[El-errata] ELSA-2007-0939 Important: Enterprise Linux 4 kernel security update

[el-errata at oss.oracle.com]

Enterprise Linux Security Advisory ELSA-2007-0939

https://rhn.redhat.com/errata/RHSA-2007-0939.html

The following updated rpms for Enterprise Linux 4 have been uploaded to 
the Unbreakable Linux Network:

i386:
kernel-2.6.9-55.0.12.0.1.EL.i686.rpm
kernel-devel-2.6.9-55.0.12.0.1.EL.i686.rpm
kernel-doc-2.6.9-55.0.12.0.1.EL.noarch.rpm
kernel-hugemem-2.6.9-55.0.12.0.1.EL.i686.rpm
kernel-hugemem-devel-2.6.9-55.0.12.0.1.EL.i686.rpm
kernel-smp-2.6.9-55.0.12.0.1.EL.i686.rpm
kernel-smp-devel-2.6.9-55.0.12.0.1.EL.i686.rpm
kernel-xenU-2.6.9-55.0.12.0.1.EL.i686.rpm
kernel-xenU-devel-2.6.9-55.0.12.0.1.EL.i686.rpm


x86_64:
kernel-2.6.9-55.0.12.0.1.EL.x86_64.rpm
kernel-devel-2.6.9-55.0.12.0.1.EL.x86_64.rpm
kernel-doc-2.6.9-55.0.12.0.1.EL.noarch.rpm
kernel-largesmp-2.6.9-55.0.12.0.1.EL.x86_64.rpm
kernel-largesmp-devel-2.6.9-55.0.12.0.1.EL.x86_64.rpm
kernel-smp-2.6.9-55.0.12.0.1.EL.x86_64.rpm
kernel-smp-devel-2.6.9-55.0.12.0.1.EL.x86_64.rpm
kernel-xenU-2.6.9-55.0.12.0.1.EL.x86_64.rpm
kernel-xenU-devel-2.6.9-55.0.12.0.1.EL.x86_64.rpm


SRPMS:
http://oss.oracle.com/el4/SRPMS-updates/kernel-2.6.9-55.0.12.0.1.EL.src.rpm

The following packages were rebuilt to be in sync with the updated kernel version (no changes other than updating the version number):



i386:
oracleasm-2.6.9-55.0.12.0.1.EL-2.0.3-2.i686.rpm
oracleasm-2.6.9-55.0.12.0.1.ELhugemem-2.0.3-2.i686.rpm
oracleasm-2.6.9-55.0.12.0.1.ELsmp-2.0.3-2.i686.rpm
ocfs2-2.6.9-55.0.12.0.1.EL-1.2.5-6.i686.rpm
ocfs2-2.6.9-55.0.12.0.1.ELhugemem-1.2.5-6.i686.rpm
ocfs2-2.6.9-55.0.12.0.1.ELsmp-1.2.5-6.i686.rpm

x86_64:
oracleasm-2.6.9-55.0.12.0.1.EL-2.0.3-2.x86_64.rpm
oracleasm-2.6.9-55.0.12.0.1.ELlargesmp-2.0.3-2.x86_64.rpm
oracleasm-2.6.9-55.0.12.0.1.ELsmp-2.0.3-2.x86_64.rpm
ocfs2-2.6.9-55.0.12.0.1.EL-1.2.5-6.x86_64.rpm
ocfs2-2.6.9-55.0.12.0.1.ELlargesmp-1.2.5-6.x86_64.rpm
ocfs2-2.6.9-55.0.12.0.1.ELsmp-1.2.5-6.x86_64.rpm


SRPMS:
http://oss.oracle.com/el4/SRPMS-updates/oracleasm-2.6.9-55.0.12.0.1.EL-2.0.3-2.src.rpm
http://oss.oracle.com/el4/SRPMS-updates/ocfs2-2.6.9-55.0.12.0.1.EL-1.2.5-6.src.rpm

Description of changes:

[2.6.9-55.0.12.0.1]
- fix entropy flag in bnx2 driver to generate entropy pool (John 
Sobecki)  [orabug 5931647]
- fix for nfs open call taking longer issue (Chuck Lever) orabug 5580407 
bz [219412]
- fix  enomem due to larger mtu size page alloc (Zach Brown) orabug 5486128
- fix per_cpu() api bug_on with rds (Zach Brown) orabug 5760648
- limit nr_requests in cfq io scheduler ( Jens Axboe) bz 234278 orabug 
5899829

[2.6.9-55.0.12]
- update: deadlock from recursive call through netpoll_send_skb (Neil 
Horman) [328351]
- fix machine check errors with Clovertown G0-step CPU (Geoff Gustafson) 
[320791]
- fix disable block layer bouncing for most memory on 64bit systems (Jim 
Paradis) [330111]

[2.6.9-55.0.11]
- fix denial of service with wedged processes (Vitaly Mayatskikh) 
[302931] {CVE-2006-6921}
- fix stack growing into hugetlb reserved regions (Vitaly Mayatskikh) 
[294971] {CVE-2007-3739}
- fix creating of RHEL4u5 guest domain on i686 RHEL-5.1 host (Chris 
Lalancette) [251013]
- fix memory leak in __bio_map_user (Eric Sandeen) [328371]
- fix deadlock from recursive call through netpoll_send_skb (Neil 
Horman) [328351]
- fix ALSA memory disclosure flaw (Vitaly Mayatskikh) [297741] 
{CVE-2007-4571}
- fix missing ioctl() permission checks in aacraid driver (Vitaly 
Mayatskikh) [298341] {CVE-2007-4308}
- fix VFAT compat ioctls DoS on 64-bit (Eric Sandeen) [253316] 
{CVE-2007-2878}

[2.6.9-55.0.10]
- fix: automounter hangs with rapid access to the same mount point when 
the system is under high load (Ian Kent) [309781]
- restored: all patches from 2.6.9-55.0.7