[SECURITY] Fedora 14 Update: kernel-2.6.35.9-64.fc14
updates at fedoraproject.org
updates at fedoraproject.org
Sun Dec 5 00:42:46 UTC 2010
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-18493
2010-12-03 20:20:58
--------------------------------------------------------------------------------
Name : kernel
Product : Fedora 14
Version : 2.6.35.9
Release : 64.fc14
URL : http://www.kernel.org/
Summary : The Linux kernel
Description :
The kernel package contains the Linux kernel (vmlinuz), the core of any
Linux operating system. The kernel handles the basic functions
of the operating system: memory allocation, process allocation, device
input and output, etc.
--------------------------------------------------------------------------------
Update Information:
Various bug fixes and the stable 2.6.35.9 release.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 3 2010 Kyle McMartin <kyle at redhat.com> 2.6.35.9-64
- Enable hpilo.ko on x86_64 (#571329)
* Thu Dec 2 2010 Kyle McMartin <kyle at redhat.com>
- Grab some of Mel's fixes from -mmotm to hopefully sort out #649694.
* Mon Nov 29 2010 Kyle McMartin <kyle at redhat.com>
- PNP: log PNP resources, as we do for PCI [c1f3f281]
should help us debug resource conflicts (requested by bjorn.)
* Mon Nov 29 2010 Kyle McMartin <kyle at redhat.com>
- drm/ttm: Fix two race conditions + fix busy codepaths [1df6a2eb] (#615505)
* Fri Nov 26 2010 Kyle McMartin <kyle at redhat.com>
- Quiet a build warning the previous INET_DIAG fix caused.
* Fri Nov 26 2010 Kyle McMartin <kyle at redhat.com>
- Plug stack leaks in tty/serial drivers. (#648663, #648660)
* Fri Nov 26 2010 Kyle McMartin <kyle at redhat.com>
- r8169 fixes from sgruszka at redhat.com (#502974)
- hda/realtek: handle unset external amp bits (#657388)
* Wed Nov 24 2010 John W. Linville <linville at redhat.com>
- rtl8180: improve signal reporting for rtl8185 hardware
- rtl8180: improve signal reporting for actual rtl8180 hardware
* Tue Nov 23 2010 Kyle McMartin <kyle at redhat.com>
- zero struct memory in ipc compat (CVE-2010-4073) (#648658)
- zero struct memory in ipc shm (CVE-2010-4072) (#648656)
- fix logic error in INET_DIAG bytecode auditing (CVE-2010-3880) (#651264)
- posix-cpu-timers: workaround to suppress the problems with mt exec
(rhbz#656264)
* Tue Nov 23 2010 Kyle McMartin <kyle at redhat.com>
- fix-i8k-inline-asm.patch: backport gcc miscompilation fix from git
[22d3243d, 6b4e81db] (rhbz#647677)
* Mon Nov 22 2010 Jarod Wilson <jarod at redhat.com> 2.6.35.9-62
- Linux 2.6.35.9
- IR driver fixes from upstream
* fix keybounce/buffer parsing oddness w/mceusb
* properly wire up sysfs entries for mceusb and streamzap
* fix repeat w/streamzap
* misc lirc_dev fixes
* Sat Nov 20 2010 Chuck Ebbert <cebbert at redhat.com> 2.6.35.9-61.rc1
- Linux 2.6.35.9-rc1
- Comment out upstreamed patches:
kvm-fix-regression-with-cmpxchg8b-on-i386-hosts.patch
* Fri Nov 19 2010 Ben Skeggs <bskeggs at redhat.com> 2.6.35.8-60
- nouveau: add quirk for iMac G4 (rhbz#505161)
- nouveau: add workaround for display hang on GF8+ (rhbz#537065)
- nouveau: don't reject 3D object creation on NVAF (MBA3)
* Mon Nov 15 2010 Kyle McMartin <kyle at redhat.com>
- rhbz#651019: pull in support for MBA3.
* Thu Nov 11 2010 airlied at redhat.com - 2.6.35.8-55
- drm: fix EDID issues
* Wed Nov 10 2010 Justin M. Forbes <jforbes at redhat.com> 2.6.35.8-54
- fix regression with cmpxchg8b on i386 hosts (rhbz#650215)
* Wed Nov 10 2010 Jarod Wilson <jarod at redhat.com> 2.6.35.8-53
- Linux 2.6.35.8
- Drop patches upstreamed in 2.6.35.8
- More ir-core and lirc updates
- HD-PVR driver updates
* Tue Nov 9 2010 Dave Airlie <airlied at redhat.com> - 2.6.35.6-52
- add i915 polling s/r patch
* Mon Nov 8 2010 Dave Airlie <airlied at redhat.com> - 2.6.35.6-51
- Backport polling fixes + radeon hang fixes from upstream
* Tue Nov 2 2010 Ben Skeggs <bskeggs at redhat.com> 2.6.35.6-50
- nouveau: add potential workaround for NV86 hardware quirk
- fix issue that occurs in certain dual-head configurations (rhbz#641524)
* Sat Oct 23 2010 Jarod Wilson <jarod at redhat.com> 2.6.35.6-49
- Fix brown paper bag bug in imon driver
* Fri Oct 22 2010 Chuck Ebbert <cebbert at redhat.com> 2.6.35.6-48
- drm-i915-sanity-check-pread-pwrite.patch;
fix CVE-2010-2962, arbitrary kernel memory write via i915 GEM ioctl
- kvm-fix-fs-gs-reload-oops-with-invalid-ldt.patch;
fix CVE-2010-3698, kvm: invalid selector in fs/gs causes kernel panic
- v4l1-fix-32-bit-compat-microcode-loading-translation.patch;
fixes CVE-2010-2963, v4l: VIDIOCSMICROCODE arbitrary write
* Fri Oct 22 2010 Kyle McMartin <kyle at redhat.com> 2.6.35.6-47
- tpm-autodetect-itpm-devices.patch: Auto-fix TPM issues on various
laptops which prevented suspend/resume.
- depessimize-rds_copy_page_user.patch: Fix CVE-2010-3904, local
privilege escalation via RDS protocol.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #648660 - CVE-2010-4075 kernel: drivers/serial/serial_core.c: reading uninitialized stack memory
https://bugzilla.redhat.com/show_bug.cgi?id=648660
[ 2 ] Bug #648663 - CVE-2010-4077 kernel: drivers/char/nozomi.c: reading uninitialized stack memory
https://bugzilla.redhat.com/show_bug.cgi?id=648663
[ 3 ] Bug #648658 - CVE-2010-4073 kernel: ipc/compat*.c: reading uninitialized stack memory
https://bugzilla.redhat.com/show_bug.cgi?id=648658
[ 4 ] Bug #648656 - CVE-2010-4072 kernel: ipc/shm.c: reading uninitialized stack memory
https://bugzilla.redhat.com/show_bug.cgi?id=648656
[ 5 ] Bug #651264 - CVE-2010-3880 kernel: logic error in INET_DIAG bytecode auditing
https://bugzilla.redhat.com/show_bug.cgi?id=651264
[ 6 ] Bug #656264 - CVE-2010-4248 kernel: posix-cpu-timers: workaround to suppress the problems with mt exec
https://bugzilla.redhat.com/show_bug.cgi?id=656264
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update kernel' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
More information about the package-announce
mailing list