[El-errata] ELSA-2011-0004 Important: Oracle Linux 5 kernel security, bug fix, and enhancement update
Errata Announcements for Oracle Linux
el-errata at oss.oracle.com
Wed Jan 5 11:12:24 PST 2011
Oracle Linux Security Advisory ELSA-2011-0004
https://rhn.redhat.com/errata/RHSA-2011-0004.html
The following updated rpms for Oracle Linux 5 have been uploaded to the
Unbreakable Linux Network:
i386:
kernel-2.6.18-194.32.1.0.1.el5.i686.rpm
kernel-PAE-2.6.18-194.32.1.0.1.el5.i686.rpm
kernel-PAE-devel-2.6.18-194.32.1.0.1.el5.i686.rpm
kernel-debug-2.6.18-194.32.1.0.1.el5.i686.rpm
kernel-debug-devel-2.6.18-194.32.1.0.1.el5.i686.rpm
kernel-devel-2.6.18-194.32.1.0.1.el5.i686.rpm
kernel-doc-2.6.18-194.32.1.0.1.el5.noarch.rpm
kernel-headers-2.6.18-194.32.1.0.1.el5.i386.rpm
kernel-xen-2.6.18-194.32.1.0.1.el5.i686.rpm
kernel-xen-devel-2.6.18-194.32.1.0.1.el5.i686.rpm
x86_64:
kernel-2.6.18-194.32.1.0.1.el5.x86_64.rpm
kernel-debug-2.6.18-194.32.1.0.1.el5.x86_64.rpm
kernel-debug-devel-2.6.18-194.32.1.0.1.el5.x86_64.rpm
kernel-devel-2.6.18-194.32.1.0.1.el5.x86_64.rpm
kernel-doc-2.6.18-194.32.1.0.1.el5.noarch.rpm
kernel-headers-2.6.18-194.32.1.0.1.el5.x86_64.rpm
kernel-xen-2.6.18-194.32.1.0.1.el5.x86_64.rpm
kernel-xen-devel-2.6.18-194.32.1.0.1.el5.x86_64.rpm
ia64:
kernel-2.6.18-194.32.1.0.1.el5.ia64.rpm
kernel-debug-2.6.18-194.32.1.0.1.el5.ia64.rpm
kernel-debug-devel-2.6.18-194.32.1.0.1.el5.ia64.rpm
kernel-devel-2.6.18-194.32.1.0.1.el5.ia64.rpm
kernel-doc-2.6.18-194.32.1.0.1.el5.noarch.rpm
kernel-headers-2.6.18-194.32.1.0.1.el5.ia64.rpm
kernel-xen-2.6.18-194.32.1.0.1.el5.ia64.rpm
kernel-xen-devel-2.6.18-194.32.1.0.1.el5.ia64.rpm
SRPMS:
http://oss.oracle.com/el5/SRPMS-updates/kernel-2.6.18-194.32.1.0.1.el5.src.rpm
The following packages were rebuilt to be in sync with the updated
kernel version (no changes other than updating the version number):
i386:
oracleasm-2.6.18-194.32.1.0.1.el5-2.0.5-1.el5.i686.rpm
oracleasm-2.6.18-194.32.1.0.1.el5PAE-2.0.5-1.el5.i686.rpm
oracleasm-2.6.18-194.32.1.0.1.el5xen-2.0.5-1.el5.i686.rpm
oracleasm-2.6.18-194.32.1.0.1.el5debug-2.0.5-1.el5.i686.rpm
ocfs2-2.6.18-194.32.1.0.1.el5-1.4.7-1.el5.i686.rpm
ocfs2-2.6.18-194.32.1.0.1.el5PAE-1.4.7-1.el5.i686.rpm
ocfs2-2.6.18-194.32.1.0.1.el5xen-1.4.7-1.el5.i686.rpm
ocfs2-2.6.18-194.32.1.0.1.el5debug-1.4.7-1.el5.i686.rpm
x86_64:
oracleasm-2.6.18-194.32.1.0.1.el5-2.0.5-1.el5.x86_64.rpm
oracleasm-2.6.18-194.32.1.0.1.el5xen-2.0.5-1.el5.x86_64.rpm
oracleasm-2.6.18-194.32.1.0.1.el5debug-2.0.5-1.el5.x86_64.rpm
ocfs2-2.6.18-194.32.1.0.1.el5-1.4.7-1.el5.x86_64.rpm
ocfs2-2.6.18-194.32.1.0.1.el5xen-1.4.7-1.el5.x86_64.rpm
ocfs2-2.6.18-194.32.1.0.1.el5debug-1.4.7-1.el5.x86_64.rpm
ia64:
oracleasm-2.6.18-194.32.1.0.1.el5-2.0.5-1.el5.ia64.rpm
oracleasm-2.6.18-194.32.1.0.1.el5xen-2.0.5-1.el5.ia64.rpm
oracleasm-2.6.18-194.32.1.0.1.el5debug-2.0.5-1.el5.ia64.rpm
ocfs2-2.6.18-194.32.1.0.1.el5-1.4.7-1.el5.ia64.rpm
ocfs2-2.6.18-194.32.1.0.1.el5xen-1.4.7-1.el5.ia64.rpm
ocfs2-2.6.18-194.32.1.0.1.el5debug-1.4.7-1.el5.ia64.rpm
SRPMS:
http://oss.oracle.com/el5/SRPMS-updates/oracleasm-2.6.18-194.32.1.0.1.el5-2.0.5-1.el5.src.rpm
http://oss.oracle.com/el5/SRPMS-updates/ocfs2-2.6.18-194.32.1.0.1.el5-1.4.7-1.el5.src.rpm
Description of changes:
[2.6.18-194.32.1.0.1.el5]
- [xen] check to see if hypervisor supports memory reservation change
(Chuck Anderson) [orabug 7556514]
- Add entropy support to igb (John Sobecki) [orabug 7607479]
- [nfs] convert ENETUNREACH to ENOTCONN [orabug 7689332]
- [NET] Add xen pv/bonding netconsole support (Tina Yang) [orabug 6993043]
[bz 7258]
- [mm] shrink_zone patch (John Sobecki,Chris Mason) [orabug 6086839]
- fix aacraid not to reset during kexec (Joe Jin) [orabug 8516042]
- [nfsd] fix failure of file creation from hpux client (Wen gang Wang)
[orabug 7579314]
- [qla] fix qla not to query hccr (Guru Anbalagane) [Orabug 8746702]
- [net] bonding: fix xen+bonding+netconsole panic issue (Joe Jin)
[orabug 9504524]
- [rds] Patch rds to 1.4.2-14 (Andy Grover) [orabug 9471572, 9344105]
RDS: Fix BUG_ONs to not fire when in a tasklet
ipoib: Fix lockup of the tx queue
RDS: Do not call set_page_dirty() with irqs off (Sherman Pun)
RDS: Properly unmap when getting a remote access error (Tina Yang)
RDS: Fix locking in rds_send_drop_to()
- [mm] Enhance shrink_zone patch allow full swap utilization, and also be
NUMA-aware (John Sobecki, Chris Mason, Herbert van den Bergh)
[orabug 9245919]
- [xen] PVHVM guest with PoD crashes under memory pressure (Chuck Anderson)
[orabug 9107465]
- [xen] PV guest with FC HBA hangs during shutdown (Chuck Anderson)
[orabug 9764220]
- Support 256GB+ memory for pv guest (Mukesh Rathor) [orabug 9450615]
- fix overcommit memory to use percpu_counter for el5 (KOSAKI Motohiro,
Guru Anbalagane) [orabug 6124033]
- [ipmi] make configurable timeouts for kcs of ipmi [orabug 9752208]
- [ib] fix memory corruption (Andy Grover) [orabug 9972346]
- make xenkbd.abs_pointer=1 by default (John Haxby) [orabug 67188919]
- fix filp_close() race (Joe Jin) [orabug 10335998]
[2.6.18-194.32.1.el5]
- [fs] nfs: set lock_context field in nfs_readpage_sync (Jeff Layton)
[664416 663853]
[2.6.18-194.31.1.el5]
- [fs] nfs: set lock_context field in nfs_writepage_sync (Jeff Layton)
[663381 660580]
- [fs] nfs: remove problematic calls to nfs_clear_request (Jeff Layton)
[663353 656492]
- [fs] nfs: handle alloc failures in nfs_create_request (Jeff Layton)
[663353 656492]
- [fs] nfs: clean up nfs_create_request (Jeff Layton) [663353 656492]
- [virt] xen: fix netback hotplug regression in xenbus fix (Laszlo
Ersek) [636412 635999] {CVE-2010-3699}
[2.6.18-194.30.1.el5]
- [scsi] lpfc: set heartbeat timer off by default (Rob Evers) [658079
655119]
- [misc] posix-cpu-timers: workaround for mt exec problems (Oleg
Nesterov) [656265 656266] {CVE-2010-4248}
- [fs] setup_arg_pages: diagnose excessive argument size (Oleg Nesterov)
[645226 645227] {CVE-2010-3858}
- [net] inet_diag: make sure we run audited bytecode (Jiri Pirko)
[651266 651267] {CVE-2010-3880}
- [net] limit sendto/recvfrom/iovec total length to INT_MAX (Jiri Pirko)
[645871 645872] {CVE-2010-3859}
- [bluetooth] hci_ldisc: fix missing NULL check (Jarod Wilson) [655664
655666] {CVE-2010-4242}
- [virt] xen: add bounds req-process loop in blkback/blktap (Laszlo
Ersek) [656208 654546] {CVE-2010-4247}
- [virt] xen: don't leak dev refs on bad xenbus transitions (Laszlo
Ersek) [636412 635999] {CVE-2010-3699}
- [scsi] lpfc: fix crashes on NULL pnode dereference (Rob Evers) [658864
649489]
- [scsi] qla2xxx: check null fcport in _queuecommands (Chad Dupuis)
[657029 644863]
- [fs] gfs2: fix race in unlinked inode deallocation (Robert S Peterson)
[651811 643165]
- [scsi] lpfc: fix a BUG_ON in lpfc_abort_handler (Rob Evers) [658378
639028]
- [scsi] re-enable transistions from OFFLINE to RUNNING (Mike Christie)
[658934 641193]
- [scsi] scsi_dh_alua: handle transitioning state correctly (Mike
Snitzer) [657028 619361]
- [misc] add round_jiffies_up and related routines (Michal Schmidt)
[658520 556476]
- [fs] fix dcache accounting bug (Josef Bacik) [658857 596548]
- [usb] uhci: fix oops in uhci_scan_schedule (Pete Zaitcev) [657319 516851]
- [scsi] lpfc: fix panic in lpfc_scsi_cmd_iocb_cmpl (Rob Evers) [658379
603806]
[2.6.18-194.29.1.el5]
- [net] rds: fix rds_iovec page count overflow (Jiri Pirko) [647421
647422] {CVE-2010-3865}
- [net] fix deadlock in sock_queue_rcv_skb (Danny Feng) [652536 652537]
{CVE-2010-4161}
- [net] packet: fix information leak to userland (Jiri Pirko) [649897
649898] {CVE-2010-3876}
- [ipc] sys_semctl: fix kernel stack leakage (Danny Feng) [648721
648722] {CVE-2010-4083}
- [misc] kernel: remove yield from stop_machine paths (Oleg Nesterov)
[651818 634454]
- [fs] dlm: reduce cond_resched during send (David Teigland) [653335 604139]
- [fs] dlm: use TCP_NODELAY (David Teigland) [653335 604139]
- [net] sctp: do not reset packet during sctp_packet_config (Jiri Pirko)
[637866 637867] {CVE-2010-3432}
- [net] bonding: no lock on copy/clear VLAN list on slave (Andy
Gospodarek) [652561 627974]
- [scsi] gdth: prevent integer overflow in ioc_general (Frantisek
Hrbata) [651175 651176] {CVE-2010-4157}
- [kernel] add stop_machine barrier to fix lock contention (Prarit
Bhargava) [651818 634454]
[2.6.18-194.28.1.el5]
- [net] bnx2: Increase max rx ring size from 1K to 2K (Andy Gospodarek)
[649255 640026]
- [net] bnx2: fixup broken NAPI accounting (Andy Gospodarek) [649255 640026]
- [pci] include DL580 G7 in bfsort whitelist (Tony Camuso) [646765 644879]
- [sound] core: prevent heap corruption in snd_ctl_new (Jerome Marchand)
[638483 638484] {CVE-2010-3442}
- [net] ixgbe: add option to control interrupt mode (Andy Gospodarek)
[643339 571495]
- [fs] execve: fix interactivity and response to SIGKILL (Dave Anderson)
[643344 629176]
- [usb] fix test of wrong variable in create_by_name (Don Howard)
[643347 594635]
- [fs] gfs2: fix stuck in inode wait, no glocks stuck (Robert S
Peterson) [651805 595397]
- [net] gro: fix bogus gso_size on the first fraglist entry (Herbert Xu)
[648938 588015]
- [virt] xen: fix Connected state after netback dev closed (Paolo
Bonzini) [643345 591548]
- [net] tun: orphan an skb on tx (Michael S. Tsirkin) [643348 584412]
[2.6.18-194.27.1.el5]
- [net] netxen: fix set mac addr (Andy Gospodarek) [647681 562937]
More information about the El-errata
mailing list