|
|
|
|
Changelog for kernel-headers-2.6.19.7-3tr.i586.rpm :
Tue Aug 21 14:00:00 2007 Nived Gopalan 2.6.19.7-3tr - Patch to fix fib_rules compatibility breakage, Bug #2295.
Fri Jul 6 14:00:00 2007 Nived Gopalan 2.6.19.7-2tr - Updated layer7 patch.
Mon Mar 5 13:00:00 2007 Bipin S 2.6.19.7-1tr - New upstream. - Added support for sata_sil24.
Mon Feb 26 13:00:00 2007 Bipin S 2.6.19.5-1tr - New upstream.
Thu Jan 11 13:00:00 2007 Bipin S 2.6.19.2-1tr - New upstream. - SECURITY FIX: The mincore function in kernel does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock. - The ext2 file system code allows local users to cause a denial of service (crash) via an ext2 stream with malformed data structures that triggers an error in the ext2_check_page due to a length that is smaller than the minimum. - The zlib_inflate function allows local users to cause a denial of service (crash) via a malformed filesystem that uses zlib compression that triggers memory corruption, as demonstrated using cramfs. - The ext3fs_dirhash function allows local users to cause a denial of service (crash) via an ext3 stream with malformed data structures. - Multiple buffer overflows in the cmtp_recv_interopmsg function in the Bluetooth driver (net/bluetooth/cmtp/capi.c) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via CAPI messages with a large value for the length of the (1) manu (manufacturer) or (2) serial (serial number) field.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2006-4814, CVE-2006-6054, CVE-2006-5823 CVE-2006-6053 and CVE-2006-6106 to these issue.
Tue Dec 19 13:00:00 2006 Bipin S 2.6.19.1-2tr - Enabled ULi M526x controller support, Bug #2078.
Fri Dec 15 13:00:00 2006 Bipin S 2.6.19.1-1tr - New upstream. - SECURITY FIX: A vulnerability has been identified which could be exploited by malicious users to bypass security restrictions. This issue is due to an error in the \"do_coredump()\" [fs/exec.c] function where the \"flag\" variable is set but never used, which could be exploited by attackers to manipulate certain files. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2006-6304 to this issue.
Mon Dec 4 13:00:00 2006 Bipin S 2.6.19-1tr - New upstream. - Enabled mptsas support.
Wed Nov 29 13:00:00 2006 Bipin S 2.6.17.14-2tr - Module megaraid_sas supported.
Tue Oct 17 14:00:00 2006 Bipin S 2.6.17.14-1tr - New upstream. - SECURITY FIX: A vulnerability has been identified due to an error in the ULE (Unidirectional Lightweight Encapsulation) decapsulation code [drivers/media/dvb/dvb-core/dvb_net.c] that does not properly handle malformed packets with a SNDU (Sub Network Data Unit) length of 0, which could be exploited by attackers to crash a vulnerable system, creating a denial of service condition.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2006-4623 to this issue.
Thu Sep 28 14:00:00 2006 Bipin S 2.6.17.11-3tr - Added prereq module-init-tools for smp kernel.
Thu Sep 7 14:00:00 2006 Bipin S 2.6.17.11-1tr - New upstream.
Wed Aug 23 14:00:00 2006 Bipin S 2.6.17.10-1tr - New upstream. - SECURITY FIX: A vulnerability has been identified caused due to an error in the SCTP module within the \"sctp_make_abort_user()\" function and can be exploited to execute arbitrary code with escalated privileges. - A vulnerability has been identified in Linux Kernel, which is due to an error in the Universal Disk Format (UDF) module when truncating certain files, which could be exploited by malicious users to panic a vulnerable system, creating a denial of service condition. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2006-3745 and CVE-2006-4145 to this issue.
Mon Aug 14 14:00:00 2006 Nived Gopalan 2.6.17.8-2tr - md compiled as built-in.
Wed Aug 9 14:00:00 2006 Bipin S 2.6.17.8-1tr - New upstream. - SECURITY FIX: Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service (file system panic) via a crafted UDP packet with a V2 lookup procedure that specifies a bad file handle (inode number), which triggers an error and causes an exported directory to be remounted read-only. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2006-3468 to this issue.
Wed Jul 26 14:00:00 2006 Bipin S 2.6.17.7-1tr - New upstream.
Mon Jul 10 14:00:00 2006 Bipin S 2.6.17.4-1tr - New upstream. - Upgraded 3ware 9xxx RAID driver. Bug #1823. - SECURITY FIX: A vulnerability has been identified which could be exploited by local attackers to obtain elevated privileges or cause a denial of service. This flaw is due to an error in the \"sys_prctl()\" [sys.c] function when dumping core files, which could be exploited by malicious users to consume all available disk space or execute arbitrary commands with \"root\" privileges.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2006-2451 to this issue.
Mon Jul 3 14:00:00 2006 Bipin S 2.6.17.3-1tr - New upstream. - SECURITY FIX: SCTP conntrack (ip_conntrack_proto_sctp.c) in netfilter allows remote attackers to cause a denial of service (crash) via a packet without any chunks, which causes a variable to contain an invalid value that is later used to dereference a pointer.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2006-2934 to this issue.
Tue Jun 20 14:00:00 2006 Bipin S 2.6.17.1-1tr - New upstream. - Module qlogicfc successfully replaced with qla2xxx. - Added scsi_transport_spi to initrd module list. - SECURITY FIX: A race condition error in the \"posix-cpu-timers.c\" script that does not prevent another CPU from attaching the timer to an exiting process, which could be exploited by attackers to cause a denial of service. - Flaw due to errors in \"powerpc/kernel/signal_32.c\" and \"powerpc/kernel/signal_32.c\", which could allow userspace to provoke a machine check on 32-bit kernels. - An infinite loop in \"netfilter/xt_sctp.c\", which could be exploited by attackers to exhaust all available memory resources, creating a denial of service condition.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2006-2445, CVE-2006-2448 and CVE-2006-3085 to this issue.
Tue Jun 6 14:00:00 2006 Bipin S 2.6.16.20-1tr - New upstream.
Wed May 31 14:00:00 2006 Bipin S 2.6.16.19-1tr - SECURITY Fix: Pavel Kankovsky discovered that the getsockopt() function, when called with an SO_ORIGINAL_DST argument, does not properly clear the returned structure, so that a random piece of kernel memory is exposed to the user. This could potentially reveal sensitive data like passwords or encryption keys.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2006-1343 to this issue.
Tue May 23 14:00:00 2006 Bipin S 2.6.16.18-1tr - SECURITY Fix: A race condition in the \"do_add_counters()\" function in netfilter can be exploited by local users to read kernel memory or cause the system to crash via a race condition that produces a size value that is different from the size of the allocated memory. - An input validation error in SCTP when processing a HB-ACK chunk with a specially-crafted parameter length can be exploited to cause out-of-bounds memory access. This can potentially cause the system to crash. - An error in SCTP chunk length calculation during parameter processing can be exploited to cause out-of-bounds memory access. This can potentially cause the system to crash. - A vulnerability has been reported which is caused due to some errors within the \"snmp_trap_decode()\" function when handling certain SNMP packets. This can be exploited to cause memory corruption due to incorrect freeing of memory, which can potentially cause the system to crash.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2006-0039, CVE-2006-1857, CVE-2006-1858 and CVE-2006-2444 to these issue.
Mon May 15 14:00:00 2006 Bipin S 2.6.16.16-1tr - SECURITY Fix: Memory leak in __setlease in fs/locks.c allows attackers to cause a denial of service (memory consumption) via unspecified actions related to an \"uninitialised return value,\" aka \"slab leak.\" - lease_init in fs/locks.c allows attackers to cause a denial of service (fcntl_setlease lockup) via actions that cause lease_init to free a lock that might not have been allocated on the stack.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2006-1859 and CVE-2006-1860 to these issue.
Wed May 10 14:00:00 2006 Bipin S 2.6.16.15-1tr - SECURITY Fix: An error in the Stream Control Transmission Protocol (SCTP) code that uses incorrect state table entries when certain ECNE chunks are received in CLOSED state, could be exploited by attackers to cause a kernel panic via a specially crafted packet. - An error exist when handling incoming IP-fragmented SCTP control chunks, which could be exploited by attackers to cause a kernel panic via a specially crafted packet. - Linux SCTP (lksctp) allows remote attackers to cause a denial of service (infinite recursion and crash) via a packet that contains two or more DATA fragments, which causes an skb pointer to refer back to itself when the full message is reassembled, leading to infinite recursion in the sctp_skb_pull function - Linux SCTP (lksctp) allows remote attackers to cause a denial of service (deadlock) via a large number of small messages to a receiver application that cannot process the messages quickly enough, which leads to \"spillover of the receive buffer.\"
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2006-2271, CVE-2006-2272, CVE-2006-2274 and CVE-2006-2275 to these issue.
Tue May 9 14:00:00 2006 Bipin S 2.6.16.14-1tr - SECURITY Fix: A vulnerability has been identified due to an input validation error when processing arguments containing backslash (\"\\\\\") characters passed to certain commands (e.g. \"cd\"), which could be exploited by authenticated attackers to escape chroot restrictions for a CIFS or SMBFS mounted filesystem.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2006-1864 to this issue.
Thu May 4 14:00:00 2006 Nived Gopalan 2.6.16.13-1tr - New Upstream. - SECURITY Fix: A vulnerability has been reported in Linux Kernel, which can be exploited by malicious people to cause a DoS (Denial of Service). The vulnerability is caused due to missing checks on SCTP chunk sizes in the SCTP-netfilter code and may result in an infinite loop exhausting system resources.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2006-1527 to this issue.
Tue Apr 25 14:00:00 2006 Bipin S 2.6.16.11-1tr - New Upstream. - SECURITY Fix: Directory traversal vulnerability in CIFS which allows local users to escape chroot restrictions for an SMB-mounted filesystem via \"..\\\\\" sequences.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2006-1863 to this issue.
Wed Apr 19 14:00:00 2006 Bipin S 2.6.16.9-1tr - SECURITY Fix: A vulnerability has been identified in Linux Kernel, which could be exploited by local attackers to disclose sensitive information. This flaw is due to an error where AMD K7/K8 CPUs only saving/restoring the FOP/FIP/FDP x87 registers in FXSAVE when an exception is pending, which could cause x87 instruction information to be leaked between processes.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2006-1056 to these issue.
Tue Apr 18 14:00:00 2006 Bipin S 2.6.16.8-1tr - New Upstream. - SECURITY Fix: A vulnerability has been identified in Linux Kernel, which could be exploited by attackers to bypass security restrictions. This flaw is due to errors in the \"ipc/shm.c\" and \"mm/madvise.c\" files that do not properly validate shared memory permissions, which could be exploited by attackers to gain write access to read-only \"tmpfs\" files or shared memory via a specially crafted \"madvise\" call. - A vulnerability has been identified in Linux Kernel, which could be exploited by local attackers to cause a denial of service. This flaw is due to a NULL pointer dereference in \"ip_route_input\" and \"inet_rtm_getroute\" [net/ipv4/route.c] when handling a specially crafted \"route\" command for a multicast IP address, which could be exploited by malicious users to crash a vulnerable system, creating a denial of service condition.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2006-1524 and CVE-2006-1525 to these issues.
Wed Apr 12 14:00:00 2006 Bipin S 2.6.16.5-1tr - New Upstream. - SECURITY Fix: The sys_add_key function in the keyring code allows local users to cause a denial of service (OOPS) via keyctl requests that add a key to a user key instead of a keyring key, which causes an invalid memory dereference. - The __group_complete_signal function in the RCU signal handling (signal.c) in Linux kernel 2.6.16, and possibly other versions, has unknown impact and attack vectors related to improper use of BUG_ON. - A vulnerability has been reported in Linux Kernel, which can be exploited by malicious, local users to cause a DoS (Denial of Service).
The vulnerability is caused due to an error when the kernel returns program control using SYSRET on Intel EM64T CPUs. The may cause a DoS due to the way Intel EM64T CPUs handle uncanonical return addresses when a user has been able to change the frames.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2006-1522, CVE-2006-1523 and CVE-2006-0744 to this issue.
Thu Apr 6 14:00:00 2006 Bipin S 2.6.16.1-2tr - SECURITY Fix: The fill_write_buffer function in sysfs/file.c does not zero terminate a buffer when a length of PAGE_SIZE or more is requested, which might allow local users to cause a denial of service (crash) by causing an out-of-bounds read.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2006-1055 to this issue.
Tue Mar 28 14:00:00 2006 Bipin S 2.6.16.1-1tr - New Upstream. - SECURITY Fix: Marco Ivaldi has reported a weakness caused due to an error within the \"ip_push_pending_frames()\" function when creating a packet in reply to a received SYN/ACK packet. This causes RST packets to be sent with a IP ID value that is incremented per packet. This can potentially be exploited to conduct idle scan attacks.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2006-1242 to this issue.
Wed Mar 22 13:00:00 2006 Nived Gopalan 2.6.16-1tr - New Upstream. - Upgraded 3ware 9xxx RAID driver. - SECURITY Fix: An integer overflow error exists within the \"do_replace()\" function in Netfilter. This can be exploited to cause a buffer overflow and allows the overwrite of arbitrary amounts of kernel memory when data is copied from user space. - Insufficient memory allocation in \"drivers/usb/gadget/rndis.c\" when handling NDIS response to OID_GEN_SUPPORTED_LIST may cause kernel memory corruption.
Thu Mar 2 13:00:00 2006 Bipin S 2.6.15.6-1tr - New Upstream - SECURITY Fix: With certain types of ftruncate() activity on 2.6 kernels, XFS can end up exposing stale data off disk to a user, putting extents where holes should be. - An error in the \"nfs_get_user_pages()\" function due to insufficient checks on the return value returned by the \"get_user_pages()\" function can be exploited to cause a local DoS by performing an O_DIRECT write to an NFS file where the user buffer starts with a valid mapped page, but also contains an unmapped page. - Missing checks for bad elf entry addresses can be exploited to cause an endless recursive fault on Intel systems, which results in a local DoS. - unaligned.c erroneously marked die_if_kernel() with a \"noreturn\" attribute. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2006-0554, CVE-2006-0555, CVE-2006-0741 and CVE-2006-0742 to these issues.
Mon Feb 20 13:00:00 2006 Bipin S 2.6.15.4-2tr - Added mptspi in /etc/mkinitrd/modules to fix upgrades from 2.6.12.6 to higher versions.
Tue Feb 14 13:00:00 2006 Ajith Thampi 2.6.15.4-1tr - New Upstream
Wed Feb 8 13:00:00 2006 Ajith Thampi 2.6.15.3-1tr - New Upstream - SECURITY Fix: Linux kernel before 2.6.15.3 down to 2.6.12, while constructing an ICMP response, does not properly handle when the ip_options_echo function in icmp.c fails, which allows remote attackers to cause a denial of service (crash) via vectors such as (1) record-route and (2) timestamp IP options with the needaddr bit set and a truncated value.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2006-0454 to this issue.
Tue Jan 24 13:00:00 2006 Nived Gopalan 2.6.15.1-1tr - New Upstream. - Added L7-filter patch for iptables/Netfilter. - ip6t_random module not included with this release due to issues with netfilter-random patch and kernel 2.6.15.x - SECURITY Fix: Missing validation of the \"nlmsg_len\" value in \"netlink_rcv_skb()\" can cause an infinite loop which can be exploited by local users to cause a DoS by setting the value to 0. - An error in the PPTP NAT helper in the handling of inbound PPTP_IN_CALL_REQUEST packets can cause an error in offset calculation. This can be exploited to cause random memory corruption and can crash the kernel. - ip_nat_pptp in the PPTP NAT helper (netfilter/ip_nat_helper_pptp.c) in Linux kernel 2.6.14, and other versions, allows local users to cause a denial of service via a crafted outbound packet that causes an incorrect offset to be calculated from pointer arithmetic when non-linear SKBs (socket buffers) are used. - Stefan Rompf has reported a vulnerability caused due to the \"dm-crypt\" driver failing to clear memory before freeing it. This can be exploited by local users to obtain sensitive information.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2006-0035, CVE-2006-0036, CVE-2006-0037 and CVE-2006-0095 to these issues.
Wed Dec 21 13:00:00 2005 Ajith Thampi 2.6.14.4-1tr - New Upstream
Mon Dec 5 13:00:00 2005 Nived Gopalan 2.6.14.3-1tr - New Upstream. - SECURITY Fix: Memory leak in the VFS file lease handling in locks.c allows local users to cause a denial of service via certain Samba activities that cause an fasync entry to be re-allocated by the fcntl_setlease function after the fasync queue has already been cleaned by the locks_delete_lock function. - The auto-reap of child processes in Linux kernel 2.6 includes processes with ptrace attached, which leads to a dangling ptrace reference and allows local users to cause a denial of service (crash). - The time_out_leases function in locks.c allows local users to cause a denial of service (kernel log message consumption) by causing a large number of broken leases, which is recorded to the log using the printk function.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2005-3807, CVE-2005-3784 and CVE-2005-3857 to these issues.
Fri Nov 11 13:00:00 2005 Ajith Thampi 2.6.14.2-1tr - New Upstream. - SECURITY Fix: Al Viro discovered an exploitable hole in sysctl unregistration affecting 2.6 kernels. This leads to Oops and possibly more.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-2709 to this issue.
Mon Nov 7 13:00:00 2005 Ajith Thampi 2.6.14-1tr - New Upstream - Added ipv4 AH, ESP and IPCOMP modules support. Bug #1367
Wed Oct 12 14:00:00 2005 Ajith Thampi 2.6.13.4-1tr - New Upstream - SECURITY Fix: The sys_set_mempolicy function in mempolicy.c in Linux kernel 2.6.x allows local users to cause a denial of service (kernel BUG()) via a negative first argument. - Race condition in Linux 2.6, when threads are sharing memory mapping via CLONE_VM (such as linuxthreads and vfork), might allow local users to cause a denial of service (deadlock) by triggering a core dump while waiting for a thread that has just performed an exec. - fs/exec.c in Linux 2.6, when one thread is tracing another thread that shares the same memory map, might allow local users to cause a denial of service (deadlock) by forcing a core dump when the traced thread is in the TASK_TRACED state. - The HFS and HFS+ (hfsplus) modules in Linux 2.6 allows attackers to cause a denial of service (oops) by using hfsplus to mount a filesystem that is not hfsplus. - Race condition in ebtables netfilter module (ebtables.c) in Linux 2.6, when running on an SMP system that is operating under a heavy load, might allow remote attackers to cause a denial of service (crash) via a series of packets that cause a value to be modified after it has been read but before it has been locked. - Memory leak in \"/security/keys/request_key_auth.c\" can potentially be exploited by non-privileged users to cause a DoS.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2005-3053, CVE-2005-3106, CVE-2005-3107, CVE-2005-3108, CVE-2005-3109, CVE-2005-3110, CVE-2005-3119.
Tue Oct 4 14:00:00 2005 Ajith Thampi 2.6.13.3-1tr - New Upstream
Fri Sep 30 14:00:00 2005 Ajith Thampi 2.6.13.2-1tr - New Upstream - Fixes CAN-2005-2490 and CAN-2005-2492. - SECURITY Fix: Jan Blunck discovered a Denial of Service vulnerability in the procfs interface of the SCSI driver. By repeatedly reading /proc/scsi/sg/devices, a local attacker could eventually exhaust kernel memory. (CAN-2005-2800) - A Denial of Service vulnerability was detected in the stack segment fault handler. A local attacker could exploit this by causing stack fault exceptions under special circumstances (scheduling), which lead to a kernel crash. (CAN-2005-1767) - Vasiliy Averin discovered a Denial of Service vulnerability in the \"tiocgdev\" ioctl call and in the \"routing_ioctl\" function. By calling fget() and fput() in special ways, a local attacker could exploit this to destroy file descriptor structures and crash the kernel. (CAN-2005-3044) - md has been renamed to md-mod from 2.6.13 - md5 has been compiled in-built here on
Wed Sep 14 14:00:00 2005 Ajith Thampi 2.6.12.6-3tr - Fix unchecked __get_user that could be tricked into generating a memory read on an arbitrary address. The result of the read is not returned directly but you may be able to divine some information about it, or use the read to cause a crash on some architectures by reading hardware state.(CAN-2005-2492) - Al Viro reported a flaw in sendmsg(). \"When we copy 32bit ->msg_control contents to kernel, we walk the same userland data twice without sanity checks on the second pass. Moreover, if original looks small enough, we end up copying to on-stack array.\" (CAN-2005-2490)
Mon Sep 5 14:00:00 2005 Erlend Midttun 2.6.12.6-2tr - Added 3w-9xxx-linux-src-2.6-9.2.1.1.tgz
Tue Aug 30 14:00:00 2005 Erlend Midttun 2.6.12.6-1tr - New upstream with the following fixes (from the announcement): Bhavesh P. Davda: NPTL signal delivery deadlock fix
Chris Wright: Linux 2.6.12.6
Herbert Xu: Restrict socket policy loading to CAP_NET_ADMIN - CAN-2005-2555
Jan Blunck: sg.c: fix a memory leak in devices seq_file implementation (2nd)
lepton: fix gl_skb/skb type error in genelink driver in usbnet
Linus Torvalds: Revert unnecessary zlib_inflate/inftrees.c fix
Patrick McHardy: Fix DST leak in icmp_push_reply() Fix SKB leak in ip6_input_finish()
Tue Aug 16 14:00:00 2005 Syed Shabir Zakiullah 2.6.12.5-1tr - New Upstream, Bug #1191 - SECURITY FIX: - Error during attempt to join key management session can leave semaphore pinned (CAN-2005-2098) - Destruction of failed keyring oopses (CAN-2005-2099) - Update in-kernel zlib routines (CAN-2005-2458, CAN-2005-2459)
- Fixed broken symlinks issue, Bug #1177
Wed Aug 10 14:00:00 2005 Syed Shabir Zakiullah 2.6.12.4-2tr - Enabled Extended matches in QoS, Fix Bug #1167.
Mon Aug 8 14:00:00 2005 Syed Shabir Zakiullah 2.6.12.4-1tr - New Upstream, Fix Bug #1155.
Wed Jul 27 14:00:00 2005 Syed Shabir Zakiullah 2.6.11.12-6tr - Now use AUTOACTIVATE correctly as expected in tsl-fixboot, removed --make-default option (AUTOACTIVATE will handle this).
Fri Jul 22 14:00:00 2005 Syed Shabir Zakiullah 2.6.11.12-5tr - Added support for standard serial ports. Fix Bug #1093.
Mon Jul 18 14:00:00 2005 Syed Shabir Zakiullah 2.6.11.12-4tr - Added support for Large Block Devices (greater than 2TB). Fix Bug #1070.
Thu Jul 14 14:00:00 2005 Syed Shabir Zakiullah 2.6.11.12-3tr - Added CONNMARK support in kernel and enabled CONFIG_IP_NF_MATCH_CONNMARK and CONFIG_IP_NF_TARGET_CONNMARK modules. Fix Bug #1081.
Thu Jun 30 14:00:00 2005 Chr. H. Toldnes 2.6.11.12-1tr - Added kernel-headers and kernel-smp-headers packages to ease external module compilation
Tue Jun 28 14:00:00 2005 Ajith Thampi 2.6.11.12-1tr - New Upstream - Re-add lost Tulip Card Support, Bug #178 - Add IPX protocol support, reference Bug #983
Tue Jun 7 14:00:00 2005 Oystein Viggen 2.6.11.11-4tr - Redo config files with more options enabled
Wed Jun 1 14:00:00 2005 Syed S. Zakiullah 2.6.11.11-3tr - Added a patch which adds option for CONFIG_IP_NF_MATCH_RANDOM and CONFIG_IP6_NF_MATCH_RANDOM which allows packets to match randomly following a given probability. (Ref. Bug. #739). - Added XFS Posix ACL support. (Ref. Bug. #66).
Wed Jun 1 14:00:00 2005 Oystein Viggen 2.6.11.11-2tr - Readd -fno-stack-protector for gcc-3.4
Mon May 30 14:00:00 2005 Syed S. Zakiullah 2.6.11.11-1tr - New Upstream
Fri May 20 14:00:00 2005 Ajith Thampi 2.6.11.10-3tr - Update PreReq with tsl-utils-1.6-10tr and tsl-initrd
Wed May 18 14:00:00 2005 Ajith Thampi 2.6.11.10-2tr - Set PF_KEY sockets needed by ipsec - introducing the new tsl-fixboot in %post and %preun to make new kernel the default.
Tue May 17 14:00:00 2005 Ajith Thampi 2.6.11.10-1tr - New Upstream
Fri May 13 14:00:00 2005 Ajith Thampi 2.6.11.9-2tr - Absence of smp support in kernel-smp? Set. Bug #665
Thu May 12 14:00:00 2005 Ajith Thampi 2.6.11.9-1tr - New Upstream - Buffer Overflow Fix, A locally exploitable flaw has been found in the Linux ELF binary format loader\'s core dump function that allows local users to gain root privileges and also execute arbitrary code at kernel privilege level. (CAN-2005-1263) - Added Module Unloading Support, Bug #656
Mon May 2 14:00:00 2005 Ajith Thampi 2.6.11.8-2tr - JFS Support added as loadable modules and not built-in, Bug #555
Sat Apr 30 14:00:00 2005 Ajith Thampi 2.6.11.8-1tr - New upstream
Wed Apr 27 14:00:00 2005 Ajith Thampi 2.6.11.7-4tr - Added i2c patch - Rebuilt without stack protector for gcc-4.0
Mon Apr 25 14:00:00 2005 Ajith Thampi 2.6.11.7-3tr - Added PreReq of module-init-tools instead of modutils
Thu Apr 21 14:00:00 2005 Ajith Thampi 2.6.11.7-2tr - RAID Support added as loadable modules and not built-in, Bug #401 - Added ALSA Support
Fri Apr 8 14:00:00 2005 Ajith Thampi 2.6.11.7-1tr - New upstream.
Wed Apr 6 14:00:00 2005 Ajith Thampi 2.6.11.6-2tr - Added Tulip Card Support, Bug #178
Tue Mar 29 14:00:00 2005 Erlend Midttun 2.6.11.6-1tr - New upstream.
Wed Mar 16 13:00:00 2005 Erlend Midttun 2.6.11.4-1tr - New upstream.
Sun Mar 13 13:00:00 2005 Erlend Midttun 2.6.11.3-1tr - New upstream.
Fri Mar 11 13:00:00 2005 Erlend Midttun 2.6.11.2-2tr - Fix localversion.
Thu Mar 10 13:00:00 2005 Erlend Midttun 2.6.11.2-1tr - New upstream.
Wed Mar 9 13:00:00 2005 Syed Shabir Zakiullah 2.6.10-4tr - compiled with CONFIG_BLK_DEV_RAM_SIZE=8192 to make initrd to compress
Mon Feb 28 13:00:00 2005 Syed Shabir Zakiullah 2.6.10-3tr - Added boot-delay-retry-v3.patch
Fri Feb 25 13:00:00 2005 Syed Shabir Zakiullah 2.6.10-2tr - Applied Device Mapper patches
Tue Feb 8 13:00:00 2005 Ajith Thampi 2.6.10-1tr - new upstream with fixes
Fri Feb 4 13:00:00 2005 Ajith Thampi 2.6.9-8tr - removed the BOOT kernel
Tue Dec 7 13:00:00 2004 Raghu 2.6.9-6tr - New Upstream 2.6.9 - recompiled with gcc-3.4.3
Wed Nov 24 13:00:00 2004 Erlend Midttun 2.4.28-4tr - No longer Provide various kernel-firewall.
Sat Nov 20 13:00:00 2004 Erlend Midttun 2.4.28-3tr - Rebuilt with new tag.
Thu Nov 18 13:00:00 2004 Erlend Midttun 2.4.28-2tr - Add -fno-stack-protector to Makefile in kernel-source
Wed Nov 17 13:00:00 2004 Erlend Midttun 2.4.28-1tr - New upstream.
Mon Nov 8 13:00:00 2004 Oystein Viggen 2.4.27-8tr - Fix firewall symlinks (for upgrade from older versions of the OS)
Tue Oct 19 14:00:00 2004 Erlend Midttun 2.4.27-7tr - Now try with USB keyboard too
Fri Oct 1 14:00:00 2004 Syed Shabir 2.4.27-6tr - Applied OpenSwan NAT and kernel Patches - Removed Old FreeSwan patches
Wed Sep 22 14:00:00 2004 Erlend Midttun 2.4.27-4tr - New megaraid driver. No show, maybe try later. - Fix Conflicts/Obsoletes error
Tue Sep 21 14:00:00 2004 Erlend Midttun 2.4.27-3tr - Now compile in CONFIG_BLK_DEV_SIIMAGE
Mon Aug 30 14:00:00 2004 Erlend Midttun 2.4.27-2tr - Added support for DMA on ESB_3
Sun Aug 8 14:00:00 2004 Erlend Midttun 2.4.27-1tr - New upstream. Fixes lots of bugs including security related ones.
Thu Jun 17 14:00:00 2004 Oystein Viggen 2.4.26-3tr - Various security fixes from Alexander Viro, CAN-2004-0495
Tue Jun 15 14:00:00 2004 Oystein Viggen 2.4.26-2tr - Patch fpu crash, CAN-2004-0554
Thu May 13 14:00:00 2004 Erlend Midttun 2.4.26-1tr - New upstream.
Wed Apr 21 14:00:00 2004 Erlend Midttun 2.4.25-8tr - Merged patch 14 and 15.
Tue Apr 20 14:00:00 2004 Erlend Midttun 2.4.25-7tr - Added patch 14 and 15 to fix bugs with mcast_msfilter
Wed Apr 14 14:00:00 2004 Erlend Midttun 2.4.25-6tr - Added patches 10, 11, 12, 13 to fix CAN-2004-0177, CAN-2004-0109 CAN-2004-0133
Tue Mar 23 13:00:00 2004 Chr. Toldnes 2.4.25-4tr - Added the hpt366 and hpt34x modules to the BOOT kernel
Thu Feb 19 13:00:00 2004 Erlend Midttun 2.4.25-1em - New upstream. - Added CONFIG_PPP_FILTER and CONFIG_PPP_MULTILINK on request.
Thu Feb 5 13:00:00 2004 Chr. Toldnes 2.4.24-3tr - Added USB keyboard support in the BOOT kernel - Added some bugfix patches from lkml
Fri Jan 30 13:00:00 2004 Chr. Toldnes 2.4.24-2tr - Build without stack protection
Fri Jan 23 13:00:00 2004 Erlend Midttun 2.4.24-1tr - Compiled serverworks in. - New upstream.
Thu Jan 22 13:00:00 2004 Chr. Toldnes 2.4.23-9tr - Fixed problem relating to usb hid devices reconnection
Tue Jan 20 13:00:00 2004 Erlend Midttun 2.4.23-8tr - Added quota support. - Added serverworks to -BOOT kernel.
Mon Jan 19 13:00:00 2004 Oddvar Broenstad 2.4.23-7tr - Quick temporary fix for iptables recent match extenxsion
Fri Jan 9 13:00:00 2004 Chr. Toldnes 2.4.23-6tr - cleanup
Fri Jan 9 13:00:00 2004 Chr. Toldnes 2.4.23-5tr - Added CONFIG_PDC202XX_FORCE=y to enable full speed on promise controllers. - Changed kernel-source tar.bz2 back to plain directory - Use kernel-source-2.6.19.7-3tr to not conflict with vanilla kernels
Tue Jan 6 13:00:00 2004 Chr. Toldnes 2.4.23-4tr - Now untaring correct source in %post source... Thanks Gerald.
Mon Jan 5 13:00:00 2004 Chr. Toldnes 2.4.23-3tr - Added mremap fix - Correct build symlink - Added documentation: README-kernel-module-compilation.txt - Added untaring of source in %post source - Added Conflicts: swup_install-if-upgrade
Mon Dec 15 13:00:00 2003 Chr. Toldnes 2.4.23-2tr - Added rtc fix - Readded external megaraid stuff.
Sun Nov 30 13:00:00 2003 Chr. Toldnes 2.4.23-1tr - New upstream version: 2.4.23 - Removed patch 110, included upstream. - added create-freeswan-kernelpatch.sh as Source - updated README-kernel-upgrade-howto.txt - New freeswan/x509: 2.04/1.4.8 - Added TODO section in spec. - Removed external megaraid stuff
Mon Sep 15 14:00:00 2003 Chr. Toldnes 2.4.22-4tr - Added kernel-config-generator - Added README-kernel-upgrade-howto.txt
Sat Aug 30 14:00:00 2003 Chr. Toldnes 2.4.22-3tr - added lvm-patch-generator - added lvm-1.0.7
Sat Aug 30 14:00:00 2003 Chr. Toldnes 2.4.22-2tr - Now megaraid stuff is sources. - New upstream ipvs: 1.0.10
Mon Aug 25 14:00:00 2003 Chr. Toldnes 2.4.22-1tr - New upstream version: 2.4.22 - CONFIG_MODVERSIONS=n - Removed patch: 1-9, 120, 122, 130, 140, 141, 160, 161 - New upstream megaraid version
Tue Aug 19 14:00:00 2003 Chr. Toldnes 2.4.21-15tr - Rebuilt and retagged
Fri Aug 15 14:00:00 2003 Omar Kilani 2.4.21-14ok - Changed CONFIG_BLK_DEV_MD=m to CONFIG_BLK_DEV_MD=y to support autodetect.
Thu Jul 10 14:00:00 2003 Erlend Midttun 2.4.21-13tr - Added bunch of patches. 5 - 9.
Sat Jul 5 14:00:00 2003 Gerald Dachs 2.4.21-12gd - Added nfsd module to boot kernel
Fri Jul 4 14:00:00 2003 Chr. Toldnes 2.4.21-11tr - Some bugfixing in fs and kernel src dirs.
Thu Jul 3 14:00:00 2003 Erlend Midttun 2.4.21-10tr - Added a way to recreate the header files for linux-headers.
Tue Jul 1 14:00:00 2003 Goetz Bock 2.4.21-9bg - fixed modversion.h file - updated isdn drivers for HiSax cards.
Tue Jul 1 14:00:00 2003 Goetz Bock 2.4.21-8bg - made the patch numbers compact again - added i2c and lm_sensors (patch 160, 161) - added wireless hostAP driver (patch 170) - added new megaraid driver (patch 180) - config updated: vga mode selection suport, activated i2c and lm_sensors firewall is no actually router. It adds: advanced routing, IPsec, QoS, bridging, IP tunneling, IPVS, vlan, ISDN and wireless drivers, bluetooth
Mon Jun 30 14:00:00 2003 Goetz Bock 2.4.21-7bg - added nfsd to -BOOT, we need it for the live system for the PXE installer - updated IPVS to 1.0.9
Sun Jun 29 14:00:00 2003 Goetz Bock 2.4.21-6bg - unified the .config files. smp now only adds smp and firewall adds IPsec, QoS, advanced routing (incl. multicast), ethernet bridging, eb-tables, and ip tunneling - removed i2c - renamed two patches to start with linux-2.4.21 (120 and 220)
Tue Jun 24 14:00:00 2003 Erlend Midttun 2.4.21-5tr - Big change in .config files.
Wed Jun 18 14:00:00 2003 Erlend Midttun 2.4.21-4tr - Big rebuild
Tue Jun 17 14:00:00 2003 Erlend Midttun 2.4.21-3em - IDE modules, take II.
Mon Jun 16 14:00:00 2003 Erlend Midttun 2.4.21-2em - Recreated freeswan patch. - Tried to get the correct IDE modules. - No longer own kernel.h, we leave that to linux-headers.
Sat Jun 14 14:00:00 2003 Roland Kruse 2.4.21-1rk - Picked up 2.4.21 - Patch 4,5,10-14 no longer applied (check!) - Note: Patch120 rebuilt, patch 220 replaced from: http://cvs.netfilter.org/~checkout~/netfilter/patch-o-matic//extra/pptp-conntrack-nat.patch - Configs need checking.
Thu Jun 5 14:00:00 2003 Erlend Midttun 2.4.20-28em - In fact, leave /lib/modules to filesystem. - Added wireless. - Added APIC and IOAPIC - Removed devfs
Wed Jun 4 14:00:00 2003 Erlend Midttun 2.4.20-27em - Remove useless directories under /lib/modules/kernelver.
Mon May 26 14:00:00 2003 Erlend Midttun 2.4.20-26em - fileutils -> coreutils.
Sat May 17 14:00:00 2003 Erlend Midttun 2.4.20-25em - GCC 3.3 does not like multiline literals.
Fri May 16 14:00:00 2003 Erlend Midttun 2.4.20-24em - New FreeSWAN version 2.00. - Simplified creation of patch a lot.
Thu May 8 14:00:00 2003 Erlend Midttun 2.4.20-23em - LVM is now a module.
Thu Apr 24 14:00:00 2003 Erlend Midttun 2.4.20-22em - version.h take II.
Wed Apr 23 14:00:00 2003 Christian H. Toldnes 2.4.20-21ct - Now all binary kernels, and the source package provides \'swup_install-only\'
Wed Apr 23 14:00:00 2003 Christian H. Toldnes 2.4.20-20ct - Use /sbin/tsl-fixboot.sh in %post sections - Nicer PreReqs
Tue Apr 22 14:00:00 2003 Erlend Midttun 2.4.20-19em - Mode flexible version.h\'s
Fri Apr 11 14:00:00 2003 Christian H. Toldnes 2.4.20-18ct - All binary kernels creates initrd, and uses symlinks during install. (Waiting untill after Beta1 to use the /sbin/tsl-fixboot.sh script.)
Tue Apr 8 14:00:00 2003 Erlend Midttun 2.4.20-17em - Removed unapplied patches.
Mon Mar 24 13:00:00 2003 Erlend Midttun 2.4.20-16em - Rebuilt against glibc 2.3.2.
Thu Mar 20 13:00:00 2003 Erlend Midttun 2.4.20-15em - Added patch against CAN-2003-0127 - Added XDR patches against CERT CA-2002-25 and CA-2003-10 - Now also apply the netfilter bridge patches - Added LSI support - Added I2O something
Thu Mar 6 13:00:00 2003 Goetz Bock 2.4.20-14bg - my new box needs I2O, so I\'ve added that as modules - and it comes with a IPMI card, so I\'ve added that patch as well - and I\'ve created a further configuration with all my patches applied configured as modular as possible: allmodular. By setting allmodular to 0 it will not be compiled.
Sun Mar 2 13:00:00 2003 Gerald Dachs 2.4.20-12em - Added connection tracking and NAT support for PPTP (Patch220)
Tue Feb 25 13:00:00 2003 Erlend Midttun 2.4.20-11em - Added PPPoE support.
Tue Feb 25 13:00:00 2003 Gerald Dachs 2.4.20-11gd - Diald needs SLIP
Tue Feb 25 13:00:00 2003 Erlend Midttun 2.4.20-11em - Added Appletalk modules.
Mon Feb 10 13:00:00 2003 Erlend Midttun 2.4.20-9em - Now even with Mylex support.
Tue Jan 21 13:00:00 2003 Erlend Midttun 2.4.20-8em - Some error in the packaging left us with a corrupt .tar.bz2.
Tue Jan 21 13:00:00 2003 Erlend Midttun 2.4.20-7em - Attempting to stabilize by disabling most of the features. - Removed pre-2.4 changelog entries.
Fri Jan 10 13:00:00 2003 Goetz Bock 2.4.20-6bg - added ethernet bridge tables and bridge firewalling patch - disabled vserver support
Fri Jan 10 13:00:00 2003 Erlend Midttun 2.4.20-4em - Added config options for XSentry.
Wed Jan 8 13:00:00 2003 Goetz Bock 2.4.20-5bg - various fixes in 3bg and 4bg - updated cryptoapi: 2.4.20.1 - added solucorp vserver support
Wed Jan 8 13:00:00 2003 Erlend Midttun 2.4.20-3em - Preserve directory in source .tar.bz2.
Wed Jan 8 13:00:00 2003 Erlend Midttun 2.4.20-2em - Added HIGHMEM support.
Sun Jan 5 13:00:00 2003 Goetz Bock 2.4.20-2bg - added some features: cryptoapi, lm_sensors, hostap, uml, acpi - updated some stuff: ipvs to 1.0.7, lvm to 1.0.6 - and a patches: ext3 corruption fix - added highmem - modularised to the MAX, even IDE drivers and base SCSI stuff
Wed Dec 4 13:00:00 2002 Erlend Midttun 2.4.20-1em - Picked up 2.4.20. - Added a few options to -BOOT config to make PXE install work again.
Sun Nov 24 13:00:00 2002 Gerald Dachs 2.4.19-15gd - In boot kernel module af_packet.o was missing, anaconda needs it.
Fri Nov 15 13:00:00 2002 Erlend Midttun 2.4.19-14em - Added patch to fix connection tracking bug.
Thu Nov 14 13:00:00 2002 Erlend Midttun 2.4.19-13em - Some Requires is really a PreReq - Added fix for cmdline bug. - Added fix for DOS bug.
Wed Nov 6 13:00:00 2002 Roland Kruse 2.4.19-12rk - Added \"Requires\" statement for kernel-smp subpackage to avoid it being installed too early, breaking the %post script (mkinitrd etc).
Mon Nov 4 13:00:00 2002 Erlend Midttun 2.4.19-11em - Now even supposed to work with new binutils.
Fri Nov 1 13:00:00 2002 Erlend Midttun 2.4.19-10em - Compressed the kernel-source. - Added another patch from advisory.
Tue Sep 24 14:00:00 2002 Erlend Midttun 2.4.19-9em - Netfilter are now modules. - Added magic sysreq. - Added devfs on request.
Mon Sep 23 14:00:00 2002 Roland Kruse 2.4.19-8rk - sundance patch for d-link DFE-580TX (Patch7) - CONFIG_SUNDANCE=m in kernel-2.4.19-i586-BOOT.config
Sat Sep 21 14:00:00 2002 Gerald Dachs 2.4.19-7gd - Added ppp-mppe (Patch6)
Mon Sep 9 14:00:00 2002 Roland Kruse 2.4.19-6rk - Updated module-info (Source2)
Sat Sep 7 14:00:00 2002 Gerald Dachs 2.4.19-5gd - Added IDE-SCSI; need by cdrecord - ksymoops 2.4.6
Fri Aug 23 14:00:00 2002 Erlend Midttun 2.4.19-4em - Removed /usr/include/{asm,linux} from this package as they are supposed to be owned by a separate kernel-headers package.
Thu Aug 22 14:00:00 2002 Roland Kruse 2.4.19-3rk - Added Adaptec Starfire driver: CONFIG_ADAPTEC_STARFIRE=m - Added tmpfs: CONFIG_TMPFS=y
Tue Aug 20 14:00:00 2002 Erlend Midttun 2.4.19-2em - Cleaned up BOOT config file.
Fri Aug 16 14:00:00 2002 Erlend Midttun 2.4.19-1em - Picked up 2.4.19. - New JFS.
Wed Jul 17 14:00:00 2002 Roland Kruse 2.4.18-7rk - Removed installkernel, this is in mkinitrd package
Tue Jul 16 14:00:00 2002 Roland Kruse 2.4.18-6rk - fixed ipsec items in kernel-2.4.18-i586-BOOT.config
Tue Jul 9 14:00:00 2002 Roland Kruse 2.4.18-5rk - Updated to freeswan 1.98b - Enabled CONFIG-IPSEC-IPCOMP and CONFIG-IPSEC-DEBUG in configs.
Mon Jun 10 14:00:00 2002 Goetz Bock 2.4.18-4bg - added LVM 1.04
Sat Jun 8 14:00:00 2002 Gerald Dachs - changed to jfs 1.0.19 - changed to freeswan 1.97 - added ipvs 1.0.2 - mkinitrd now executed in %post
Thu May 30 14:00:00 2002 Christain H. Toldnes - Rebuild with -2ct tag.
Tue Feb 26 13:00:00 2002 Erlend Midttun - Picked up the real 2.4.18
Tue Jan 22 13:00:00 2002 Gerald Dachs - small changes in boot kernel config, I need every byte - BOOT kernel has now cramfs for anaconda
Wed Jan 9 13:00:00 2002 Gerald Dachs - new kernel version 2.4.17 - now freeswan 1.92 included
Sat Sep 29 14:00:00 2001 Gerald Dachs - new kernel version 2.4.10 - SCSI generic enabled - ext3 filesystem support - jfs filesystem support - patch against endless loop in /proc/partitions - patch against bug in pppoe
Thu Aug 9 14:00:00 2001 Gerald Dachs - new kernel version 2.4.7 - SCSI generic enabled
Sat Jul 7 14:00:00 2001 Gerald Dachs - reiserfs patches
Sat Jul 7 14:00:00 2001 Gerald Dachs - new kernel version 2.4.6
|
|
|