------------------------------------------------------------------------------- - Fedora Update Notification FEDORA-2011-6447 2011-05-04 00:38:03 ------------------------------------------------------------------------------- -
Name : kernel Product : Fedora 13 Version : 2.6.34.9 Release : 69.fc13 URL : http://www.kernel.org/ Summary : The Linux kernel Description : The kernel package contains the Linux kernel (vmlinuz), the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc.
------------------------------------------------------------------------------- - Update Information:
Update to kernel 2.6.34.9:
http://ftp.kernel.org/pub/linux/kernel/v2.6/longterm/v2.6.34/ChangeLog-2.6.34.9 ------------------------------------------------------------------------------- - ChangeLog:
* Mon May 2 2011 Chuck Ebbert <cebbert@redhat.com> 2.6.34.9-69 - [SCSI] mpt2sas: prevent heap overflows and unchecked reads (CVE-2011-1494, CVE-2011-1495) - dccp: fix oops on Reset after close (CVE-2011-1093) * Fri Apr 29 2011 Chuck Ebbert <cebbert@redhat.com> - Bluetooth: bnep: fix buffer overflow (CVE-2011-1079) - agp: fix arbitrary kernel memory writes (CVE-2011-1745) - agp: fix OOM and buffer overflow (CVE-2011-1746) * Sun Apr 17 2011 Chuck Ebbert <cebbert@redhat.com> - Linux 2.6.34.9 - Fix up drm-next.patch to apply on top of cda4b7d3a, e06b14ee9 - Un-revert 6a1a82df9 from upstream - Drop: linux-2.6-v4l-dvb-av7110-check-for-negative-array-offset.patch ipc-zero-struct-memory-for-compat-fns.patch ipc-shm-fix-information-leak-to-user.patch posix-cpu-timers-workaround-to-suppress-problems-with-mt-exec.patch ioat2-catch-and-recover-from-broken-vtd-configurations.patch sctp-fix-out-of-bounds-reading-in-sctp_asoc_get_hmac.patch do_exit-make-sure-that-we-run-with-get_fs-user_ds.patch perf_events-fix-perf_counter_mmap-hook-in-mprotect.patch bio-take-care-not-overflow-page-count-when-mapping-copying-user-data.patch af_unix-limit-unix_tot_inflight.patch filter-make-sure-filters-dont-read-uninitialized-memory.patch can-bcm-fix-minor-heap-overflow.patch block-check-for-proper-length-of-iov-entries-in-blk_rq_map_user_iov.patch block-check-for-proper-length-of-iov-entries-earlier-in-blk_rq_map_user_iov.patch install-special-mapping-skips-security-file-mmap-check.patch ib-uverbs-handle-large-number-of-poll-entries-in-poll-cq.patch ima-fix-add-lsm-rule-bug.patch orinoco-fix-tkip-countermeasure-behaviour.patch fuse-verify-ioctl-retries.patch tcp-avoid-a-possible-divide-by-zero.patch tcp-bug-fix-in-initialization-of-receive-window.patch tcp-don-t-change-unlocked-socket-state-in-tcp_v4_err.patch tcp-increase-tcp_maxseg-socket-option-minimum.patch tcp-make-tcp_maxseg-minimum-more-correct.patch * Wed Mar 23 2011 Kyle McMartin <kmcmartin@redhat.com> - Backport 3e9d08e: "virtio_net: Add schedule check to napi_enable call" * Fri Mar 11 2011 Chuck Ebbert <cebbert@redhat.com> - Drop linux-2.6-defaults-aspm.patch; fixing ASPM properly will be too difficult in this old kernel. * Thu Feb 24 2011 Chuck Ebbert <cebbert@redhat.com> - Fix crash when dropping filesystem caches (#649871) * Mon Feb 14 2011 Kyle McMartin <kmcmartin@redhat.com> 2.6.34.8-68 - Backport commits from longterm-2.6.35.y to 'fix' Intel Sandy Bridge chipsets. (Requested by Intel folks.) * Sat Feb 12 2011 Chuck Ebbert <cebbert@redhat.com> - bridge: Fix mglist corruption that leads to memory corruption (#650151) * Wed Feb 9 2011 Matthew Garrett <mjg@redhat.com> - linux-2.6-acpi-fix-alias.patch: fix ACPI object aliasing (#608648) * Sat Feb 5 2011 Chuck Ebbert <cebbert@redhat.com> - Linux 2.6.34.8 - Drop merged patches: 01-compat-make-compat_alloc_user_space-incorporate-the-access_ok-check.patch 02-compat-test-rax-for-the-system-call-number-not-eax.patch 03-compat-retruncate-rax-after-ia32-syscall-entry-tracing.patch aio-check-for-multiplication-overflow-in-do_io_submit.patch cifs-fix-dns-resolver.patch inotify-fix-inotify-oneshot-support.patch inotify-send-IN_UNMOUNT-events.patch irda-correctly-clean-up-self-ias_obj-on-irda_bind-failure.patch keys-fix-bug-in-keyctl-session-to-parent-if-parent-has-no-session-keyring.patch keys-fix-rcu-no-lock-warning-in-keyctl-session-to-parent.patch wireless-extensions-fix-kernel-heap-content-leak.patch pci-msi-remove-unsafe-and-unnecessary-hardware-access.patch pci-msi-restore-read_msi_msg_desc-add-get_cached_msi_msg_desc.patch x86-tsc-sched-recompute-cyc2ns_offset-s-during-resume-from-sleep-states.patch x86-tsc-fix-a-preemption-leak-in-restore_sched_clock_state.patch execve-improve-interactivity-with-large-arguments.patch execve-make-responsive-to-sigkill-with-large-arguments.patch setup_arg_pages-diagnose-excessive-argument-size.patch alsa-seq-oss-fix-double-free-at-error-path-of-snd_seq_oss_open.patch tracing-do-not-allow-llseek-to-set_ftrace_filter.patch sched-00-fix-user-time-incorrectly-accounted-as-system-time-on-32-bit.patch xen-handle-events-as-edge-triggered.patch xen-use-percpu-interrupts-for-ipis-and-virqs.patch sctp-do-not-reset-the-packet-during-sctp_packet_config.patch r8169-fix-dma-allocations.patch skge-quirk-to-4gb-dma.patch depessimize-rds_copy_page_user.patch via-ioctl-prevent-reading-uninit-memory.patch v4l1-fix-32-bit-compat-microcode-loading-translation.patch kvm-fix-fs-gs-reload-oops-with-invalid-ldt.patch alsa-prevent-heap-corruption-in-snd_ctl_new.patch gdth-integer-overflow-in-ioctl.patch - Drop from drm-next patch: d831692 sis-agp: Remove SIS 760, handled by amd64-agp - Drop hunk of quiet-prove_RCU-in-cgroups.patch, now upstream. * Sun Jan 30 2011 Chuck Ebbert <cebbert@redhat.com> - Copy sunrpc oops fix from F14 * Wed Jan 26 2011 Chuck Ebbert <cebbert@redhat.com> - TCP networking fixes from 2.6.36.3, including one CVE CVE-2010-4165: possible kernel oops from user MSS - CVE-2011-0521: av7110 negative array offset * Sat Jan 22 2011 Chuck Ebbert <cebbert@redhat.com> - Security updates CVE-2010-4346: install_special_mapping skips security_file_mmap check CVE-2010-4649: IB/uverbs: Handle large number of entries in poll CQ CVE-2011-0006: ima: fix add LSM rule bug CVE-2010-4648: orinoco: fix TKIP countermeasure behaviour CVE-2010-4650: fuse: verify ioctl retries * Tue Jan 18 2011 Kyle McMartin <kmcmartin@redhat.com> - sgruszka: hostap_cs: fix sleeping function called in invalid context (#643758) * Mon Jan 10 2011 Chuck Ebbert <cebbert@redhat.com> - CVE-2010-4163 CVE-2010-4668: panic when submitting 0-length I/O requests * Sat Dec 18 2010 Kyle McMartin <kyle@redhat.com> - Fix SELinux issues with NFS/btrfs and/or xfsdump. (#662344) * Fri Dec 17 2010 Neil Horman <nhorman@redhat.com> - Enhance AF_PACKET to allow non-contiguous buffer alloc (bz 637619) * Tue Dec 14 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.7-66 - CVE-2010-4157: gdth: integer overflow in ioc_general() - CVE-2010-4158: socket filters infoleak - CVE-2010-3874: CAN sockets minor heap overflow * Tue Dec 14 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.7-65 - CVE-2010-4162: bio: integer overflow page count when mapping/copying user data - CVE-2010-4249: unix socket local dos * Fri Dec 10 2010 Chuck Ebbert <cebbert@redhat.com> - CVE-2010-2962: arbitrary kernel memory write via i915 GEM ioctl - CVE-2010-2963: v4l: VIDIOCSMICROCODE arbitrary write - CVE-2010-3698: kvm: invalid selector in fs/gs causes kernel panic - CVE-2010-3705: sctp: Fix out-of-bounds reading in sctp_asoc_get_hmac() - CVE-2010-3442: ALSA: prevent heap corruption in snd_ctl_new() - CVE-2010-4258: failure to revert address limit override in OOPS error path - CVE-2010-4169: perf_events: denial-of-service bug * Thu Dec 9 2010 Kyle McMartin <kyle@redhat.com> - ioat2-catch-and-recover-from-broken-vtd-configurations.patch: copy patch from 2.6.35.y (#605845) [556ab45f] * Thu Dec 9 2010 Kyle McMartin <kyle@redhat.com> - Copy tpm-fix-stall-on-boot.patch from rawhide tree. (#530393) * Thu Dec 9 2010 Kyle McMartin <kyle@redhat.com> 2.6.34.7-64 - Copy fix for (#632310) from F-14: drm/radeon/kms: MC vram map needs to be >= pci aperture size * Fri Dec 3 2010 Kyle McMartin <kyle@redhat.com> 2.6.34.7-63 - Enable hpilo.ko on x86_64. (#571329) * Mon Nov 29 2010 Kyle McMartin <kyle@redhat.com> - Make ima an opt-in parameter like we did in F-14. Pass ima=on if you want it enabled. * Mon Nov 29 2010 Kyle McMartin <kyle@redhat.com> - Backport XFS fixes for the kernel.org xfs boog. [4d4e307a] Needed two other backports to simplify life. * Fri Nov 26 2010 Kyle McMartin <kyle@redhat.com> - Quiet a netlink build warning the INET_DIAG fix caused. * Fri Nov 26 2010 Kyle McMartin <kyle@redhat.com> - Plug stack leaks in tty/serial drivers. (#648663, #648660) * Fri Nov 26 2010 Kyle McMartin <kyle@redhat.com> - r8169 fixes from sgruszka@redhat.com (#502974) * Wed Nov 24 2010 John W. Linville <linville@redhat.com> - rtl8180: improve signal reporting for rtl8185 hardware - rtl8180: improve signal reporting for actual rtl8180 hardware * Tue Nov 23 2010 Kyle McMartin <kyle@redhat.com> - zero struct memory in ipc compat (CVE-2010-4073) (#648658) - zero struct memory in ipc shm (CVE-2010-4072) (#648656) - fix logic error in INET_DIAG bytecode auditing (CVE-2010-3880) (#651264) - posix-cpu-timers: workaround to suppress the problems with mt exec (rhbz#656264) - clear memory in viafb ioctl (CVE-2010-4082) (#648671) * Fri Oct 22 2010 Kyle McMartin <kyle@redhat.cmo> 2.6.34.7-62 - tpm-autodetect-itpm-devices.patch: Auto-fix TPM issues on various laptops which prevented suspend/resume. - depessimize-rds_copy_page_user.patch: Fix CVE-2010-3904, local privilege escalation via RDS protocol. - rt2x00: Backport fixes for #642031 from Stanislaw Gruszka. * Mon Oct 18 2010 Kyle McMartin <kyle@redhat.com> 2.6.34.7-61 - Add Ricoh e822 support. (rhbz#596475) Thanks to sgruszka@ for sending the patches in. * Mon Oct 18 2010 Kyle McMartin <kyle@redhat.com> 2.6.34.7-60 - Quirk to disable DMAR with Ricoh card reader/firewire. (rhbz#605888) * Mon Oct 18 2010 Kyle McMartin <kyle@redhat.com> - Two networking fixes (skge, r8169) from sgruska. (rhbz#447489,629158) * Thu Oct 14 2010 Neil Horman <nhorman@redhat.com> - Fix rcu warning in twsock_net (bz 642905) * Wed Oct 6 2010 Neil Horman <nhorman@redhat.com> - Fix WARN_ON when you try to create an exiting bond in bond_masters * Thu Sep 30 2010 Chuck Ebbert <cebbert@redhat.com> - CVE-2010-3432: sctp-do-not-reset-the-packet-during-sctp_packet_config.patch * Thu Sep 30 2010 Ben Skeggs <bskeggs@redhat.com> 2.6.34.7-59 - nouveau: fix theoretical race condition that could be responsible for certain random hangs that have been reported. * Mon Sep 27 2010 Ben Skeggs <bskeggs@redhat.com> 2.6.34.7-58 - nouveau: better handling of certain GPU errors * Fri Sep 24 2010 Chuck Ebbert <cebbert@redhat.com> - Fix typo in previous Xen fix that causes boot failure. * Wed Sep 22 2010 Chuck Ebbert <cebbert@redhat.com> - Copy two Xen fixes from 2.6.35-stable for RHBZ#636534 * Tue Sep 21 2010 Chuck Ebbert <cebbert@redhat.com> - Fix RHBZ #633037, Process user time incorrectly accounted as system time * Mon Sep 20 2010 Chuck Ebbert <cebbert@redhat.com> - Fix AGP aperture size detection on Intel G33/Q35 chipsets (#629203) * Tue Sep 14 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.7-56 - Fix CVE-2010-3079: ftrace NULL pointer dereference * Tue Sep 14 2010 Chuck Ebbert <cebbert@redhat.com> - Fix CVE-2010-3080: /dev/sequencer open failure is not handled correctly * Tue Sep 14 2010 Chuck Ebbert <cebbert@redhat.com> - Fix bug added in 2.6.34.6-53 * Tue Sep 14 2010 Chuck Ebbert <cebbert@redhat.com> - Mitigate DOS with large argument lists. * Tue Sep 14 2010 Kyle McMartin <kyle@redhat.com> - x86_64: plug compat syscalls holes. (CVE-2010-3081, CVE-2010-3301) upgrading is highly recommended. - aio: check for multiplication overflow in do_io_submit. (CVE-2010-3067) * Tue Sep 14 2010 Chuck Ebbert <cebbert@redhat.com> - Linux 2.6.34.7, should fix multiple USB HID device issues. * Mon Sep 13 2010 Ben Skeggs <bskeggs@redhat.com> 2.6.34.6-55 - nouveau: fix oops in acpi edid support (rhbz#613284) * Thu Sep 9 2010 Kyle McMartin <kyle@redhat.com> - Backport 6f772d7e to hopefully fix #629442, (drm/i915: Explosion following OOM in do_execbuffer.) * Wed Sep 8 2010 Kyle McMartin <kyle@redhat.com> - Enable GPIO_SYSFS. (#631958) * Sun Sep 5 2010 Jarod Wilson <jarod@redhat.com> 2.6.34.6-54 - Restore lirc patch from 2.6.33.x F13 kernels, re-fixes multiple issues * Sat Sep 4 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.6-53 - Disable asynchronous suspend, a new feature in 2.6.34 - Fix unsafe access to MSI registers during suspend (pci-msi-remove-unsafe-and-unnecessary-hardware-access.patch, pci-msi-restore-read_msi_msg_desc-add-get_cached_msi_msg_desc.patch) - x86-tsc-sched-recompute-cyc2ns_offset-s-during-resume-from-sleep-states.patch Fix load balancing after suspend/resume cycle (taken from 2.6.32 stable queue) * Fri Sep 3 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.6-52 - acpi-ec-pm-fix-race-between-ec-transactions-and-system-suspend.patch: another possible fix for suspend/resume problems. - From 2.6.35.4: nfs-fix-an-oops-in-the-nfsv4-atomic-open-code.patch - Add fix for CVE-2010-2960: keyctl_session_to_parent NULL deref system crash * Fri Sep 3 2010 Kyle McMartin <kmcmartin@redhat.com> - default to pci=nocrs - flexcop: fix registering braindead stupid names (#575873) * Fri Sep 3 2010 Kyle McMartin <kmcmartin@redhat.com> 2.6.34.6-51 - lirc_imon: move alloc before use (rhbz#629980) * Fri Sep 3 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.6-50 - Re-enable I2O, but only for 32-bit x86 (#629676) - Add support for eject key on Dell laptops (#513530) - irda-correctly-clean-up-self-ias_obj-on-irda_bind-failure.patch (CVE-2010-2954) - wireless-extensions-fix-kernel-heap-content-leak.patch (CVE-2010-2955) * Thu Sep 2 2010 Dave Airlie <airlied@redhat.com> 2.6.34.6-49 - fix radeon suspend/resume issues and two other minor patches * Wed Sep 1 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.6-48 - Revert commit 6a1a82df91fa0eb1cc76069a9efe5714d087eccd from 2.6.34.1; it breaks ftdi_sio (#613597) * Fri Aug 27 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.6-47 - Linux 2.6.34.6 - drivers-hwmon-coretemp-c-detect-the-thermal-sensors-by-cpuid.patch (#625734) - kprobes-x86-fix-kprobes-to-skip-prefixes-correctly.patch (#610941) * Wed Aug 25 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.6-46.rc1 - Linux 2.6.34.6-rc1 - Drop merged patches: matroxfb-fix-font-corruption.patch * Tue Aug 24 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.5-45 - Revert commit 3d61510f4ecacfe47c75c0eb51c0659dfa77fb1b from 2.6.34.2; it causes dropped keystrokes (#625758) * Mon Aug 23 2010 Ben Skeggs <bskeggs@redhat.com> 2.6.34.5-44 - nouveau: fix eDP panels that flip HPD during link training (rhbz#596562) * Sat Aug 21 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.5-43 - Linux 2.6.34.5 - Drop merged patches: mm-fix-page-table-unmap-for-stack-guard-page-properly.patch mm-fix-up-some-user-visible-effects-of-the-stack-guard-page.patch * Wed Aug 18 2010 Chuck Ebbert <cebbert@redhat.com> - Restore linux-2.6-umh-refactor.patch, still needed in 2.6.34 (#625150) - Drop coredump-uid-pipe-check.patch, now upstream. * Wed Aug 18 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.4-42 - Revert "ata-piix: Detect spurious IRQs and clear them", should be fixed by commit 27943620c upstream. * Wed Aug 18 2010 Jarod Wilson <jarod@redhat.com> - make f13 lirc userspace happy with ioctl defs again (#623770) * Wed Aug 18 2010 Dave Jones <davej@redhat.com> - ata-piix: Detect spurious IRQs and clear them. * Tue Aug 17 2010 Kyle McMartin <kyle@redhat.com> - Touch .scmversion in the kernel top level to prevent scripts/setlocalversion from recursing into our fedpkg git tree and trying to decide whether the kernel git is modified (obviously not, since it's a tarball.) Fixes make local. * Tue Aug 17 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.4-41 - Fix fallout from the stack guard page fixes. (mm-fix-page-table-unmap-for-stack-guard-page-properly.patch, mm-fix-up-some-user-visible-effects-of-the-stack-guard-page.patch) * Tue Aug 17 2010 Ben Skeggs <bskeggs@redhat.com> 2.6.34.4-40 - drm-nouveau-nv50-crtc-update-delay.patch (rhbz#614452) * Sun Aug 15 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.4-39 - Linux 2.6.34.4 * Fri Aug 13 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.4-38.rc1 - Linux 2.6.34.4-rc1 - Fix up drm-next patch to apply on top of 2.6.34.4 * Tue Aug 10 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.3-37 - Linux 2.6.34.3 - Disable AES-NI encryption until bugs can be sorted out (#622435) * Tue Aug 10 2010 Ben Skeggs <bskeggs@redhat.com> 2.6.34.3-36.rc1 - nouveau: disable accel on nva3/nva5/nva8 until it's fixed upstream - rhbz#596330 * Sat Aug 7 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.3-35.rc1 - Linux 2.6.34.3-rc1 * Fri Aug 6 2010 Ben Skeggs <bskeggs@redhat.com> 2.6.34.2-34 - nouveau: fix inter-engine race when under memory pressure (rhbz#602956) - Disable CONFIG_MULTICORE_RAID456 * Tue Aug 3 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.2-33 - Linux 2.6.34.2 - Drop commented-out patches. - Drop ancient linux-2.6-mac80211-age-scan-results-on-resume.patch - Fix matroxfb font corruption (#617687) - Don't resurrect dead task credentials (#591015) - Fix "ext4 and xfs wrong data returned on read after write if file size was changed with ftruncate" (#617699) * Sun Aug 1 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.2-32.rc1 - Linux 2.6.34.2-rc1 - Comment out upstream merged patches: pci-pm-do-not-use-native-pcie-pme-by-default.patch linux-2.6-acpi-sleep-live-sci-live.patch (slightly different upstream patch) drm-i915-make-G4X-style-PLL-search-more-permissive.patch drm-intel-945gm-stability-fixes.patch drm-radeon-fix-shared-ddc-handling.patch drm-i915-add-reclaimable-to-page-allocations.patch drm-i915-fix-hibernate-memory-corruption.patch iwlwifi-Recover-TX-flow-stall-due-to-stuck-queue.patch iwlwifi-recover_from_tx_stall.patch mac80211-do-not-wipe-out-old-supported-rates.patch mac80211-fix-supported-rates-IE-if-AP-doesnt-give-us-its-rates.patch iwlwifi-cancel-scan-watchdog-in-iwl_bg_abort_scan.patch ata-generic-handle-new-mbp-with-mcp89.patch ata-generic-implement-ata-gen-flags.patch x86-debug-send-sigtrap-for-user-icebp.patch ethtool-fix-buffer-overflow.patch sched-fix-over-scheduling-bug.patch kbuild-fix-modpost-segfault.patch acpica-00-linux-2.6.git-0f849d2cc6863c7874889ea60a871fb71399dd3f.patch acpica-01-linux-2.6.git-a997ab332832519c2e292db13f509e4360495a5a.patch acpica-02-linux-2.6.git-e4e9a735991c80fb0fc1bd4a13a93681c3c17ce0.patch acpica-03-linux-2.6.git-fd247447c1d94a79d5cfc647430784306b3a8323.patch acpica-04-linux-2.6.git-c9a8bbb7704cbf515c0fc68970abbe4e91d68521.patch acpica-05-linux-2.6.git-ce43ace02320a3fb9614ddb27edc3a8700d68b26.patch acpica-06-linux-2.6.git-9d3c752de65dbfa6e522f1d666deb0ac152ef367.patch acpi-pm-do-not-enable-gpes-for-system-wakeup-in-advance.patch cifs-fix-malicious-redirect-problem-in-the-dns-lookup-code.patch usb-obey-the-sysfs-power-wakeup-setting.patch - Fix up virtqueue-wrappers.patch to apply after 2.6.34.2 due to: virtio_net-fix-oom-handling-on-tx.patch - Revert -stable DRM patches already in our drm-next patch: amd64-agp-probe-unknown-agp-devices-the-right-way.patch i915-fix-lock-imbalance-on-error-path.patch drm-i915-hold-the-spinlock-whilst-resetting-unpin_work-along-error-path.patch - Fix up drm-next.patch to apply after 2.6.34.2 due to: drm-i915-gen3-page-flipping-fixes.patch drm-i915-don-t-queue-flips-during-a-flip-pending-event.patch - Drop patches now upstream from linux-2.6-v4l-dvb-uvcvideo-update.patch: V4L/DVB: uvcvideo: Add support for unbranded Arkmicro 18ec:3290 webcams V4L/DVB: uvcvideo: Add support for V4L2_PIX_FMT_Y16 - Temporarily comment out ssb_check_for_sprom.patch due to ugly conflicts with: ssb-handle-netbook-devices-where-the-sprom-address-is-changed.patch * Sun Aug 1 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.1-31 - Backport initial dist-git fixes from master (377da6d08) - Modify the prep stage so multiple trees can be prepped in a single shared git directory. * Mon Jul 26 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.1-30 - usb-obey-the-sysfs-power-wakeup-setting.patch: Restore ability of USB devices to wake the machine (#617559) * Thu Jul 22 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.1-29 - cifs-fix-malicious-redirect-problem-in-the-dns-lookup-code.patch: Fix a malicious redirect problem in the DNS lookup code (CVE-2010-2524) * Thu Jul 22 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.1-28 - input-synaptics-relax-capability-id-checks-on-new-hardware.patch: Make mouse driver recognize newer synaptics hardware as touchpad. * Thu Jul 22 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.1-27 - ACPI GPE enable/disable patches: fix system powering back on after shutdown (#613239) (and possibly #615858) * Thu Jul 22 2010 Jerome Glisse <jglisse@redhat.com> 2.6.34.1-26 - radeon fix shared ddc handling (#593429) * Thu Jul 22 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.1-25 - kvm-mmu-fix-conflict-access-permissions-in-direct-sp.patch: Fix crash in guest Python programs (#610911) * Wed Jul 21 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.1-24 - Drop crypto-aesni-kill-module_alias.patch; bug #571577 should not be present in 2.6.34. * Wed Jul 21 2010 Dave Airlie <airlied@redhat.com> 2.6.34.1-23 - drm-intel-945gm-stability-fixes.patch: fix 945GM stability issues * Wed Jul 21 2010 Dave Airlie <airlied@redhat.com> 2.6.34.1-22 - double drop: its a revert on top of a revert. * Tue Jul 20 2010 Dave Airlie <airlied@redhat.com> 2.6.34.1-21 - drop drm revert, that can't possible cause the bug, but is causing another one. * Mon Jul 19 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.1-20 - pci-fall-back-to-original-bios-bar-addresses.patch: Fix 2.6.34 problems with assigning PCI addresses (KORG#16263) * Mon Jul 19 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.1-19 - drm-i915-add-reclaimable-to-page-allocations.patch: Additional fix for hibernation memory corruption bugs. * Sun Jul 18 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.1-18 - drm-i915-make-G4X-style-PLL-search-more-permissive.patch (#572799) * Sun Jul 18 2010 Hans de Goede <hdegoede@redhat.com> 2.6.34.1-17 - Fix inotify-fix-inotify-oneshot-support.patch so that it compiles - Various small updates / fixes to the uvcvideo driver: - Support dynamic menu controls (#576023) - Fix the apple iSight camera not working (#600998) * Fri Jul 16 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.1-16 - inotify-fix-inotify-oneshot-support.patch, inotify-send-IN_UNMOUNT-events.patch: Fix broken oneshot support and missing umount events. (#607327) * Fri Jul 16 2010 Ben Skeggs <bskeggs@redhat.com> 2.6.34.1-15 - nouveau: fix lvds regression (#601002) - nouveau: bring back acpi edid support, with fixes (#613284) - nouveau: remove dcb1.5 quirk that breaks things (#595645) * Wed Jul 14 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.1-14 - Truncate the obsolete git bluetooth and firewire patches, use ApplyOptionalPatch for bluetooth, cpufreq and firewire patches. * Wed Jul 14 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.1-12 - pci-pm-do-not-use-native-pcie-pme-by-default.patch: fix PCIe hotplug interrupts firing continuously. (#613412) - Update pci-acpi-disable-aspm-if-no-osc.patch so it works with the above patch. - Drop linux-2.6-defaults-pciehp.patch: pciehp_passive mode does not exist anymore. * Tue Jul 13 2010 Ben Skeggs <bskeggs@redhat.com> 2.6.34.1-11 - nouveau: bring back patches lost from 2.6.34 update + add some more to fix at least rhbz#532711 and rhbz#593046 - remove patches relating to nouveau that are now unused * Mon Jul 12 2010 Dave Jones <davej@redhat.com> - Remove a bunch of x86 options from config files that get set automatically, and can't be overridden. * Fri Jul 9 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.1-9 - crypto-aesni-kill-module_alias.patch: kill MODULE_ALIAS to prevent aesni-intel from autoloading. * Fri Jul 9 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.1-8 - iwlwifi: cancel scan watchdog in iwl_bg_abort_scan (#590436) * Fri Jul 9 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.1-7 - Restore PowerPC VIO modalias patch; use the upstream version. - Drop Mac G5 thermal shutdown patch, now upstream. * Fri Jul 9 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.1-6 - Fix modpost segfault when building kernels. (#595915) * Fri Jul 9 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.1-5 - pci-change-error-messages-to-kern-info.patch: Use new upstream patch to silence more useless messages. * Fri Jul 9 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.1-4 - sched-fix-over-scheduling-bug.patch: fix scheduler bug with CGROUPS * Fri Jul 9 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.1-3 - ethtool-fix-buffer-overflow.patch (CVE-2010-2478) * Fri Jul 9 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.1-2 - Copy fix for BZ#609548 from F-13 2.6.33 kernel. * Fri Jul 9 2010 Chuck Ebbert <cebbert@redhat.com> 2.6.34.1-1 - Initial commit of 2.6.34 for F-13 - Previous history is in the branch private-f14-2_6_34 * Wed Jul 7 2010 Chuck Ebbert <cebbert@redhat.com> - pci-acpi-disable-aspm-if-no-osc.patch, pci-aspm-dont-enable-too-early.patch PCI layer fixes for problems with hardware that doesn't support ASPM. * Wed Jul 7 2010 Chuck Ebbert <cebbert@redhat.com> - attempt to fix hibernate on Intel GPUs (kernel.org #13811) (RHBZ#537494) * Wed Jul 7 2010 Chuck Ebbert <cebbert@redhat.com> - Let ata_generic handle SATA interface on new MacBook Pro (#608034) * Tue Jul 6 2010 Chuck Ebbert <cebbert@redhat.com> - Re-enable options: DYNAMIC_FTRACE, FUNCTION_TRACER and STACK_TRACER * Tue Jul 6 2010 Chuck Ebbert <cebbert@redhat.com> - Linux 2.6.34.1 * Thu Jul 1 2010 Chuck Ebbert <cebbert@redhat.com> - Linux 2.6.34.1-rc1 - Drop patches merged upstream: btrfs-should-add-permission-check-for-setfacl.patch (CVE-2010-2071) iwlwifi-recalculate-average-tpt-if-not-current.patch iwlwifi-fix-internal-scan-race.patch - Revert DRM patches we already have: drm-i915-rebind-bo-if-currently-bound-with-incorrect-alignment.patch drm-radeon-fix-the-r100-r200-ums-block-0-page-fix.patch drm-radeon-r100-r200-ums-block-ability-for-userspace-app-to-trash-0-page-and-beyond.patch drm-radeon-kms-atom-fix-typo-in-lvds-panel-info-parsing.patch drm-radeon-kms-reset-ddc_bus-in-object-header-parsing.patch drm-edid-fix-1024x768-85hz.patch drm-i915-reject-bind_to_gtt-early-if-object-aperture.patch drm-i915-fix-82854-pci-id-and-treat-it-like-other-85x.patch - Revert broken -stable patch: perf-fix-endianness-argument-compatibility-with-opt_boolean-and-introduce-opt_incr.patch * Wed Jun 30 2010 Kyle McMartin <kyle@redhat.com> - Disable MRST on x86 here as well. * Tue Jun 29 2010 Kyle McMartin <kyle@redhat.com> - i915-fix-crt-hotplug-regression.patch: copy from rawhide. * Mon Jun 28 2010 Chuck Ebbert <cebbert@redhat.com> - ppc64: enable active memory sharing and DLPAR memory remove (#607175) * Mon Jun 28 2010 Chuck Ebbert <cebbert@redhat.com> - Copy fix for BZ#220892 from F-13. * Fri Jun 25 2010 Kyle McMartin <kyle@redhat.com> - drm-i915-fix-edp-panels.patch: copy from rawhide. * Mon Jun 21 2010 Dave Jones <davej@redhat.com> - Disable workaround for obscure SMP pentium pro errata. I miss the 1990s too, but it's time to move on. If anyone actually needs this it would be better done using the apply_alternatives infrastructure. * Mon Jun 21 2010 Kyle McMartin <kyle@redhat.com> - drm-revert-drm-fbdev-rework-output-polling-to-be-back-in-core.patch Revert eb1f8e4f, bisected by Nicolas Kaiser. Thanks! (rhbz#599190) (If this works, will try to root-cause.) - rebase previous patch on top of above reversion * Mon Jun 21 2010 Kyle McMartin <kyle@redhat.com> - revert-drm-kms-toggle-poll-around-switcheroo.patch (rhbz#599190) * Thu Jun 17 2010 Kyle McMartin <kyle@redhat.com> - Suck in patch from Dave Miller in 2.6.35 to add async hash testing, hopefully fixes error from previous commit. (But making it modular is still a good idea.) * Thu Jun 17 2010 Kyle McMartin <kyle@redhat.com> - make ghash-clmulni modular to get rid of early boot noise (rhbz#586954) (not a /fix/ but it should at least quiet boot down a bit if you have the cpu support) * Wed Jun 16 2010 Kyle McMartin <kyle@redhat.com> - Snag some more DRM commits into drm-next.patch that I missed the first time. - Fix up radeon_pm toggle to work with the upstream code. * Tue Jun 15 2010 Prarit Bhargava <prarit@redhat.com> - Turn off CONFIG_I2O on x86. It is broken on 64-bit address spaces (i686/PAE, x86_64), and frankly, I'm having trouble finding anyone who actually uses it. * Tue Jun 15 2010 Kyle McMartin <kyle@redhat.com> - Fix build by nuking superfluous "%{expand" which was missing a trailing '}'. You may now reward me with an array of alcoholic beverages, I so richly deserve for spending roughly a full day staring at the diff of the spec. * Mon Jun 14 2010 Kyle McMartin <kyle@redhat.com> - btrfs ACL fixes from CVE-2010-2071. * Sun Jun 13 2010 Kyle McMartin <kyle@redhat.com> - remunge and reapply hdpvr-ir-enable * Sun Jun 13 2010 Kyle McMartin <kyle@redhat.com> - mac80211/iwlwifi fix connections to some APs (rhbz#558002) patches from sgruszka@. * Sun Jun 13 2010 Kyle McMartin <kyle@redhat.com> - Provide a knob to enable radeon_pm to allow users to test that functionality. Add radeon.pm=1 to your kernel cmdline in order to enable it. (It still defaults to off though.) * Sun Jun 13 2010 Kyle McMartin <kyle@redhat.com> - Update drm-next to include fixes since 2.6.35-rc1. * Fri Jun 11 2010 Justin M. Forbes <jforbes@redhat.com> - Disable xsave for so that kernel will boot on ancient EC2 hosts. * Wed Jun 9 2010 John W. Linville <linville@redhat.com> - Disable rt20xx and rt35xx chipset support in rt2800 drivers (#570869) * Wed Jun 9 2010 David Woodhouse <David.Woodhouse@intel.com> - Include PHY modules in modules.networking (#602155) ------------------------------------------------------------------------------- - References:
[ 1 ] Bug #690028 - CVE-2011-1182 kernel signal spoofing issue https://bugzilla.redhat.com/show_bug.cgi?id=690028 [ 2 ] Bug #694021 - CVE-2011-1494 CVE-2011-1495 kernel: drivers/scsi/mpt2sas: prevent heap overflows https://bugzilla.redhat.com/show_bug.cgi?id=694021 [ 3 ] Bug #681260 - CVE-2011-1079 kernel: bnep device field missing NULL terminator https://bugzilla.redhat.com/show_bug.cgi?id=681260 [ 4 ] Bug #682954 - CVE-2011-1093 kernel: dccp: fix oops on Reset after close https://bugzilla.redhat.com/show_bug.cgi?id=682954 [ 5 ] Bug #698996 - CVE-2011-1745 CVE-2011-2022 kernel: agp: insufficient pg_start parameter checking in AGPIOC_BIND and AGPIOC_UNBIND ioctls https://bugzilla.redhat.com/show_bug.cgi?id=698996 [ 6 ] Bug #698998 - CVE-2011-1746 kernel: agp: insufficient page_count parameter checking in agp_allocate_memory() https://bugzilla.redhat.com/show_bug.cgi?id=698998 [ 7 ] Bug #632069 - CVE-2010-3084 kernel: niu: buffer overflow for ETHTOOL_GRXCLSRLALL https://bugzilla.redhat.com/show_bug.cgi?id=632069 [ 8 ] Bug #679925 - CVE-2011-1013 kernel: drm_modeset_ctl signedness issue https://bugzilla.redhat.com/show_bug.cgi?id=679925 [ 9 ] Bug #667615 - CVE-2010-4527 kernel: buffer overflow in OSS load_mixer_volumes https://bugzilla.redhat.com/show_bug.cgi?id=667615 [ 10 ] Bug #631623 - CVE-2010-3079 kernel: ftrace NULL ptr deref https://bugzilla.redhat.com/show_bug.cgi?id=631623 ------------------------------------------------------------------------------- -
This update can be installed with the "yum" update program. Use su -c 'yum update kernel' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys ------------------------------------------------------------------------------- - _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-announce
|