[El-errata] ELSA-2009-1193 Important: Enterprise Linux 5 kernel security and bug fix update

[Errata Announcements for Enterprise Linux]

Enterprise Linux Security Advisory ELSA-2009-1193

https://rhn.redhat.com/errata/RHSA-2009-1193.html

The following updated rpms for Enterprise Linux 5 have been uploaded to 
the Unbreakable Linux Network:

i386:
kernel-2.6.18-128.4.1.0.1.el5.i686.rpm
kernel-PAE-2.6.18-128.4.1.0.1.el5.i686.rpm
kernel-PAE-devel-2.6.18-128.4.1.0.1.el5.i686.rpm
kernel-debug-2.6.18-128.4.1.0.1.el5.i686.rpm
kernel-debug-devel-2.6.18-128.4.1.0.1.el5.i686.rpm
kernel-devel-2.6.18-128.4.1.0.1.el5.i686.rpm
kernel-doc-2.6.18-128.4.1.0.1.el5.noarch.rpm
kernel-headers-2.6.18-128.4.1.0.1.el5.i386.rpm
kernel-xen-2.6.18-128.4.1.0.1.el5.i686.rpm
kernel-xen-devel-2.6.18-128.4.1.0.1.el5.i686.rpm

x86_64:
kernel-2.6.18-128.4.1.0.1.el5.x86_64.rpm
kernel-debug-2.6.18-128.4.1.0.1.el5.x86_64.rpm
kernel-debug-devel-2.6.18-128.4.1.0.1.el5.x86_64.rpm
kernel-devel-2.6.18-128.4.1.0.1.el5.x86_64.rpm
kernel-doc-2.6.18-128.4.1.0.1.el5.noarch.rpm
kernel-headers-2.6.18-128.4.1.0.1.el5.x86_64.rpm
kernel-xen-2.6.18-128.4.1.0.1.el5.x86_64.rpm
kernel-xen-devel-2.6.18-128.4.1.0.1.el5.x86_64.rpm


SRPMS:
http://oss.oracle.com/el5/SRPMS-updates/kernel-2.6.18-128.4.1.0.1.el5.src.rpm

The following packages were rebuilt to be in sync with the updated 
kernel version (no changes other than updating the version number):

i386:
oracleasm-2.6.18-128.4.1.0.1.el5-2.0.5-1.el5.i686.rpm
oracleasm-2.6.18-128.4.1.0.1.el5PAE-2.0.5-1.el5.i686.rpm
oracleasm-2.6.18-128.4.1.0.1.el5xen-2.0.5-1.el5.i686.rpm
oracleasm-2.6.18-128.4.1.0.1.el5debug-2.0.5-1.el5.i686.rpm
ocfs2-2.6.18-128.4.1.0.1.el5-1.2.9-1.el5.i686.rpm
ocfs2-2.6.18-128.4.1.0.1.el5PAE-1.2.9-1.el5.i686.rpm
ocfs2-2.6.18-128.4.1.0.1.el5xen-1.2.9-1.el5.i686.rpm
ocfs2-2.6.18-128.4.1.0.1.el5debug-1.2.9-1.el5.i686.rpm
ocfs2-2.6.18-128.4.1.0.1.el5-1.4.2-1.el5.i686.rpm
ocfs2-2.6.18-128.4.1.0.1.el5PAE-1.4.2-1.el5.i686.rpm
ocfs2-2.6.18-128.4.1.0.1.el5xen-1.4.2-1.el5.i686.rpm
ocfs2-2.6.18-128.4.1.0.1.el5debug-1.4.2-1.el5.i686.rpm

x86_64:
oracleasm-2.6.18-128.4.1.0.1.el5-2.0.5-1.el5.x86_64.rpm
oracleasm-2.6.18-128.4.1.0.1.el5xen-2.0.5-1.el5.x86_64.rpm
oracleasm-2.6.18-128.4.1.0.1.el5debug-2.0.5-1.el5.x86_64.rpm
ocfs2-2.6.18-128.4.1.0.1.el5-1.2.9-1.el5.x86_64.rpm
ocfs2-2.6.18-128.4.1.0.1.el5xen-1.2.9-1.el5.x86_64.rpm
ocfs2-2.6.18-128.4.1.0.1.el5debug-1.2.9-1.el5.x86_64.rpm
ocfs2-2.6.18-128.4.1.0.1.el5-1.4.2-1.el5.x86_64.rpm
ocfs2-2.6.18-128.4.1.0.1.el5xen-1.4.2-1.el5.x86_64.rpm
ocfs2-2.6.18-128.4.1.0.1.el5debug-1.4.2-1.el5.x86_64.rpm


SRPMS:
http://oss.oracle.com/el5/SRPMS-updates/oracleasm-2.6.18-128.4.1.0.1.el5-2.0.5-1.el5.src.rpm
http://oss.oracle.com/el5/SRPMS-updates/ocfs2-2.6.18-128.4.1.0.1.el5-1.2.9-1.el5.src.rpm
http://oss.oracle.com/el5/SRPMS-updates/ocfs2-2.6.18-128.4.1.0.1.el5-1.4.2-1.el5.src.rpm

Description of changes:

[2.6.18-128.4.1.0.1.el5]
- [NET] Add entropy support to e1000 and bnx2 (John Sobecki,Guru 
Anbalagane) [orabug 6045759]
- [MM]  shrink zone patch (John Sobecki,Chris Mason) [orabug 6086839]
- [NET] Add xen pv/bonding  netconsole support (Tina yang) [orabug 
6993043] [bz 7258]
- [nfs] convert ENETUNREACH to ENOTCONN (Guru Anbalagane) [orabug 7689332]
- [xen] check to see if hypervisor supports memory reservation change 
(Chuck Anderson) [orabug 7556514]
- [MM] balloon code needs to adjust totalhigh_pages (Chuck Anderson)  
[orabug 8300888]
- [NET] Add entropy support to igb ( John Sobecki) [orabug 7607479]
- [XEN] use hypercall to fixmap pte updates (Mukesh Rathor) [orabug 8433329]
- [XEN] Extend physical mask to 40bit for machine above 64G [orabug 8312526]

[2.6.18-128.4.1.el5]
- [fs] ecryptfs: check tag 11 packet literal data buffer size (Eric 
Sandeen ) [512862 512863] {CVE-2009-2
406}
- [fs] ecryptfs: check tag 3 packet encrypted key size (Eric Sandeen ) 
[512886 512887] {CVE-2009-2407}
- [misc] personality handling: fix PER_CLEAR_ON_SETID (Vitaly Mayatskikh 
) [511173 508842] {CVE-2009-1895}
- [xen] HV: remove high latency spin_lock (Chris Lalancette ) [512311 
459410]

[2.6.18-128.3.1.el5]
- [pci] quirk: disable MSI on VIA VT3364 chipsets (Dean Nelson ) [507529 
501374]
- [char] tty: prevent an O_NDELAY writer from blocking (Mauro Carvalho 
Chehab ) [510239 506806]
- [misc] hrtimer: fix a soft lockup (Amerigo Wang ) [418061 418071] 
{CVE-2007-5966}
- [misc] hrtimer: check relative timeouts for overflow (AMEET M. 
PARANJAPE ) [510018 492230]