-
Mon May 23 2011 Joe Jin [2.6.32-100.28.17.el6]
- [net] Extend prot->slab size when add sock extend fields.
-
Fri May 20 2011 Joe Jin [2.6.32-100.28.16.el6]
- kernel: Fix unlimited socket backlog DoS {CVE-2010-4251}
- RDS: Fix congestion issues for loopback
- rds: prevent BUG_ON triggering on congestion map updates {CVE-2011-1023}
- epoll: prevent creating circular epoll structures {CVE-2011-1082}
- fs: fix corrupted OSF partition table parsing {CVE-2011-1163}
- fs: Increase OSF partition limit from 8 to 18 {CVE-2011-1163}
- netfilter: arp_tables: fix infoleak to userspace {CVE-2011-1170}
- netfilter: ip_tables: fix infoleak to userspace {CVE-2011-1171}
- ipv6: netfilter: ip6_tables: fix infoleak to userspace {CVE-2011-1172}
- [SCSI] mpt2sas: prevent heap overflows and unchecked reads {CVE-2011-1494, CVE-2011-1495}
-
Wed May 11 2011 Joe Jin [2.6.32-100.28.15.el6]
- sctp: fix to calc the INIT/INIT-ACK chunk length correctly is set {CVE-2011-1573}
- dccp: fix oops on Reset after close {CVE-2011-1093}
- bridge: netfilter: fix information leak {CVE-2011-1080}
- Bluetooth: bnep: fix buffer overflow {CVE-2011-1079}
- net: don't allow CAP_NET_ADMIN to load non-netdev kernel modules {CVE-2011-1019}
- ipip: add module alias for tunl0 tunnel device
- gre: add module alias for gre0 tunnel device
- drm/radeon/kms: check AA resolve registers on r300 {CVE-2011-1016}
- drm/radeon: fix regression with AA resolve checking {CVE-2011-1016}
- drm: fix unsigned vs signed comparison issue in modeset ctl ioctl {CVE-2011-1013}
- proc: protect mm start_code/end_code in /proc/pid/stat {CVE-2011-0726}
- ALSA: caiaq - Fix possible string-buffer overflow {CVE-2011-0712}
- xfs: zero proper structure size for geometry calls {CVE-2011-0711}
- xfs: prevent leaking uninitialized stack memory in FSGEOMETRY_V1 {CVE-2011-0711}
- ima: fix add LSM rule bug {CVE-2011-0006}
- IB/uverbs: Handle large number of entries in poll CQ {CVE-2010-4649, CVE-2011-1044}
- CAN: Use inode instead of kernel address for /proc file {CVE-2010-4565}
-
Wed May 04 2011 Joe Jin [2.6.32-100.28.14.el6]
- IB/qib: fix qib compile warning.
- IB/core: Allow device-specific per-port sysfs files.
- dm crypt: add plain64 iv.
- firmware: add firmware for qib.
- Infiniband: Add QLogic PCIe QLE InfiniBand host channel adapters support.
-
Wed Apr 13 2011 Joe Jin [2.6.32-100.28.11.el6]
- fs/partitions: Validate map_count in Mac partition tables {CVE-2011-1010}
- nfs4: Ensure that ACL pages sent over NFS were not allocated from
the slab (v3) {CVE-2011-1090}
-
Wed Apr 13 2011 Joe Jin [2.6.32-100.28.10.el6]
- Use cciss for some Smart Array controller for OL5 [orabug 11899706]
- CVEs from RHSA-2011-0421
- install_special_mapping skips security_file_mmap check {CVE-2010-4346}
- orinoco: fix TKIP countermeasure behaviour {CVE-2010-4648}
- net: clear heap allocation for ethtool_get_regs() {CVE-2010-4655}
- usb: iowarrior: don't trust report_size for buffer size {CVE-2010-4656}
- [media] [v3,media] av7110: check for negative array offset {CVE-2011-0521}
- RDMA/cma: Fix crash in request handlers {CVE-2011-0695}
- IB/cm: Bump reference count on cm_id before invoking callback {CVE-2011-0695}
- gro: reset skb_iif on reuse {CVE-2011-1478}
-
Wed Mar 16 2011 Guru Anbalagane [2.6.32-100.28.9.el6]
- sync up the version
-
Tue Mar 15 2011 Chuck Anderson [2.6.32-100.28.8.el6]
- [block] check for proper length of iov entries earlier in blk_rq_map_user_iov
(Xiaotian Feng) {CVE-2010-4668}
- scm: lower SCM_MAX_FD (Eric Dumazet) {CVE-2010-4249}
- perf_events: Fix perf_counter_mmap() hook in mprotect() (Pekka Enberg)
{CVE-2010-4169}
- tcp: Increase TCP_MAXSEG socket option minimum (David S. Miller)
{CVE-2010-4165}
- Enable module force load option [orabug 11782146]
- Enable vmw balloon and pvscsi (Guru Anbalagane) [orabug 11697522]
-
Wed Mar 02 2011 Guru Anbalagane [2.6.32-100.28.7.el6]
- build from git
-
Thu Feb 03 2011 Kevin Lyons [2.6.32-100.28.6.el6]
- Remove crashkernel option if it is present [bug 11714928]
-
Wed Feb 02 2011 Kevin Lyons [2.6.32-100.28.5.el6]
- Run new-kernel-pkg in posttrans section [bug 11699701]
-
Mon Jan 31 2011 Kevin Lyons [2.6.32-100.28.4.el6]
- Add ql2xxx-firmware to the kernel_prereq list [bug 11699701]
-
Fri Jan 28 2011 Guru Anbalagane [2.6.32-100.28.3.el6]
- fix hpilo config
-
Thu Jan 27 2011 Guru Anbalagane [2.6.32-100.28.2.el6]
- [block] remove duplicate ids with hpsa/cciss (Joe Jin) [orabug 11691704]
-
Wed Jan 26 2011 Srinivas Maturi [2.6.32-100.28.1.el6]
- Revert Module.kabi_i686 and Module.kabi_x86_64 to 2.6.32-100.25.12.el6
- Update release
-
Wed Jan 26 2011 Guru Anbalagane [2.6.32-100.25.16.el6]
- Add hpsa support 2.0.2-2
- [kexec] premit reduction of the reserved memory size (Joe Jin) [orabug 11076466]
-
Mon Jan 24 2011 Srinivas Maturi [2.6.32-100.25.15.el6]
- Update Module.kabi_i686 and Module.kabi_x86_64 again
-
Mon Jan 24 2011 Guru Anbalagane [2.6.32-100.25.14.el6]
- change initrd to initramfs - use dracut [orabug 11677466]
-
Mon Jan 24 2011 Kevin Lyons [2.6.32-100.25.13.el6]
- Make sure call to weak-modules in post and preun sections works
for debug package [bug 11676741]
-
Sun Jan 23 2011 Srinivas Maturi [2.6.32-100.25.12.el6]
- Update Module.kabi_i686
-
Sun Jan 23 2011 Srinivas Maturi [2.6.32-100.25.11.el6]
- Enable kabichk and update Module.kabi_x86_64
-
Fri Jan 21 2011 Guru Anbalagane [2.6.32-100.25.10.el6]
- fixes ocfs2_page_mkwrite path (WenGang Wang) [orabug 10127979]
- Increase max guest memory from 32GB to 1TB (Guru Anbalagane) [orabug 11069098]
- setup_arg_pages: diagnose excessive argument size (Roland McGrath) {CVE-2010-3858}
- [net] Truncate recvfrom and sendto length to INT_MAX (Linux Torvalds) {CVE-2010-3859}
- [net] packet: fix information leak to userland (Vasiliy Kulikov) {CVE-2010-3876}
- [net] inet_diag: Make sure we run the same bytecode we audited (Nelson Elhage) {CVE-2010-3880}
- [ipc] sys_semctl: fix kernel stack leakage (Dan Rosenberg) {CVE-2010-4083}
- [scsi] gdth: integer overflow in ioctl (Dan Carpenter) {CVE-2010-4157}
- bluetooth: Fix missing NULL check (Alan Cox) {CVE-2010-4242}
- posix-cpu-timers: workaround to suppress the problems with mt exec (Oleg Nesterov) {CVE-2010-4248}
- [fs] xfs: prevent reading uninitialized stack memory (Dan Rosenberg) {CVE-2010-3078}
- ALSA: seq/oss - Fix double-free at error path of snd_seq_oss_open() (Takashi Iwai) {CVE-2010-3080}
- drivers/net/usb/hso.c: prevent reading uninitialized memory (Dan Rosenberg) {CVE-2010-3298}
- net: clear heap allocation for ETHTOOL_GRXCLSRLALL (Kees Cook) {CVE-2010-3861)
- can-bcm: fix minor heap overflow (Oliver Hartkopp) {CVE-2010-3874}
- ipc: shm: fix information leak to userland (Vasiliy Kulikov) {CVE-2010-4072}
- ipc: initialize structure memory to zero for compat functions (Dan Rosenberg) {CVE-2010-4073}
- USB: serial/mos*: prevent reading uninitialized stack memory (Dan Rosenberg) {CVE-2010-4074}
- tty: Make tiocgicount a handler (Alan Cox) {CVE-2010-4075}
- tty: icount changeover for other main devices (Alan Cox) {CVE-2010-4077}
- V4L/DVB: ivtvfb: prevent reading uninitialized stack memory (Dan Rosenberg) {CVE-2010-4079}
- sound/pci/rme9652: prevent reading uninitialized stack memory (Dan Rosenberg) {CVE-2010-4080}
- drivers/video/via/ioctl.c: prevent reading uninitialized stack memory (Dan Rosenberg) {CVE-2010-4082}
- filter: make sure filters dont read uninitialized memory (David S. Miller) {CVE-2010-4158}
- net: Limit socket I/O iovec total length to INT_MAX.(David S. Miller) {CVE-2010-4160}
- bio: take care not overflow page count when mapping/copying user data (Jens Axboe) {CVE-2010-4162}
- block: check for proper length of iov entries in blk_rq_map_user_iov() (Jens Axboe) {CVE-2010-4163}
- af_unix: limit unix_tot_inflight (Eric Dumazet) {CVE-2010-4249}
- igb: only use vlan_gro_receive if vlans are registered (Alexander Duyck) {CVE-2010-4263}
- net: tipc: fix information leak to userland (Kulikov Vasiliy) {CVE-2010-3877}
- exec: make argv/envp memory visible to oom-killer (Oleg Nesterov) {CVE-2010-4243}
- exec: copy-and-paste the fixes into compat_do_execve() paths (Oleg Nesterov) {CVE-2010-4243}
- sctp: Fix a race between ICMP protocol unreachable and connect() (Vlad Yasevich) {CVE-2010-4526}
-
Fri Jan 21 2011 Kevin Lyons [2.6.32-100.25.9.el6]
- Add dependency on dracut-kernel [bug 11066805]
- Include the /boot/symvers file [bug 11673732]
-
Thu Jan 13 2011 Srinivas Maturi [2.6.32-100.25.8.el6]
- Enable kabichk
-
Thu Jan 13 2011 Kevin Lyons [2.6.32-100.25.7.el6]
- Make sure EXTARVERSION has CPU extension as well
[bug 11071068]
-
Tue Jan 11 2011 Guru Anbalagane [2.6.32-100.25.6.el6]
- git commits based on uek5
-Upstream xen blkfront patches
-Upstream commit 269484a492d9177072ee11ec8c9bff71d256837a
sched: Fix proc_sched_set_task()
- Find an unbound irq number in reverse order (high to low) [ orabug 10096783]
-upstream commit d065bd810b6deb67d4897a14bfe21f8eb526ba99
mm: retry page fault when blocking on disk transfer
-upstream commit 0acedc124aca35f5cce9d4ee288dc372bf517e09
-dma-mapping.h: add the dma_unmap state API
-update enic to upstream(1.4.1.6)
-update cxgb3 to upstream(1.1.4-ko)
-Fix pv guest migrate hung (Joe Jin) [orabug 10114101]
-update 3w-xxxx to 1.26.02.003
-Upstream commit ba4ee30c6c797de148dcc7254cf6d531aba71d9b
- ibft: separate ibft parsing from sysfs interface
-update 3w-9xxx to 2.26.02.014
-minor update to aic94xx
-minor update to aic7xxx
-minor update to aic7xxx_old.
-update accraid to upstream
-update mlx4 to 1.5.1.6
-update fnic to 1.4.0.145
-update lpfc to 8.3.18
-minor update megaraid
-update cxgbi - cxgb3i 2.0.0, cxgb4i 0.9.1
-update mpt2sas
-update mptsas
-update cpqarray
-update hpilo
-netconsole over bonding support
-netconsole support for netfront
-[SCSI] iscsi_tcp: wake xmit thread when killing session
-fix tehuti firmware file name
-xen: ensure that all event channels start off bound to VCPU 0
-netdevice - add netdev print helper
-update bnx2 to 2.0.8-j15
-update bnx2x to 1.52.1-7
-update cnic to 2.1.2
-update bnx2i to 2.1.1
-update tg3 to 3.108
-minor changes related to rmb() - e100
-update e1000 to 7.3.21-k6-NAPI
-Update e1000e to 1.2.7-k2
-Update igb to 2.1.0-k2
-Update igbvf
-update ixgb
-Update ixgbe to 2.0.62-k2
-Add support for ixgbevf 1.0.0-k0
-Add bna support 2.3.2.0
-Update bfa to 2.3.2.0
-Update be2net to 2.102.426r
-Update be2iscsi to 2.0.527.0
-Update cciss to 3.6.26
-Update qla2xxx to 8.03.01.02.32.1-k9
-Update qla4xxx to 5.02.07.03.05.06-c1
-Update qlge to v1.00.00.25.00.00-01
-Update netxen_nic to 4.0.74
-Add support for qlcnic - 5.0.9
-Ignore changes to paravirt_lazy_mode in int context - Oracle bug 10285722
-Upstream commit d11c563dd20ff3c3e1c989d9e10e1d6d0
-Enable entropy in nic - bnx2, bnx2x, e1000, e1000e, igb, ixgb, ixgbe
-export firmware that missed in drivers
-xen/event: validate irq before get evtchn by irq
-xen/fb: fix potential memory leak
-xen/fb: fix xenfb suspend/resume race.
-
Tue Jan 11 2011 Kevin Lyons [2.6.32-100.25.5.el6]
- Add architecture suffix to files [bug 11063219]
-
Wed Jan 05 2011 Guru Anbalagane [2.6.32-100.25.4.el6]
- remove mkinitrd and fix kernel-uek-firmware dependency
-
Mon Jan 03 2011 Guru Anbalagane [2.6.32-100.25.3.el6]
- fix perf conflict
-
Wed Dec 29 2010 Guru Anbalagane [2.6.32-100.25.2.el6]
- make changes for uek6
-
Fri Dec 17 2010 Chris Mason [2.6.32-100.25.1.elr6]
- Update T10Dif support
- Add fix for MPT enclosures
-
Wed Dec 08 2010 Guru Anbalagane [2.6.32-100.24.1.el5]
- [sctp] Do not reset the packet during sctp_packet_con[CVE-2010-3432]
- [drm/i915] Sanity check pread/pwrite [CVE-2010-2962]
- [wireless] fix kernel heap content leak [CVE-2010-2955]
- [sctp] Fix out-of-bounds reading in sctp_asoc_get_hmac() [CVE-2010-3705]
- [niu] Fix kernel buffer overflow for ETHTOOL_GRXCLSRLALL [CVE-2010-3084]
- Fix pktcdvd ioctl dev_minor range check [CVE-2010-3437]
- Do not allow llseek to set_ftrace_filter [CVE-2010-3079]
- [kvm] Fix fs/gs reload oops with invalid ldt [CVE-2010-3698]
- [alsa] prevent heap corruption in snd_ctl_new() [CVE-2010-3442]
-
Tue Nov 09 2010 Chris Mason [2.6.32-100.23.1.el5]
- Fix LACP bonding mode (Tina Yang)
-
Mon Oct 25 2010 Chris Mason [2.6.32-100.22.1.el5]
- Fix grat arps on bonded interfaces (Tina Yang)
-
Fri Oct 22 2010 Greg Marsden [2.6.32-100.21.1.el5]
* [rds] fix access issue with rds (Chris Mason) {CVE-2010-3904}
-
Wed Oct 20 2010 Srinivas Eeda [2.6.32-100.20.1.el5_errata1]
- [fuse] linux-2.6.32-fuse-return-EGAIN-if-not-connected-bug-10154489.patch
- [net] linux-2.6.32-net-sched-fix-kernel-leak-in-act_police.patch
- [aio] linux-2.6.32-aio-check-for-multiplication-overflow-in-do_io_subm.patch
-
Thu Sep 30 2010 Guru Anbalagane [2.6.32-100.20.1.el5]
- [fs] xfs: return inode fork offset in bulkstat for fsr (Dave Chinner)
- [fs] xfs: always use iget in bulkstat (Dave Chinner) {CVE-2010-2943}
- [fs] xfs: validate untrusted inode numbers during lookup (Dave Chinner) {CVE-2010-2943}
- [fs] xfs: rename XFS_IGET_BULKSTAT to XFS_IGET_UNTRUSTED (Dave Chinner) {CVE-2010-2943}
- [net] net sched: fix some kernel memory leaks (Eric Dumazet) {CVE-2010-2942}
- [fs] ocfs2: Don't walk off the end of fast symlinks (Joel Becker)
-
Fri Sep 17 2010 Chris Mason [2.6.32-100.0.19.el5]
- Add fix for 32 bit compat bugs
-
Thu Sep 16 2010 Chris Mason [2.6.32-100.0.18.el5]
- Fix scheduler regression with taskset
- Add support for new ixgbe card
- Fix kernel-doc build
-
Tue Sep 14 2010 Chris Mason [2.6.32-100.0.17.el5]
- Add driver updates
- Update ocfs2
- Enable debug builds
- Enable doc builds
- Fix scsi rq completion on errors
- Add LPFC update for DIF/DIX
-
Mon Sep 13 2010 Chris Mason [2.6.32-100.0.16.el5]
- Backport accept_local sys tunable, default to 1
-
Thu Sep 09 2010 Chris Mason [2.6.32-100.0.15.el5]
- Panic on oops by default
-
Wed Sep 08 2010 Chris Mason [2.6.32-100.0.14.el5]
- Stable update to 2.6.32.21
- Enable CONFIG_NO_HZ
-
Mon Sep 06 2010 Chris Mason [2.6.32-100.0.13.el5]
- Fix RT scheduler bottleneck
-
Fri Sep 03 2010 Guru Anbalagane [2.6.32-100.0.12.el5]
- fix ipmi sunoem cli busy issue
-
Thu Sep 02 2010 Chri Mason [2.6.32-100.0.11.el5]
- Change network drivers to contribute to entropy
- Update OCFS2
-
Fri Aug 27 2010 Chri Mason [2.6.32-100.0.10.el5]
- Add backported IPMI fixes from 2.6.35
-
Wed Aug 25 2010 Chri Mason [2.6.32-100.0.9.el5]
- Use deadline io scheduler by default.
-
Fri Aug 20 2010 Chri Mason [2.6.32-100.0.8.el5]
- Fix AIO spinlock contention w/igrab
- Add back ipmi_si tunables from 2.6.18 EL5
-
Wed Aug 11 2010 Chuck Anderson [2.6.32-100.0.7.el5]
- add mechanism to change termal event report interval (chuck.anderson@oracle.com) [orabug 9966307]
-
Tue Aug 03 2010 Chris Mason [2.6.32-100.0.6.el5]
- Turn on sched_compat_yield by default (java go faster please)
- Backport anon_vma fixes from 2.6.35
- Turn off AER error reporting for PCIe, it is causing problems on
some Sun hardware.
-
Mon Aug 02 2010 Srinivas Maturi <srinivas.maturi@oracle.com> [2.6.32-100.0.4.el5]
- Add pre install script to check for /dev/hd references in /etc/fstab
-
Thu Jul 29 2010 Guru Anbalagane <guru.anbalagane@oracle.com> [2.6.32-100.0.3.el5]
- update mptsas to 4.22
- update megaraid_sas to 4.31-ieee
- backout changes related to nr_cpus > 1024
-
Fri Jul 23 2010 Sunil Mushran <sunil.mushran@oracle.com> [2.6.32-100.0.2.el5]
- Updated ocfs2 version to 1.6.2
- Added datavolume mount option
-
Thu Jul 22 2010 Chris Mason <chris.mason@oracle.com> [2.6.32-100.0.1.el5]
- Turn off the intel iommu by default for performance reasons
-
Wed Jul 21 2010 Chris Mason <chris.mason@oracle.com> [2.6.32-100.el5]
- Change firewalling conntrack into a module
- Update the spec to include oracleasm provides:
-
Tue Jul 20 2010 Chris Mason <chris.mason@oracle.com>
- Add module signing code
-
Tue Jul 20 2010 Chris Mason <chris.mason@oracle.com>
- Add oracleasm 2.0.6
-
Mon Jul 12 2010 Chris Mason <chris.mason@oracle.com>
- Update to 2.6.32.y kernel base
- Include patches to reduce IPC lock contention
- Backport receive packet steering code
- Expose list of msi-irqs per device into sysfs