minimum (David S. Miller)
{CVE-2010-4165}
- Enable module force load option [orabug 11782146]
- Enable vmw balloon and pvscsi (Guru Anbalagane) [orabug 11697522]
- fix hpilo module option in config
-
Wed Mar 02 2011 Guru Anbalagane [2.6.32-100.26.3.el5]
- build from git
-
Tue Jan 18 2011 Kevin Lyons [2.6.32-100.26.2.el5]
- Make sure call to weak-modules in post and preun sections works
for debug package [bug 11655695]
-
Fri Jan 14 2011 Srinivas Maturi [2.6.32-100.26.1.el5]
- Rebuild changing release to 100.26.1.el5
-
Fri Jan 14 2011 Srinivas Maturi [2.6.32-100.23.34.el5]
- Add xenbus symbols to kabi whitelist and update Module.kabi_<arch><flavor>
-
Thu Jan 13 2011 Guru Anbalagane [2.6.32-100.23.33.el5]
- setup_arg_pages: diagnose excessive argument size (Roland McGrath) {CVE-2010-3858}
- [net] Truncate recvfrom and sendto length to INT_MAX (Linux Torvalds) {CVE-2010-3859}
- [net] packet: fix information leak to userland (Vasiliy Kulikov) {CVE-2010-3876}
- [net] inet_diag: Make sure we run the same bytecode we audited (Nelson Elhage) {CVE-2010-3880}
- [ipc] sys_semctl: fix kernel stack leakage (Dan Rosenberg) {CVE-2010-4083}
- [scsi] gdth: integer overflow in ioctl (Dan Carpenter) {CVE-2010-4157}
- bluetooth: Fix missing NULL check (Alan Cox) {CVE-2010-4242}
- posix-cpu-timers: workaround to suppress the problems with mt exec (Oleg Nesterov) {CVE-2010-4248}
- [fs] xfs: prevent reading uninitialized stack memory (Dan Rosenberg) {CVE-2010-3078}
- ALSA: seq/oss - Fix double-free at error path of snd_seq_oss_open() (Takashi Iwai) {CVE-2010-3080}
- drivers/net/usb/hso.c: prevent reading uninitialized memory (Dan Rosenberg) {CVE-2010-3298}
- net: clear heap allocation for ETHTOOL_GRXCLSRLALL (Kees Cook) {CVE-2010-3861)
- can-bcm: fix minor heap overflow (Oliver Hartkopp) {CVE-2010-3874}
- ipc: shm: fix information leak to userland (Vasiliy Kulikov) {CVE-2010-4072}
- ipc: initialize structure memory to zero for compat functions (Dan Rosenberg) {CVE-2010-4073}
- USB: serial/mos*: prevent reading uninitialized stack memory (Dan Rosenberg) {CVE-2010-4074}
- tty: Make tiocgicount a handler (Alan Cox) {CVE-2010-4075}
- tty: icount changeover for other main devices (Alan Cox) {CVE-2010-4077}
- V4L/DVB: ivtvfb: prevent reading uninitialized stack memory (Dan Rosenberg) {CVE-2010-4079}
- sound/pci/rme9652: prevent reading uninitialized stack memory (Dan Rosenberg) {CVE-2010-4080}
- drivers/video/via/ioctl.c: prevent reading uninitialized stack memory (Dan Rosenberg) {CVE-2010-4082}
- filter: make sure filters dont read uninitialized memory (David S. Miller) {CVE-2010-4158}
- net: Limit socket I/O iovec total length to INT_MAX.(David S. Miller) {CVE-2010-4160}
- bio: take care not overflow page count when mapping/copying user data (Jens Axboe) {CVE-2010-4162}
- block: check for proper length of iov entries in blk_rq_map_user_iov() (Jens Axboe) {CVE-2010-4163}
- af_unix: limit unix_tot_inflight (Eric Dumazet) {CVE-2010-4249}
- igb: only use vlan_gro_receive if vlans are registered (Alexander Duyck) {CVE-2010-4263}
- net: tipc: fix information leak to userland (Kulikov Vasiliy) {CVE-2010-3877}
- exec: make argv/envp memory visible to oom-killer (Oleg Nesterov) {CVE-2010-4243}
- exec: copy-and-paste the fixes into compat_do_execve() paths (Oleg Nesterov) {CVE-2010-4243}
- oracleasm: Data integrity support (Martin K. Petersen)
- sd: Export effective protection mode in sysfs (Martin K. Petersen)
- block: Disable autoprotect (Martin K. Petersen)
- block: Fix double free (Martin K. Petersen)
- scsi_transport_fc: Introduce helper function for blocking scsi_eh (Christof Schmitt)
- scsi_transport_fc: Remove capping from dev_loss_tmo (Hannes Reinecke)
-
Thu Jan 13 2011 Guru Anbalagane [2.6.32-100.23.32.el5]
- fixes ocfs2_page_mkwrite path (WenGang Wang) [orabug 10127979]
- Increase max guest memory from 32GB to 1TB (Guru Anbalagane) [orabug 11069098]
-
Wed Jan 12 2011 Joe Jin [2.6.32-100.23.31.el5]
- [xen]: fix xenfb suspend/resume race (Joe Jin) [orabug 10389175]
- [net] exported firmware that missed in drivers (Zhenzhong Duan) [orabug 10433896]
-
Wed Dec 29 2010 Guru Anbalagane [2.6.32-100.23.30.el5]
- minor fix to netconsole/bonding patch
- add obsoletes/provides kernel-headers for package headers in specfile
(Keshav Sharma)
-
Thu Dec 23 2010 Guru Anbalagane [2.6.32-100.23.29.el5]
- update of following drivers from el6 (Joe Jin)
- [net] add netdev_print helper
- [net] update driver bnx2 to 2.0.8-j15
- [net] update driver bnx2x to 1.52.1-7
- [net] update driver cnic to 2.1.2
- [scsi] update driver bnx2i to 2.1.1
- [net] update driver tg3 to 3.108
- [net] update driver e100 to 3.5.24-k2-NAPI
- [net] update driver e1000 to 7.3.21-k6-NAPI
- [net] update driver e1000e to 1.2.7-k2
- [net] update driver igb to 2.1.0-k2
- [net] update driver igbvf to 1.0.0-k0
- [net] update driver ixgb to 1.0.135-k2-NAPI
- [net] update driver ixgbe to 2.0.62-k2
- [net] update driver ixgbevf to 1.0.0-k0
- [net] update driver be2net to 2.102.426r
- [scsi] update driver be2iscsi to 2.0.527.0
- [block] update driver cciss to 3.6.26
- update qla2xxx, qla4xxx, qlge, netxen_nic, qlcnic
- [paravirt]ignore lazy mmu state change in interrupt path (Chuck Anderson)
[orabug 10285722]
- fix filp_close() race (Joe Jin) [orabug 10335998]
- [net] rework the patch for network drivers entropy.
-
Tue Dec 21 2010 Joe Jin [2.6.32-100.23.28.el5]
- [XEN] ensure that all event channels start off bound to VCPU 0 [orabug 10389175]
- [NET] tehuti: fix incorrect firmware name.
-
Thu Dec 16 2010 Guru Anbalagane [2.6.32-100.23.27.el5]
- [SCSI] wake xmit thread when killing session (Mike Christie)
-
Wed Dec 15 2010 Joe Jin [2.6.32-100.23.26.el5]
- enable hpilo support and update to upstream.
- update bnx2i to upstream.
- update 3w-xxxx to upstream.
- update 3w-9xxx to upstream.
- update be2iscsi to upstream.
- update aic94xx to upstream.
- update aic7xxx to upstream.
- update aic7xxx_old to upstream.
- update aacraid to upstream.
- update mlx4_ib to upstream.
- update fnic to upstream.
- update lpfc to upstream.
- update megaraid to vendor's drop.
- update cxgb3i to upstream.
- update mptsas to upstream.
- update mpt2sas to upstream
- update cciss to upstream.
- update cpqarray to upstream.
-
Tue Dec 14 2010 Tina Yang <tina.yang@oracle.com>
- add netfront netconsole support (Tina Yang) [orabug 10115460]
- add netconsole over bonding support (Tina Yang) [orabug 10090882]
-
Tue Dec 14 2010 Joe Jin [2.6.32-100.23.25.el5]
- Fix bnx2x driver panic. (Joe Jin) [orabug 10393605]
- Fix pv guest migrate hung (Joe Jin) [orabug 10114101]
-
Wed Dec 08 2010 Guru Anbalagane [2.6.32-100.23.24.el5]
- update bnx2 to upstream(2.0.18) (Joe Jin)
- update bnx2x to upstream(1.60.00-4)
- update cnic to upstream(2.2.6)
- update tg3 to upstream(3.115)
- update enic to upstream(1.4.1.6)
- update cxgb3 to upstream(1.1.4-ko)
- update e100 to upstream(3.5.24-k2-NAPI)
- update e1000 to upstream(7.3.21-k8-NAPI)
- update e1000e to upstream(1.2.7-k2)
- update igb to upstream(2.1.0-k2)
- update ixgb to upstream(1.0.135-k2-NAPI)
- update ixgbe to upstream(2.0.84-k2)
- update igbvf to upstream(1.0.0-k0)
- update ixgbevf to upstream(1.0.0-k0)
- update bna to upstream (2.3.2)
- update bfa to upstream(2.3.2.0)
- update be2net to upstream(2.103.175u)
-
Tue Dec 07 2010 Keshav Sharma <keshav.sharma@oracle.com> [2.6.32-100.23.23.el5]
- Fixed debuginfo package build issue
-
Mon Dec 06 2010 Keshav Sharma <keshav.sharma@oracle.com> [2.6.32-100.23.22.el5]
- Changes Package name from kernel to kernel-uek.
-
Fri Dec 03 2010 Guru Anbalagane [2.6.32-100.23.21.el5]
- CVE's from RHSA-2010:0842-01
-
Thu Dec 02 2010 Guru Anbalagane [2.6.32-100.23.20.el5]
- Back-port xen blkfront performance improvements from upstream [orabug 10115222]
- fix underflow of process execution time [ orabug 10132286]
- Find an unbound irq number in reverse order (high to low) [ orabug 10096783]
- retry page fault when blocking on disk transfer [ orabug 10090014]
-
Tue Nov 09 2010 Chris Mason [2.6.32-100.23.1.el5]
- Fix LACP bonding mode (Tina Yang)
-
Mon Oct 25 2010 Chris Mason [2.6.32-100.22.1.el5]
- Fix grat arps on bonded interfaces (Tina Yang)
-
Fri Oct 22 2010 Greg Marsden [2.6.32-100.21.1.el5]
* [rds] fix access issue with rds (Chris Mason) {CVE-2010-3904}
-
Wed Oct 20 2010 Srinivas Eeda [2.6.32-100.20.1.el5_errata1]
- [fuse] linux-2.6.32-fuse-return-EGAIN-if-not-connected-bug-10154489.patch
- [net] linux-2.6.32-net-sched-fix-kernel-leak-in-act_police.patch
- [aio] linux-2.6.32-aio-check-for-multiplication-overflow-in-do_io_subm.patch
-
Thu Sep 30 2010 Guru Anbalagane [2.6.32-100.20.1.el5]
- [fs] xfs: return inode fork offset in bulkstat for fsr (Dave Chinner)
- [fs] xfs: always use iget in bulkstat (Dave Chinner) {CVE-2010-2943}
- [fs] xfs: validate untrusted inode numbers during lookup (Dave Chinner) {CVE-2010-2943}
- [fs] xfs: rename XFS_IGET_BULKSTAT to XFS_IGET_UNTRUSTED (Dave Chinner) {CVE-2010-2943}
- [net] net sched: fix some kernel memory leaks (Eric Dumazet) {CVE-2010-2942}
- [fs] ocfs2: Don't walk off the end of fast symlinks (Joel Becker)
-
Fri Sep 17 2010 Chris Mason [2.6.32-100.0.19.el5]
- Add fix for 32 bit compat bugs
-
Thu Sep 16 2010 Chris Mason [2.6.32-100.0.18.el5]
- Fix scheduler regression with taskset
- Add support for new ixgbe card
- Fix kernel-doc build
-
Tue Sep 14 2010 Chris Mason [2.6.32-100.0.17.el5]
- Add driver updates
- Update ocfs2
- Enable debug builds
- Enable doc builds
- Fix scsi rq completion on errors
- Add LPFC update for DIF/DIX
-
Mon Sep 13 2010 Chris Mason [2.6.32-100.0.16.el5]
- Backport accept_local sys tunable, default to 1
-
Thu Sep 09 2010 Chris Mason [2.6.32-100.0.15.el5]
- Panic on oops by default
-
Wed Sep 08 2010 Chris Mason [2.6.32-100.0.14.el5]
- Stable update to 2.6.32.21
- Enable CONFIG_NO_HZ
-
Mon Sep 06 2010 Chris Mason [2.6.32-100.0.13.el5]
- Fix RT scheduler bottleneck
-
Fri Sep 03 2010 Guru Anbalagane [2.6.32-100.0.12.el5]
- fix ipmi sunoem cli busy issue
-
Thu Sep 02 2010 Chri Mason [2.6.32-100.0.11.el5]
- Change network drivers to contribute to entropy
- Update OCFS2
-
Fri Aug 27 2010 Chri Mason [2.6.32-100.0.10.el5]
- Add backported IPMI fixes from 2.6.35
-
Wed Aug 25 2010 Chri Mason [2.6.32-100.0.9.el5]
- Use deadline io scheduler by default.
-
Fri Aug 20 2010 Chri Mason [2.6.32-100.0.8.el5]
- Fix AIO spinlock contention w/igrab
- Add back ipmi_si tunables from 2.6.18 EL5
-
Wed Aug 11 2010 Chuck Anderson [2.6.32-100.0.7.el5]
- add mechanism to change termal event report interval (chuck.anderson@oracle.com) [orabug 9966307]
-
Tue Aug 03 2010 Chris Mason [2.6.32-100.0.6.el5]
- Turn on sched_compat_yield by default (java go faster please)
- Backport anon_vma fixes from 2.6.35
- Turn off AER error reporting for PCIe, it is causing problems on
some Sun hardware.
-
Mon Aug 02 2010 Srinivas Maturi <srinivas.maturi@oracle.com> [2.6.32-100.0.4.el5]
- Add pre install script to check for /dev/hd references in /etc/fstab
-
Thu Jul 29 2010 Guru Anbalagane <guru.anbalagane@oracle.com> [2.6.32-100.0.3.el5]
- update mptsas to 4.22
- update megaraid_sas to 4.31-ieee
- backout changes related to nr_cpus > 1024
-
Fri Jul 23 2010 Sunil Mushran <sunil.mushran@oracle.com> [2.6.32-100.0.2.el5]
- Updated ocfs2 version to 1.6.2
- Added datavolume mount option
-
Thu Jul 22 2010 Chris Mason <chris.mason@oracle.com> [2.6.32-100.0.1.el5]
- Turn off the intel iommu by default for performance reasons
-
Wed Jul 21 2010 Chris Mason <chris.mason@oracle.com> [2.6.32-100.el5]
- Change firewalling conntrack into a module
- Update the spec to include oracleasm provides:
-
Tue Jul 20 2010 Chris Mason <chris.mason@oracle.com>
- Add module signing code
-
Tue Jul 20 2010 Chris Mason <chris.mason@oracle.com>
- Add oracleasm 2.0.6
-
Mon Jul 12 2010 Chris Mason <chris.mason@oracle.com>
- Update to 2.6.32.y kernel base
- Include patches to reduce IPC lock contention
- Backport receive packet steering code
- Expose list of msi-irqs per device into sysfs