Stay Connected:

ELSA-2011-1386

ELSA-2011-1386 - kernel security, bug fix, and enhancement update

Type:SECURITY
Severity:IMPORTANT
Release Date:2011-10-21

Description



kernel:

[2.6.18-274.7.1.0.1.el5]
- fix ia64 build error due to add-support-above-32-vcpus.patch(Zhenzhong Duan)
- [x86] use dynamic vcpu_info remap to support more than 32 vcpus (Zhenzhong Duan)
- [scsi] add additional scsi medium error handling (John Sobecki) [orabug 12904887]
- [x86] Fix lvt0 reset when hvm boot up with noapic param
- [scsi] remove printk's when doing I/O to a dead device (John Sobecki, Chris Mason)
[orabug 12342275]
- [char] ipmi: Fix IPMI errors due to timing problems (Joe Jin) [orabug 12561346]
- [scsi] Fix race when removing SCSI devices (Joe Jin) [orabug 12404566]
- bonding: reread information about speed and duplex when interface goes up (John Haxby) [orabug 11890822]
- [fs] nfs: Fix __put_nfs_open_context() NULL pointer panic (Joe Jin) [orabug 12687646]
- [scsi] fix scsi hotplug and rescan race [orabug 10260172]
- fix filp_close() race (Joe Jin) [orabug 10335998]
- make xenkbd.abs_pointer=1 by default [orabug 67188919]
- [xen] check to see if hypervisor supports memory reservation change
(Chuck Anderson) [orabug 7556514]
- [net] Enable entropy for bnx2,bnx2x,e1000e,igb,ixgb,ixgbe,ixgbevf (John Sobecki)
[orabug 10315433]
- [NET] Add xen pv netconsole support (Tina Yang) [orabug 6993043] [bz 7258]
- [mm] shrink_zone patch (John Sobecki,Chris Mason) [orabug 6086839]
- fix aacraid not to reset during kexec (Joe Jin) [orabug 8516042]
- [rds] Patch rds to 1.4.2-20 (Andy Grover) [orabug 9471572, 9344105]
RDS: Fix BUG_ONs to not fire when in a tasklet
ipoib: Fix lockup of the tx queue
RDS: Do not call set_page_dirty() with irqs off (Sherman Pun)
RDS: Properly unmap when getting a remote access error (Tina Yang)
RDS: Fix locking in rds_send_drop_to()
- [xen] PVHVM guest with PoD crashes under memory pressure (Chuck Anderson)
[orabug 9107465]
- [xen] PV guest with FC HBA hangs during shutdown (Chuck Anderson)
[orabug 9764220]
- Support 256GB+ memory for pv guest (Mukesh Rathor) [orabug 9450615]
- fix overcommit memory to use percpu_counter for el5 (KOSAKI Motohiro,
Guru Anbalagane) [orabug 6124033]
- [ipmi] make configurable timeouts for kcs of ipmi [orabug 9752208]
- [ib] fix memory corruption (Andy Grover) [orabug 9972346]
- [aio] patch removes limit on number of retries (Srinivas Eeda) [orabug 10044782]
- [loop] Do not call loop_unplug for not configured loop device (orabug 10314497)

[2.6.18-274.7.1.el5]
- Revert: [xen] passthrough: block VT-d MSI trap injection (Paolo Bonzini) [716301 716302] {CVE-2011-1898}

[2.6.18-274.6.1.el5]
- [net] bridge: fix use after free in __br_deliver (Amerigo Wang) [730949 703045] {CVE-2011-2942}
- [misc] remove div_long_long_rem (Prarit Bhargava) [732879 732614] {CVE-2011-3209}
- [net] be2net: fix crash receiving non-member VLAN packets (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: Use NTWK_RX_FILTER command for promiscous mode (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: non-member vlan pkts not received in promisc mode (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [net] be2net: remove bogus unlikely on vlan check (Ivan Vecera) [736430 730239] {CVE-2011-3347}
- [x86] nmi: make NMI_NONE default watchdog in x86_64 hvm guests (Laszlo Ersek) [739823 707966]

[2.6.18-274.5.1.el5]
- [fs] proc: fix compile warning in pdeaux addition (Jarod Wilson) [732775 675781]
- [fs] proc: Fix procfs race vs rmmod or hot-remove (David Howells) [732775 675781]
- [net] Compute protocol seq numbers and fragment IDs using MD5 (Jiri Pirko) [732662 732663] {CVE-2011-3188}
- [crypto] Move md5_transform to lib/md5.c (Jiri Pirko) [732662 732663] {CVE-2011-3188}
- [fs] nfs: Fix client not honoring nosharecache mount option (David Jeffery) [734772 730097]
- [mm] avoid wrapping vm_pgoff in mremap and stack expansion (Jerome Marchand) [716543 716544] {CVE-2011-2496}
- [mm] Fix incorrect off-by-one centisec dirty values (Larry Woodman) [733665 691087]
- [net] bnx2x: fix bringup of BCM57710 (Michal Schmidt) [737475 680411]
- [virt] xen/netfront: no disable s/g when renegotiating features (Paolo Bonzini) [738392 733416]
- [fs] aio: fix aio+dio completion path regression w/3rd-party bits (Jeff Moyer) [734157 727504]
- [virt] xen: Allow arbitrary mtu size until frontend connected (Paolo Bonzini) [738389 697021]
- [misc] hypervisor: fix race in interrupt hook code (Prarit Bhargava) [730689 692966]
- [net] cnic, bnx2: Check iSCSI support early in bnx2_init_one (Neil Horman) [734761 710272]
- [net] igb: fix WOL on 2nd port on i350 (Stefan Assmann) [730682 718988]
- [misc] irq: fix interrupt handling for kdump under high load (Stefan Assmann) [728521 720212]

[2.6.18-274.4.1.el5]
- [serial] ifdef for powerpc, to only add functionality to this arch (Steve Best) [732377 707051]
- [serial] 8250: Fix capabilities when changing the port type (Steve Best) [732377 707051]
- [serial] 8250_pci EEH support for IBM/Digi PCIe 2-port Adapter (Steve Best) [732377 707051]
- [serial] 8250_pci: Add support for Digi/IBM PCIe 2-port Adapter (Steve Best) [732377 707051]
- [fs] ecryptfs: Add mount option to check uid of mounting device (Eric Sandeen) [731173 731174] {CVE-2011-1833}
- [scsi] qla2xxx: Re-add checks for null fcport references (Chad Dupuis) [736275 728219]
- [net] ipv6: make fragment identifications less predictable (Jiri Pirko) [723430 723431] {CVE-2011-2699}
- [net] ipv6: Remove unused skb argument of ipv6_select_ident (Jiri Pirko) [723430 723431] {CVE-2011-2699}
- [misc] taskstats: don't allow duplicate entries in listener mode (Jerome Marchand) [715449 715450] {CVE-2011-2484}
- [net] gro: Only reset frag0 when skb can be pulled (Herbert Xu) [726553 679682] {CVE-2011-2723}
- [xen] passthrough: block VT-d MSI trap injection (Paolo Bonzini) [716301 716302] {CVE-2011-1898}
- [xen] iommu: disable bus-mastering on hw that causes IOMMU fault (Laszlo Ersek) [730342 730343] {CVE-2011-3131}
- [usb] auerswald: fix buffer overflow (Don Zickus) [722395 722396] {CVE-2009-4067}
- [fs] cifs: fix possible memory corruption in CIFSFindNext (Jeff Layton) [732870 736654 732869 732471] {CVE-2011-3191}
- [fs] cifs: revert special handling for matching krb5 sessions (Jeff Layton) [697395 697396] {CVE-2011-1585}
- [fs] cifs: check for NULL session password (Jeff Layton) [697395 697396] {CVE-2011-1585}
- [fs] cifs: fix NULL pointer dereference in cifs_find_smb_ses (Jeff Layton) [697395 697396] {CVE-2011-1585}
- [fs] cifs: clean up cifs_find_smb_ses (Jeff Layton) [697395 697396] {CVE-2011-1585}
- [net] be2net: account for skb allocation failures (Ivan Vecera) [733152 730108]
- [net] bnx2x: downgrade Max BW error message to debug (Michal Schmidt) [732440 727614]
- [net] sock: do not change prot->obj_size (Jiri Pirko) [736742 725713]
- [net] be2net: Fix Tx stall issue (Ivan Vecera) [732946 722549]
- [net] be2net: rx-dropped wraparound fix (Ivan Vecera) [732945 722302]
- [net] be2net: fix netdev_stats_update (Ivan Vecera) [732945 722302]
- [char] tpm: Fix uninitialized usage of data buffer (Stanislaw Gruszka) [684672 684673] {CVE-2011-1160}
- [fs] ext4: Fix max size and logical block counting of extent file (Lukas Czerner) [722562 722563] {CVE-2011-2695}
- [fs] nfs: have nfs_flush_list issue FLUSH_SYNC writes in parallel (Jeff Layton) [730686 728508]
- [xen] mm: fix race with ept_entry management (Andrew Jones) [730685 729529]
- [xen] hvm: support more opcodes for MMIO (Paolo Bonzini) [728518 723755]

ocfs2:

[1.4.9-1.el5]
- Backport the discontig block group features from mainline ocfs2
into EL5.x kernels


Related CVEs


CVE-2009-4067
CVE-2011-1160
CVE-2011-1585
CVE-2011-1833
CVE-2011-2484
CVE-2011-2496
CVE-2011-2695
CVE-2011-2699
CVE-2011-2723
CVE-2011-2942
CVE-2011-3131
CVE-2011-3188
CVE-2011-3191
CVE-2011-3209
CVE-2011-3347

Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By Advisory
Oracle Linux 5 (i386) kernel-2.6.18-274.7.1.0.1.el5.src.rpm6a7cd3ba5828e690d8173b16b3b763baELSA-2019-4732
ocfs2-2.6.18-274.7.1.0.1.el5-1.4.9-1.el5.src.rpm6d7b578b8dcc7082796aa1f37e407610-
oracleasm-2.6.18-274.7.1.0.1.el5-2.0.5-1.el5.src.rpm4b3461dfe71ad7249c29a6053fb77d62-
kernel-2.6.18-274.7.1.0.1.el5.i686.rpm23b5a92ffea4443a714a39035259645eELSA-2019-4732
kernel-PAE-2.6.18-274.7.1.0.1.el5.i686.rpm8623d6ab31b907e47984585770153c87ELSA-2019-4732
kernel-PAE-devel-2.6.18-274.7.1.0.1.el5.i686.rpmdba963f4fba2e4deca28ae109a4597fbELSA-2019-4732
kernel-debug-2.6.18-274.7.1.0.1.el5.i686.rpm5f24409296704316ac46dc5434406024ELSA-2019-4732
kernel-debug-devel-2.6.18-274.7.1.0.1.el5.i686.rpm5ece83ef484145a9267a720fce5fd525ELSA-2019-4732
kernel-devel-2.6.18-274.7.1.0.1.el5.i686.rpmd5de6c8b643da65c923af86ca30dd77dELSA-2019-4732
kernel-doc-2.6.18-274.7.1.0.1.el5.noarch.rpm2f0ef7d71de2bb30a59d2593ec51be2aELSA-2019-4732
kernel-headers-2.6.18-274.7.1.0.1.el5.i386.rpm7547fbf0e2ac6e13b778346d966ac564ELSA-2019-4732
kernel-xen-2.6.18-274.7.1.0.1.el5.i686.rpme139d135a04cc9cac200afc4e60bdd61ELSA-2019-4732
kernel-xen-devel-2.6.18-274.7.1.0.1.el5.i686.rpm00619e1bc4af17300881e631e2ada4ffELSA-2019-4732
ocfs2-2.6.18-274.7.1.0.1.el5-1.4.9-1.el5.i686.rpm06997df410272cbbf80eab4df5f09d8b-
ocfs2-2.6.18-274.7.1.0.1.el5PAE-1.4.9-1.el5.i686.rpmf01c8ac2b9a9059e28d23a4523ef031f-
ocfs2-2.6.18-274.7.1.0.1.el5debug-1.4.9-1.el5.i686.rpm6047f22af96e36719255ceac379feeb8-
ocfs2-2.6.18-274.7.1.0.1.el5xen-1.4.9-1.el5.i686.rpm7632972bd4c561e55e8a988707f5e7ac-
oracleasm-2.6.18-274.7.1.0.1.el5-2.0.5-1.el5.i686.rpmf9d68aeea117fa9063fc5ac4c2fee3a0-
oracleasm-2.6.18-274.7.1.0.1.el5PAE-2.0.5-1.el5.i686.rpmd6c5047e49c0a80605811913c0ef9bae-
oracleasm-2.6.18-274.7.1.0.1.el5debug-2.0.5-1.el5.i686.rpmed17d4079e55aa5d28521c82a34d5b45-
oracleasm-2.6.18-274.7.1.0.1.el5xen-2.0.5-1.el5.i686.rpm2a4759ba46a091c3c11675ed1dd68057-
Oracle Linux 5 (ia64) kernel-2.6.18-274.7.1.0.1.el5.src.rpm6a7cd3ba5828e690d8173b16b3b763baELSA-2019-4732
ocfs2-2.6.18-274.7.1.0.1.el5-1.4.9-1.el5.src.rpm6d7b578b8dcc7082796aa1f37e407610-
oracleasm-2.6.18-274.7.1.0.1.el5-2.0.5-1.el5.src.rpm4b3461dfe71ad7249c29a6053fb77d62-
kernel-2.6.18-274.7.1.0.1.el5.ia64.rpm43e00338f4cb63af5bc47af4002957a2ELSA-2019-4732
kernel-debug-2.6.18-274.7.1.0.1.el5.ia64.rpm169819b2dcbe2ae0401b62df073424c4ELSA-2019-4732
kernel-debug-devel-2.6.18-274.7.1.0.1.el5.ia64.rpm00104f68c466142e9376d76fd32d1ba1ELSA-2019-4732
kernel-devel-2.6.18-274.7.1.0.1.el5.ia64.rpm1dc021e4cbd1971aa5e7318db58281a0ELSA-2019-4732
kernel-doc-2.6.18-274.7.1.0.1.el5.noarch.rpm2f0ef7d71de2bb30a59d2593ec51be2aELSA-2019-4732
kernel-headers-2.6.18-274.7.1.0.1.el5.ia64.rpmab739d65bac4f4c2196afeab2853107cELSA-2019-4732
kernel-xen-2.6.18-274.7.1.0.1.el5.ia64.rpmeaa7b980b682867cae0f80b3b8550123ELSA-2019-4732
kernel-xen-devel-2.6.18-274.7.1.0.1.el5.ia64.rpm909351391d3040886dbe2504e25bcac5ELSA-2019-4732
ocfs2-2.6.18-274.7.1.0.1.el5-1.4.9-1.el5.ia64.rpm1b433c6258cd00fb7753c210d6537a67-
ocfs2-2.6.18-274.7.1.0.1.el5debug-1.4.9-1.el5.ia64.rpm36e80e5d2bbc4b06aad7ed7dfdfe2aa2-
ocfs2-2.6.18-274.7.1.0.1.el5xen-1.4.9-1.el5.ia64.rpm7fe7243c3261b49595821f274e383957-
oracleasm-2.6.18-274.7.1.0.1.el5-2.0.5-1.el5.ia64.rpm5cad810457dbe2bc70b55068b0d737dd-
oracleasm-2.6.18-274.7.1.0.1.el5debug-2.0.5-1.el5.ia64.rpmfa86ac0239304951a0fdf7f8a918efa0-
oracleasm-2.6.18-274.7.1.0.1.el5xen-2.0.5-1.el5.ia64.rpm77a3cac2b9f04828e62b07ea430afcb9-
Oracle Linux 5 (x86_64) kernel-2.6.18-274.7.1.0.1.el5.src.rpm6a7cd3ba5828e690d8173b16b3b763baELSA-2019-4732
ocfs2-2.6.18-274.7.1.0.1.el5-1.4.9-1.el5.src.rpm6d7b578b8dcc7082796aa1f37e407610-
oracleasm-2.6.18-274.7.1.0.1.el5-2.0.5-1.el5.src.rpm4b3461dfe71ad7249c29a6053fb77d62-
kernel-2.6.18-274.7.1.0.1.el5.x86_64.rpm6497dafb0c641e59b19e9712a0be3579ELSA-2019-4732
kernel-debug-2.6.18-274.7.1.0.1.el5.x86_64.rpm447b3e3f479511cb99f857ba2b6f42f4ELSA-2019-4732
kernel-debug-devel-2.6.18-274.7.1.0.1.el5.x86_64.rpm8334f6caf26e1834989e44cf581baa1dELSA-2019-4732
kernel-devel-2.6.18-274.7.1.0.1.el5.x86_64.rpmae460246a9be01393b1c63c0aefd24e2ELSA-2019-4732
kernel-doc-2.6.18-274.7.1.0.1.el5.noarch.rpm2f0ef7d71de2bb30a59d2593ec51be2aELSA-2019-4732
kernel-headers-2.6.18-274.7.1.0.1.el5.x86_64.rpmf35c8570451ea22bd881a7f90ed2a584ELSA-2019-4732
kernel-xen-2.6.18-274.7.1.0.1.el5.x86_64.rpm9fcb143a51fe97654200cfd0edc31106ELSA-2019-4732
kernel-xen-devel-2.6.18-274.7.1.0.1.el5.x86_64.rpma3a47a7a38a9982a45e4c3f03a9c2ad7ELSA-2019-4732
ocfs2-2.6.18-274.7.1.0.1.el5-1.4.9-1.el5.x86_64.rpm99561db64a3ae5f346e38fdbb3745cc8-
ocfs2-2.6.18-274.7.1.0.1.el5debug-1.4.9-1.el5.x86_64.rpm70e57c20382b52cf52d68bd37ad62e73-
ocfs2-2.6.18-274.7.1.0.1.el5xen-1.4.9-1.el5.x86_64.rpm60b2e03820e9688580cf4c1b976b59c6-
oracleasm-2.6.18-274.7.1.0.1.el5-2.0.5-1.el5.x86_64.rpm22e70093d87895d712152323a9a7eaa8-
oracleasm-2.6.18-274.7.1.0.1.el5debug-2.0.5-1.el5.x86_64.rpm2aac9095db94c19489ef792e953952d5-
oracleasm-2.6.18-274.7.1.0.1.el5xen-2.0.5-1.el5.x86_64.rpm90a2cd02ed82f7c6df7b1f4e512072f1-



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights