Changelog for kernel-uek-headers-2.6.32-100.28.11.el5.x86_64.rpm :

* Thu Apr 14 2011 Joe Jin [2.6.32-100.28.11.el5]- fs/partitions: Validate map_count in Mac partition tables {CVE-2011-1010}- nfs4: Ensure that ACL pages sent over NFS were not allocated from the slab (v3) {CVE-2011-1090}
* Thu Apr 14 2011 Joe Jin [2.6.32-100.28.10.el5]- Use cciss for some Smart Array controller for OL5 [orabug 11899706]- Add CONFIG_UEK5 option [orabug 11899706]- CVEs from RHSA-2011-0421- install_special_mapping skips security_file_mmap check {CVE-2010-4346}- orinoco: fix TKIP countermeasure behaviour {CVE-2010-4648}- net: clear heap allocation for ethtool_get_regs() {CVE-2010-4655}- usb: iowarrior: don\'t trust report_size for buffer size {CVE-2010-4656}- [media] [v3,media] av7110: check for negative array offset {CVE-2011-0521}- RDMA/cma: Fix crash in request handlers {CVE-2011-0695}- IB/cm: Bump reference count on cm_id before invoking callback {CVE-2011-0695}- gro: reset skb_iif on reuse {CVE-2011-1478}
* Wed Mar 16 2011 Guru Anbalagane [2.6.32-100.28.9.el5]- sync up with uek6 version
* Tue Mar 15 2011 Chuck Anderson [2.6.32-100.26.4.el5]- [block] check for proper length of iov entries earlier in blk_rq_map_user_iov (Xiaotian Feng) {CVE-2010-4668}- scm: lower SCM_MAX_FD (Eric Dumazet) {CVE-2010-4249}- perf_events: Fix perf_counter_mmap() hook in mprotect() (Pekka Enberg) {CVE-2010-4169}- tcp: Increase TCP_MAXSEG socket option minimum (David S. Miller) {CVE-2010-4165}- Enable module force load option [orabug 11782146]- Enable vmw balloon and pvscsi (Guru Anbalagane) [orabug 11697522]- fix hpilo module option in config
* Wed Mar 02 2011 Guru Anbalagane [2.6.32-100.26.3.el5]- build from git
* Tue Jan 18 2011 Kevin Lyons [2.6.32-100.26.2.el5]- Make sure call to weak-modules in post and preun sections works for debug package [bug 11655695]
* Fri Jan 14 2011 Srinivas Maturi [2.6.32-100.26.1.el5]- Rebuild changing release to 100.26.1.el5
* Fri Jan 14 2011 Srinivas Maturi [2.6.32-100.23.34.el5]- Add xenbus symbols to kabi whitelist and update Module.kabi_
* Thu Jan 13 2011 Guru Anbalagane [2.6.32-100.23.33.el5]- setup_arg_pages: diagnose excessive argument size (Roland McGrath) {CVE-2010-3858}- [net] Truncate recvfrom and sendto length to INT_MAX (Linux Torvalds) {CVE-2010-3859}- [net] packet: fix information leak to userland (Vasiliy Kulikov) {CVE-2010-3876}- [net] inet_diag: Make sure we run the same bytecode we audited (Nelson Elhage) {CVE-2010-3880}- [ipc] sys_semctl: fix kernel stack leakage (Dan Rosenberg) {CVE-2010-4083}- [scsi] gdth: integer overflow in ioctl (Dan Carpenter) {CVE-2010-4157}- bluetooth: Fix missing NULL check (Alan Cox) {CVE-2010-4242}- posix-cpu-timers: workaround to suppress the problems with mt exec (Oleg Nesterov) {CVE-2010-4248}- [fs] xfs: prevent reading uninitialized stack memory (Dan Rosenberg) {CVE-2010-3078}- ALSA: seq/oss - Fix double-free at error path of snd_seq_oss_open() (Takashi Iwai) {CVE-2010-3080}- drivers/net/usb/hso.c: prevent reading uninitialized memory (Dan Rosenberg) {CVE-2010-3298}- net: clear heap allocation for ETHTOOL_GRXCLSRLALL (Kees Cook) {CVE-2010-3861)- can-bcm: fix minor heap overflow (Oliver Hartkopp) {CVE-2010-3874}- ipc: shm: fix information leak to userland (Vasiliy Kulikov) {CVE-2010-4072}- ipc: initialize structure memory to zero for compat functions (Dan Rosenberg) {CVE-2010-4073}- USB: serial/mos
*: prevent reading uninitialized stack memory (Dan Rosenberg) {CVE-2010-4074}- tty: Make tiocgicount a handler (Alan Cox) {CVE-2010-4075}- tty: icount changeover for other main devices (Alan Cox) {CVE-2010-4077}- V4L/DVB: ivtvfb: prevent reading uninitialized stack memory (Dan Rosenberg) {CVE-2010-4079}- sound/pci/rme9652: prevent reading uninitialized stack memory (Dan Rosenberg) {CVE-2010-4080}- drivers/video/via/ioctl.c: prevent reading uninitialized stack memory (Dan Rosenberg) {CVE-2010-4082}- filter: make sure filters dont read uninitialized memory (David S. Miller) {CVE-2010-4158}- net: Limit socket I/O iovec total length to INT_MAX.(David S. Miller) {CVE-2010-4160}- bio: take care not overflow page count when mapping/copying user data (Jens Axboe) {CVE-2010-4162}- block: check for proper length of iov entries in blk_rq_map_user_iov() (Jens Axboe) {CVE-2010-4163}- af_unix: limit unix_tot_inflight (Eric Dumazet) {CVE-2010-4249}- igb: only use vlan_gro_receive if vlans are registered (Alexander Duyck) {CVE-2010-4263}- net: tipc: fix information leak to userland (Kulikov Vasiliy) {CVE-2010-3877}- exec: make argv/envp memory visible to oom-killer (Oleg Nesterov) {CVE-2010-4243}- exec: copy-and-paste the fixes into compat_do_execve() paths (Oleg Nesterov) {CVE-2010-4243}- oracleasm: Data integrity support (Martin K. Petersen)- sd: Export effective protection mode in sysfs (Martin K. Petersen)- block: Disable autoprotect (Martin K. Petersen)- block: Fix double free (Martin K. Petersen)- scsi_transport_fc: Introduce helper function for blocking scsi_eh (Christof Schmitt)- scsi_transport_fc: Remove capping from dev_loss_tmo (Hannes Reinecke)
* Thu Jan 13 2011 Guru Anbalagane [2.6.32-100.23.32.el5]- fixes ocfs2_page_mkwrite path (WenGang Wang) [orabug 10127979]- Increase max guest memory from 32GB to 1TB (Guru Anbalagane) [orabug 11069098]
* Wed Jan 12 2011 Joe Jin [2.6.32-100.23.31.el5]- [xen]: fix xenfb suspend/resume race (Joe Jin) [orabug 10389175]- [net] exported firmware that missed in drivers (Zhenzhong Duan) [orabug 10433896]
* Wed Dec 29 2010 Guru Anbalagane [2.6.32-100.23.30.el5]- minor fix to netconsole/bonding patch - add obsoletes/provides kernel-headers for package headers in specfile (Keshav Sharma)
* Thu Dec 23 2010 Guru Anbalagane [2.6.32-100.23.29.el5]- update of following drivers from el6 (Joe Jin)- [net] add netdev_print helper- [net] update driver bnx2 to 2.0.8-j15- [net] update driver bnx2x to 1.52.1-7- [net] update driver cnic to 2.1.2- [scsi] update driver bnx2i to 2.1.1- [net] update driver tg3 to 3.108- [net] update driver e100 to 3.5.24-k2-NAPI- [net] update driver e1000 to 7.3.21-k6-NAPI- [net] update driver e1000e to 1.2.7-k2- [net] update driver igb to 2.1.0-k2- [net] update driver igbvf to 1.0.0-k0- [net] update driver ixgb to 1.0.135-k2-NAPI- [net] update driver ixgbe to 2.0.62-k2- [net] update driver ixgbevf to 1.0.0-k0- [net] update driver be2net to 2.102.426r- [scsi] update driver be2iscsi to 2.0.527.0- [block] update driver cciss to 3.6.26- update qla2xxx, qla4xxx, qlge, netxen_nic, qlcnic - [paravirt]ignore lazy mmu state change in interrupt path (Chuck Anderson) [orabug 10285722]- fix filp_close() race (Joe Jin) [orabug 10335998]- [net] rework the patch for network drivers entropy.
* Tue Dec 21 2010 Joe Jin [2.6.32-100.23.28.el5]- [XEN] ensure that all event channels start off bound to VCPU 0 [orabug 10389175]- [NET] tehuti: fix incorrect firmware name.
* Thu Dec 16 2010 Guru Anbalagane [2.6.32-100.23.27.el5]- [SCSI] wake xmit thread when killing session (Mike Christie)
* Wed Dec 15 2010 Joe Jin [2.6.32-100.23.26.el5]- enable hpilo support and update to upstream.- update bnx2i to upstream.- update 3w-xxxx to upstream.- update 3w-9xxx to upstream.- update be2iscsi to upstream.- update aic94xx to upstream.- update aic7xxx to upstream.- update aic7xxx_old to upstream.- update aacraid to upstream.- update mlx4_ib to upstream.- update fnic to upstream.- update lpfc to upstream.- update megaraid to vendor\'s drop.- update cxgb3i to upstream.- update mptsas to upstream.- update mpt2sas to upstream- update cciss to upstream.- update cpqarray to upstream.
* Tue Dec 14 2010 Tina Yang - add netfront netconsole support (Tina Yang) [orabug 10115460]- add netconsole over bonding support (Tina Yang) [orabug 10090882]
* Tue Dec 14 2010 Joe Jin [2.6.32-100.23.25.el5]- Fix bnx2x driver panic. (Joe Jin) [orabug 10393605]- Fix pv guest migrate hung (Joe Jin) [orabug 10114101]
* Wed Dec 08 2010 Guru Anbalagane [2.6.32-100.23.24.el5]- update bnx2 to upstream(2.0.18) (Joe Jin) - update bnx2x to upstream(1.60.00-4)- update cnic to upstream(2.2.6)- update tg3 to upstream(3.115)- update enic to upstream(1.4.1.6)- update cxgb3 to upstream(1.1.4-ko)- update e100 to upstream(3.5.24-k2-NAPI)- update e1000 to upstream(7.3.21-k8-NAPI)- update e1000e to upstream(1.2.7-k2)- update igb to upstream(2.1.0-k2)- update ixgb to upstream(1.0.135-k2-NAPI)- update ixgbe to upstream(2.0.84-k2)- update igbvf to upstream(1.0.0-k0)- update ixgbevf to upstream(1.0.0-k0)- update bna to upstream (2.3.2)- update bfa to upstream(2.3.2.0)- update be2net to upstream(2.103.175u)
* Tue Dec 07 2010 Keshav Sharma [2.6.32-100.23.23.el5]- Fixed debuginfo package build issue
* Mon Dec 06 2010 Keshav Sharma [2.6.32-100.23.22.el5]- Changes Package name from kernel to kernel-uek.
* Fri Dec 03 2010 Guru Anbalagane [2.6.32-100.23.21.el5]- CVE\'s from RHSA-2010:0842-01
* Thu Dec 02 2010 Guru Anbalagane [2.6.32-100.23.20.el5]- Back-port xen blkfront performance improvements from upstream [orabug 10115222]- fix underflow of process execution time [ orabug 10132286]- Find an unbound irq number in reverse order (high to low) [ orabug 10096783] - retry page fault when blocking on disk transfer [ orabug 10090014]
* Tue Nov 09 2010 Chris Mason [2.6.32-100.23.1.el5]- Fix LACP bonding mode (Tina Yang)
* Tue Oct 26 2010 Chris Mason [2.6.32-100.22.1.el5]- Fix grat arps on bonded interfaces (Tina Yang)
* Sat Oct 23 2010 Greg Marsden [2.6.32-100.21.1.el5]
* [rds] fix access issue with rds (Chris Mason) {CVE-2010-3904}
* Thu Oct 21 2010 Srinivas Eeda [2.6.32-100.20.1.el5_errata1]- [fuse] linux-2.6.32-fuse-return-EGAIN-if-not-connected-bug-10154489.patch- [net] linux-2.6.32-net-sched-fix-kernel-leak-in-act_police.patch- [aio] linux-2.6.32-aio-check-for-multiplication-overflow-in-do_io_subm.patch
* Fri Oct 01 2010 Guru Anbalagane [2.6.32-100.20.1.el5]- [fs] xfs: return inode fork offset in bulkstat for fsr (Dave Chinner)- [fs] xfs: always use iget in bulkstat (Dave Chinner) {CVE-2010-2943}- [fs] xfs: validate untrusted inode numbers during lookup (Dave Chinner) {CVE-2010-2943}- [fs] xfs: rename XFS_IGET_BULKSTAT to XFS_IGET_UNTRUSTED (Dave Chinner) {CVE-2010-2943}- [net] net sched: fix some kernel memory leaks (Eric Dumazet) {CVE-2010-2942}- [fs] ocfs2: Don\'t walk off the end of fast symlinks (Joel Becker)
* Sat Sep 18 2010 Chris Mason [2.6.32-100.0.19.el5]- Add fix for 32 bit compat bugs
* Fri Sep 17 2010 Chris Mason [2.6.32-100.0.18.el5]- Fix scheduler regression with taskset- Add support for new ixgbe card- Fix kernel-doc build
* Wed Sep 15 2010 Chris Mason [2.6.32-100.0.17.el5]- Add driver updates- Update ocfs2- Enable debug builds- Enable doc builds- Fix scsi rq completion on errors- Add LPFC update for DIF/DIX
* Tue Sep 14 2010 Chris Mason [2.6.32-100.0.16.el5]- Backport accept_local sys tunable, default to 1
* Fri Sep 10 2010 Chris Mason [2.6.32-100.0.15.el5]- Panic on oops by default
* Thu Sep 09 2010 Chris Mason [2.6.32-100.0.14.el5]- Stable update to 2.6.32.21- Enable CONFIG_NO_HZ
* Tue Sep 07 2010 Chris Mason [2.6.32-100.0.13.el5]- Fix RT scheduler bottleneck
* Sat Sep 04 2010 Guru Anbalagane [2.6.32-100.0.12.el5]- fix ipmi sunoem cli busy issue
* Fri Sep 03 2010 Chri Mason [2.6.32-100.0.11.el5]- Change network drivers to contribute to entropy- Update OCFS2
* Sat Aug 28 2010 Chri Mason [2.6.32-100.0.10.el5]- Add backported IPMI fixes from 2.6.35
* Thu Aug 26 2010 Chri Mason [2.6.32-100.0.9.el5]- Use deadline io scheduler by default.
* Sat Aug 21 2010 Chri Mason [2.6.32-100.0.8.el5]- Fix AIO spinlock contention w/igrab- Add back ipmi_si tunables from 2.6.18 EL5
* Thu Aug 12 2010 Chuck Anderson [2.6.32-100.0.7.el5]- add mechanism to change termal event report interval (chuck.andersonAATToracle.com) [orabug 9966307]
* Wed Aug 04 2010 Chris Mason [2.6.32-100.0.6.el5]- Turn on sched_compat_yield by default (java go faster please)- Backport anon_vma fixes from 2.6.35- Turn off AER error reporting for PCIe, it is causing problems on some Sun hardware.
* Tue Aug 03 2010 Srinivas Maturi [2.6.32-100.0.4.el5]- Add pre install script to check for /dev/hd references in /etc/fstab
* Fri Jul 30 2010 Guru Anbalagane [2.6.32-100.0.3.el5]- update mptsas to 4.22- update megaraid_sas to 4.31-ieee- backout changes related to nr_cpus > 1024
* Sat Jul 24 2010 Sunil Mushran [2.6.32-100.0.2.el5]- Updated ocfs2 version to 1.6.2- Added datavolume mount option
* Fri Jul 23 2010 Chris Mason [2.6.32-100.0.1.el5]- Turn off the intel iommu by default for performance reasons
* Thu Jul 22 2010 Chris Mason [2.6.32-100.el5]- Change firewalling conntrack into a module- Update the spec to include oracleasm provides:
* Wed Jul 21 2010 Chris Mason - Add module signing code
* Wed Jul 21 2010 Chris Mason - Add oracleasm 2.0.6
* Tue Jul 13 2010 Chris Mason - Update to 2.6.32.y kernel base- Include patches to reduce IPC lock contention- Backport receive packet steering code- Expose list of msi-irqs per device into sysfs