[SECURITY] Fedora 14 Update: kernel-2.6.35.11-83.fc14

updates at fedoraproject.org updates at fedoraproject.org
Thu Feb 10 21:27:10 UTC 2011


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-1138
2011-02-07 19:23:52
--------------------------------------------------------------------------------

Name        : kernel
Product     : Fedora 14
Version     : 2.6.35.11
Release     : 83.fc14
URL         : http://www.kernel.org/
Summary     : The Linux kernel
Description :
The kernel package contains the Linux kernel (vmlinuz), the core of any
Linux operating system.  The kernel handles the basic functions
of the operating system: memory allocation, process allocation, device
input and output, etc.

--------------------------------------------------------------------------------
Update Information:

Update to kernel 2.6.35.11:  
http://www.kernel.org/pub/linux/kernel/v2.6/longterm/v2.6.35/ChangeLog-2.6.35.11
--------------------------------------------------------------------------------
ChangeLog:

* Sun Feb  6 2011 Chuck Ebbert <cebbert at redhat.com>  2.6.35.11-83
- Linux 2.6.35.11
* Tue Feb  1 2011 Chuck Ebbert <cebbert at redhat.com>  2.6.35.11-82.rc1
- Linux 2.6.35.11-rc1
- Revert patches we already have in the big v4l update:
    gspca-sonixj-add-a-flag-in-the-driver_info-table.patch
    gspca-sonixj-set-the-flag-for-some-devices.patch
- Comment out patches merged upstream:
    sched-cure-more-NO_HZ-load-average-woes.patch
    posix-cpu-timers-workaround-to-suppress-problems-with-mt-exec.patch
    mac80211-fix-hard-lockup-in-sta_addba_resp_timer_expired.patch
* Sun Jan 30 2011 Chuck Ebbert <cebbert at redhat.com>
- Fix oops in sunrpc code (#673207)
* Tue Jan 25 2011 Jarod Wilson <jarod at redhat.com> 2.6.35.10-81
- Further improvements to ir-kbd-i2c when used with zilog chips
- Finally hopefully fix annoying mceusb keybounce issue
* Wed Jan 19 2011 Jarod Wilson <jarod at redhat.com> 2.6.35.10-80
- Make lirc_zilog behave correctly with hdpvr again, and for the first
  time ever, with pvrusb2-driven HVR-1950 (#635045)
- Call dib0700 rc bug whacked (#667157)
- Call saa7134-based i2c IR registration bug whacked (#665870)
* Tue Jan 18 2011 Jarod Wilson <jarod at redhat.com> 2.6.35.10-79
- Generally, its a good idea to actually apply the patches you were
  intending to include in the build, and enable their Kconfig options
* Tue Jan 18 2011 Kyle McMartin <kmcmartin at redhat.com>
- sgruszka: hostap_cs: fix sleeping function called in invalid
  context (#643758)
* Tue Jan 18 2011 Jarod Wilson <jarod at redhat.com> 2.6.35.10-78
- Rebase v4l/dvb/rc bits to 2.6.38-rc1 code
- Fix lirc_serial transmit (#658600)
* Sun Jan 16 2011 Chuck Ebbert <cebbert at redhat.com>
- Fix wrong file allocation size in btrfs (#669511)
* Mon Jan 10 2011 Jarod Wilson <jarod at redhat.com> 2.6.35.10-77
- Add support for local rebuild config option overrides
- Add missing --with/--without pae build flag support
- Restore imon mce default proto modparam, since ir-keytable currently
  won't work with the 2.6.35.x input layer ioctls
- mac80211 fix for hard lockup in sta_addba_resp_timer_expired (sgruszka, #667459)
* Mon Jan 10 2011 Chuck Ebbert <cebbert at redhat.com>
- CVE-2010-4668: kernel panic with 0-length IOV
* Thu Jan  6 2011 Chuck Ebbert <cebbert at redhat.com>
- Fix failure to get link with e1000e model 82576DC (#652744)
* Wed Jan  5 2011 Jarod Wilson <jarod at redhat.com> 2.6.35.10-76
- Restore functional audio on PVR-150 video capture cards (#666456)
- Fix another mceusb regression cropping up mostly with rc5 signals (#662071)
- Add back some ir-lirc-codec debug spew
* Thu Dec 30 2010 Jarod Wilson <jarod at redhat.com> 2.6.35.10-75
- Fix imon 0xffdc device detection and oops on probe
* Thu Dec 23 2010 Matthew Garrett <mjg at redhat.com> 2.6.35.10-74
- Backport the ACPI battery notification patch (#656738)
* Wed Dec 22 2010 Kyle McMartin <kyle at redhat.com> 2.6.35.10-73
- Fix ene_ir bugs (jumping off a null dev->rdev pointer) (#664145)
* Mon Dec 20 2010 Kyle McMartin <kyle at redhat.com> 2.6.35.10-72
- Backport some of the radeon r600_cs.c fixes between .35 and master. (#664206)
* Mon Dec 20 2010 Jarod Wilson <jarod at redhat.com> 2.6.35.10-71
- Restore v4l/dvb/rc rebase, now with prospective fixes for the bttv and
  ene_ir issues that showed up in -67 and -68
* Sun Dec 19 2010 Kyle McMartin <kyle at redhat.com> 2.6.35.10-70
- Revert Jarod's v4l-dvb-ir rebase, due to several issues reported against
  the 2.6.35.10-68 update.
  https://admin.fedoraproject.org/updates/kernel-2.6.35.10-68.fc14
* Sat Dec 18 2010 Kyle McMartin <kyle at redhat.com>
- Patch from nhorman against f13:
  Enhance AF_PACKET to allow non-contiguous buffer alloc (#637619)
* Sat Dec 18 2010 Kyle McMartin <kyle at redhat.com>
- Fix SELinux issues with NFS/btrfs and/or xfsdump. (#662344)
* Thu Dec 16 2010 Jarod Wilson <jarod at redhat.com> 2.6.35.10-68
- Additional mceusb updates just sent upstream, hopefully to fix
  keybounce/excessive buffering issues
* Wed Dec 15 2010 Jarod Wilson <jarod at redhat.com> 2.6.35.10-67
- Rebase v4l/dvb/rc code to latest upstream, should fix a fair
  number of ir/rc-related issues, including bugzilla #662071
* Wed Dec 15 2010 Chuck Ebbert <cebbert at redhat.com>
- Linux 2.6.35.10
- Remove merged patches and fix up conflicts:
   drm-polling-fixes.patch
   linux-2.6-v4l-dvb-hdpvr-updates.patch
   kvm-fix-fs-gs-reload-oops-with-invalid-ldt.patch
- Drop merged patches:
   linux-2.6-rcu-sched-warning.patch
   pnpacpi-cope-with-invalid-device-ids.patch
   ipc-zero-struct-memory-for-compat-fns.patch
   ipc-shm-fix-information-leak-to-user.patch
   r8169-01-fix-rx-checksum-offload.patch
   r8169-02-_re_init-phy-on-resume.patch
   r8169-03-fix-broken-checksum-for-invalid-sctp_igmp-packets.patch
   hda_realtek-handle-unset-external-amp-bits.patch
* Fri Dec 10 2010 Kyle McMartin <kyle at redhat.com>
- pci-disable-aspm-if-bios-asks-us-to.patch: Patch from mjg59 to disable
  ASPM if the BIOS has disabled it, but enabled it already on some devices.
* Fri Dec 10 2010 Kyle McMartin <kyle at redhat.com>
- Fix some issues mounting btrfs devices with subvolumes (#656465)
* Fri Dec 10 2010 Kyle McMartin <kyle at redhat.com>
- Fix jbd2 warnings when using quotas. (#578674)
* Thu Dec  9 2010 Kyle McMartin <kyle at redhat.com>
- Snarf patch from wireless-next to fix mdomsch's orinico wifi.
  (orinoco: initialise priv->hw before assigning the interrupt)
  [229bd792]
* Thu Dec  9 2010 Kyle McMartin <kyle at redhat.com>
- Copy tpm-fix-stall-on-boot.patch from rawhide tree. (#530393)
* Thu Dec  9 2010 Chuck Ebbert <cebbert at redhat.com>  2.6.35.9-65
- Require newt-devel for building perf, to enable the perf TUI (#661180)
* Wed Dec  8 2010 Kyle McMartin <kyle at redhat.com>
- sched-cure-more-NO_HZ-load-average-woes.patch: fix some of the complaints
  in 2.6.35+ about load average with dynticks. (rhbz#650934)
* Sat Dec  4 2010 Kyle McMartin <kyle at redhat.com>
- Enable C++ symbol demangling with perf by linking against libiberty.a,
  which is LGPL2.
* Fri Dec  3 2010 Kyle McMartin <kyle at redhat.com> 2.6.35.9-64
- Enable hpilo.ko on x86_64 (#571329)
* Thu Dec  2 2010 Kyle McMartin <kyle at redhat.com>
- Grab some of Mel's fixes from -mmotm to hopefully sort out #649694.
* Mon Nov 29 2010 Kyle McMartin <kyle at redhat.com>
- PNP: log PNP resources, as we do for PCI [c1f3f281]
  should help us debug resource conflicts (requested by bjorn.)
* Mon Nov 29 2010 Kyle McMartin <kyle at redhat.com>
- drm/ttm: Fix two race conditions + fix busy codepaths [1df6a2eb] (#615505)
* Fri Nov 26 2010 Kyle McMartin <kyle at redhat.com>
- Quiet a build warning the previous INET_DIAG fix caused.
* Fri Nov 26 2010 Kyle McMartin <kyle at redhat.com>
- Plug stack leaks in tty/serial drivers. (#648663, #648660)
* Fri Nov 26 2010 Kyle McMartin <kyle at redhat.com>
- r8169 fixes from sgruszka at redhat.com (#502974)
- hda/realtek: handle unset external amp bits (#657388)
* Wed Nov 24 2010 John W. Linville <linville at redhat.com>
- rtl8180: improve signal reporting for rtl8185 hardware
- rtl8180: improve signal reporting for actual rtl8180 hardware
* Tue Nov 23 2010 Kyle McMartin <kyle at redhat.com>
- zero struct memory in ipc compat (CVE-2010-4073) (#648658)
- zero struct memory in ipc shm (CVE-2010-4072) (#648656)
- fix logic error in INET_DIAG bytecode auditing (CVE-2010-3880) (#651264)
- posix-cpu-timers: workaround to suppress the problems with mt exec
  (rhbz#656264)
* Tue Nov 23 2010 Kyle McMartin <kyle at redhat.com>
- fix-i8k-inline-asm.patch: backport gcc miscompilation fix from git
  [22d3243d, 6b4e81db] (rhbz#647677)
* Mon Nov 22 2010 Jarod Wilson <jarod at redhat.com> 2.6.35.9-62
- Linux 2.6.35.9
- IR driver fixes from upstream
  * fix keybounce/buffer parsing oddness w/mceusb
  * properly wire up sysfs entries for mceusb and streamzap
  * fix repeat w/streamzap
  * misc lirc_dev fixes
* Sat Nov 20 2010 Chuck Ebbert <cebbert at redhat.com> 2.6.35.9-61.rc1
- Linux 2.6.35.9-rc1
- Comment out upstreamed patches:
  kvm-fix-regression-with-cmpxchg8b-on-i386-hosts.patch
* Fri Nov 19 2010 Ben Skeggs <bskeggs at redhat.com> 2.6.35.8-60
- nouveau: add quirk for iMac G4 (rhbz#505161)
- nouveau: add workaround for display hang on GF8+ (rhbz#537065)
- nouveau: don't reject 3D object creation on NVAF (MBA3)
* Mon Nov 15 2010 Kyle McMartin <kyle at redhat.com>
- rhbz#651019: pull in support for MBA3.
* Thu Nov 11 2010 airlied at redhat.com - 2.6.35.8-55
- drm: fix EDID issues
* Wed Nov 10 2010 Justin M. Forbes <jforbes at redhat.com> 2.6.35.8-54
- fix regression with cmpxchg8b on i386 hosts (rhbz#650215)
* Wed Nov 10 2010 Jarod Wilson <jarod at redhat.com> 2.6.35.8-53
- Linux 2.6.35.8
- Drop patches upstreamed in 2.6.35.8
- More ir-core and lirc updates
- HD-PVR driver updates
* Tue Nov  9 2010 Dave Airlie <airlied at redhat.com> - 2.6.35.6-52
- add i915 polling s/r patch
* Mon Nov  8 2010 Dave Airlie <airlied at redhat.com> - 2.6.35.6-51
- Backport polling fixes + radeon hang fixes from upstream
* Tue Nov  2 2010 Ben Skeggs <bskeggs at redhat.com> 2.6.35.6-50
- nouveau: add potential workaround for NV86 hardware quirk
- fix issue that occurs in certain dual-head configurations (rhbz#641524)
* Sat Oct 23 2010 Jarod Wilson <jarod at redhat.com> 2.6.35.6-49
- Fix brown paper bag bug in imon driver
* Fri Oct 22 2010 Chuck Ebbert <cebbert at redhat.com> 2.6.35.6-48
- drm-i915-sanity-check-pread-pwrite.patch;
   fix CVE-2010-2962, arbitrary kernel memory write via i915 GEM ioctl
- kvm-fix-fs-gs-reload-oops-with-invalid-ldt.patch;
   fix CVE-2010-3698, kvm: invalid selector in fs/gs causes kernel panic
- v4l1-fix-32-bit-compat-microcode-loading-translation.patch;
   fixes CVE-2010-2963, v4l: VIDIOCSMICROCODE arbitrary write
* Fri Oct 22 2010 Kyle McMartin <kyle at redhat.com> 2.6.35.6-47
- tpm-autodetect-itpm-devices.patch: Auto-fix TPM issues on various
  laptops which prevented suspend/resume.
- depessimize-rds_copy_page_user.patch: Fix CVE-2010-3904, local
  privilege escalation via RDS protocol.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #652508 - CVE-2010-4165 kernel: possible kernel oops from user MSS
        https://bugzilla.redhat.com/show_bug.cgi?id=652508
  [ 2 ] Bug #672398 - CVE-2011-0521 kernel: av7110 negative array offset
        https://bugzilla.redhat.com/show_bug.cgi?id=672398
  [ 3 ] Bug #662189 - CVE-2010-4346 kernel: install_special_mapping skips security_file_mmap check
        https://bugzilla.redhat.com/show_bug.cgi?id=662189
  [ 4 ] Bug #667916 - CVE-2010-4649 kernel: IB/uverbs: Handle large number of entries in poll CQ
        https://bugzilla.redhat.com/show_bug.cgi?id=667916
  [ 5 ] Bug #667912 - CVE-2011-0006 kernel: ima: fix add LSM rule bug
        https://bugzilla.redhat.com/show_bug.cgi?id=667912
  [ 6 ] Bug #667907 - CVE-2010-4648 kernel: orinoco: fix TKIP countermeasure behaviour
        https://bugzilla.redhat.com/show_bug.cgi?id=667907
  [ 7 ] Bug #652957 - CVE-2010-4163 CVE-2010-4668 kernel: panic when submitting certain 0-length I/O requests
        https://bugzilla.redhat.com/show_bug.cgi?id=652957
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update kernel' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


More information about the package-announce mailing list