[Oraclevm-errata] OVMSA-2015-0040 Important: Oracle VM 3.3 kernel-uek security update

Errata Announcements for Oracle VM oraclevm-errata at oss.oracle.com
Tue Apr 7 09:31:53 PDT 2015


Oracle VM Security Advisory OVMSA-2015-0040

The following updated rpms for Oracle VM 3.3 have been uploaded to the 
Unbreakable Linux Network:

x86_64:
kernel-uek-3.8.13-68.1.2.el6uek.x86_64.rpm
kernel-uek-firmware-3.8.13-68.1.2.el6uek.noarch.rpm


SRPMS:
http://oss.oracle.com/oraclevm/server/3.3/SRPMS-updates/kernel-uek-3.8.13-68.1.2.el6uek.src.rpm



Description of changes:

[3.8.13-68.1.2.el6uek]
- IB/core: Prevent integer overflow in ib_umem_get address arithmetic 
(Shachar Raindel)  [Orabug: 20799875]  {CVE-2014-8159} {CVE-2014-8159}

[3.8.13-68.1.1.el6uek]
- xen-pciback: limit guest control of command register (Jan Beulich) 
[Orabug: 20697017]  {CVE-2015-2150} {CVE-2015-2150}
- net: sctp: fix slab corruption from use after free on INIT collisions 
(Daniel Borkmann)  [Orabug: 20780347]  {CVE-2015-1421}

[3.8.13-68.el6uek]
- ttusb-dec: buffer overflow in ioctl (Dan Carpenter)  [Orabug: 
20673373]  {CVE-2014-8884}
- mm: Fix NULL pointer dereference in madvise(MADV_WILLNEED) support 
(Kirill A. Shutemov)  [Orabug: 20673279]  {CVE-2014-8173}
- netfilter: conntrack: disable generic tracking for known protocols 
(Florian Westphal)  [Orabug: 20673235]  {CVE-2014-8160}

[3.8.13-67.el6uek]
- sparc64: Remove deprecated __GFP_NOFAIL from mdesc_kmalloc (Eric 
Snowberg)  [Orabug: 20055909] - x86/xen: allow privcmd hypercalls to be 
preempted (David Vrabel)  [Orabug: 20618880] - sched: Expose 
preempt_schedule_irq() (Thomas Gleixner)  [Orabug: 20618880] - 
xen-netfront: Fix handling packets on compound pages with skb_linearize 
(Zoltan Kiss)  [Orabug: 19546077] - qla2xxx: Add adapter checks for 
FAWWN functionality. (Saurav Kashyap)  [Orabug: 20474227] - config: 
enable CONFIG_MODULE_SIG_SHA512 (Guangyu Sun)  [Orabug: 20611400] - net: 
rds: use correct size for max unacked packets and bytes (Sasha Levin) 
[Orabug: 20585918] - watchdog: w83697hf_wdt: return ENODEV if no device 
was found (Stanislav Kholmanskikh)  [Orabug: 18122938] - NVMe: Disable 
pci before clearing queue (Keith Busch)  [Orabug: 20564650]

[3.8.13-66.el6uek]
- bnx2fc: upgrade to 2.8.2 (Dan Duval)  [Orabug: 20523502] - bnx2i: 
upgrade to 2.11.0.0 (Dan Duval)  [Orabug: 20523502] - bnx2x: upgrade to 
1.712.10 (Dan Duval)  [Orabug: 20523502] - cnic: upgrade to 2.721.01 
(Dan Duval)  [Orabug: 20523502] - bnx2: upgrade to 2.712.01 (Dan Duval) 
  [Orabug: 20523502] - Update lpfc version for 10.6.61 (rkennedy) 
[Orabug: 20539686] - Remove consolidated merge lines from previous 
patch, they require a 3.19 kernel to build with. (rkennedy)  [Orabug: 
20539686] - Implement support for wire-only DIF devices (rkennedy) 
[Orabug: 20539686] - lpfc: Update copyright to 2015 (rkennedy)  [Orabug: 
20539686] - lpfc: Update Copyright on changed files (James Smart) 
[Orabug: 20539686] - lpfc: Fix for lun discovery issue with 8Gig 
adapter. (rkennedy)  [Orabug: 20539686] - lpfc: Fix crash in device 
reset handler. (rkennedy)  [Orabug: 20539686] - lpfc: application causes 
OS crash when running diagnostics (rkennedy)  [Orabug: 20539686] - lpfc: 
Fix internal loopback failure (rkennedy)  [Orabug: 20539686] - lpfc: Fix 
premature release of rpi bit in bitmask (rkennedy)  [Orabug: 20539686] - 
lpfc: Initiator sends wrong BBCredit value for either FLOGI or FLOGI_ACC 
(rkennedy)  [Orabug: 20539686] - lpfc: Fix null ndlp derefernce in 
target_reset_handler (rkennedy)  [Orabug: 20539686] - lpfc: Fix FDMI 
Fabric support (rkennedy)  [Orabug: 20539686] - lpfc: Fix provide host 
name and OS name in RSNN-NN FC-GS command (rkennedy)  [Orabug: 20539686] 
- lpfc: Parse the new 20G, 25G and 40G link speeds in the lpfc driver 
(rkennedy)  [Orabug: 20539686] - lpfc: lpfc does not support 
option_rom_version sysfs attribute on newer adapters (rkennedy) 
[Orabug: 20539686] - lpfc: Fix setting of EQ delay Multiplier (rkennedy) 
  [Orabug: 20539686] - lpfc: Fix host reset escalation killing all IOs. 
(rkennedy)  [Orabug: 20539686] - lpfc: Linux lpfc driver doesn't 
re-establish the link after a cable pull on LPe12002 (rkennedy) 
[Orabug: 20539686] - lpfc: Fix to handle PLOGI when already logged in 
(rkennedy)  [Orabug: 20539686] - lpfc: EnableBootCode from hbacmd fails 
on Lancer (rkennedy)  [Orabug: 20539686] - lpfc: Add Lancer Temperature 
Event support to the lpfc driver (rkennedy)  [Orabug: 20539686] - lpfc: 
Fix the iteration count to match the 30 sec comment (rkennedy)  [Orabug: 
20539686] - lpfc: fix low priority issues from fortify source code scan 
(James Smart)  [Orabug: 20539686] - lpfc: fix high priority issues from 
fortify source code scan (James Smart)  [Orabug: 20539686] - lpfc: fix 
for handling unmapped ndlp in target reset handler (James Smart) 
[Orabug: 20539686] - lpfc: fix crash from page fault caused by use after 
rport delete (James Smart)  [Orabug: 20539686] - lpfc: fix locking 
issues with abort data paths (James Smart)  [Orabug: 20539686] - lpfc: 
fix race between LOGO/PLOGI handling causing NULL pointer (James Smart) 
  [Orabug: 20539686] - lpfc: fix quarantined XRI recovery qualifier 
state in link bounce (James Smart)  [Orabug: 20539686] - lpfc: fix 
discovery timeout during nameserver login (James Smart)  [Orabug: 
20539686] - lpfc: fix IP Reset processing - wait for RDY before 
proceeding (James Smart)  [Orabug: 20539686] - lpfc: Update lpfc version 
to driver version 10.2.8000.0 (James Smart)  [Orabug: 20539686] - net: 
Check for presence of IFLA_AF_SPEC (Thomas Graf)  [Orabug: 20382857] - 
net: Validate IFLA_BRIDGE_MODE attribute length (Thomas Graf)  [Orabug: 
20382857] - be2net: fix alignment on line wrap (Kalesh AP)  [Orabug: 
20382857] - be2net: remove multiple assignments on a single line (Kalesh 
AP)  [Orabug: 20382857] - be2net: remove space after typecasts (Kalesh 
AP)  [Orabug: 20382857] - be2net: remove unnecessary blank lines after 
an open brace (Kalesh AP)  [Orabug: 20382857] - be2net: insert a blank 
line after function/struct//enum definitions (Kalesh AP)  [Orabug: 
20382857] - be2net: remove multiple blank lines (Kalesh AP)  [Orabug: 
20382857] - be2net: add blank line after declarations (Kalesh AP) 
[Orabug: 20382857] - be2net: remove return statements for void functions 
(Kalesh AP)  [Orabug: 20382857] - be2net: add speed reporting for 20G-KR 
interface (Vasundhara Volam)  [Orabug: 20382857] - be2net: add speed 
reporting for 40G/KR interface (Kalesh AP)  [Orabug: 20382857] - be2net: 
fix sparse warnings in be_cmd_req_port_type{} (Suresh Reddy)  [Orabug: 
20382857] - be2net: fix a sparse warning in be_cmd_modify_eqd() (Kalesh 
AP)  [Orabug: 20382857] - enic: fix rx napi poll return value 
(Govindarajulu Varadarajan)  [Orabug: 20342354] - net: rename vlan_tx_* 
helpers since "tx" is misleading there (Jiri Pirko)  [Orabug: 20342354] 
- enic: free all rq buffs when allocation fails (Govindarajulu 
Varadarajan)  [Orabug: 20342354] - net: ethernet: cisco: enic: enic_dev: 
Remove some unused functions (Rickard Strandqvist)  [Orabug: 20342354] - 
enic: add stats for dma mapping error (Govindarajulu Varadarajan) 
[Orabug: 20342354] - enic: check dma_mapping_error (Govindarajulu 
Varadarajan)  [Orabug: 20342354] - enic: make vnic_wq_buf doubly linked 
(Govindarajulu Varadarajan)  [Orabug: 20342354] - enic: fix rx skb 
checksum (Govindarajulu Varadarajan)  [Orabug: 20342354] - enic: fix 
work done in tx napi_poll (Govindarajulu Varadarajan)  [Orabug: 
20342354] - enic: update desc properly in rx_copybreak (Govindarajulu 
Varadarajan)  [Orabug: 20342354] - enic: handle error condition properly 
in enic_rq_indicate_buf (Govindarajulu Varadarajan)  [Orabug: 20342354] 
- enic: Do not call napi_disable when preemption is disabled. 
(Govindarajulu Varadarajan)  [Orabug: 20342354] - enic: fix possible 
deadlock in enic_stop/ enic_rfs_flw_tbl_free (Govindarajulu Varadarajan) 
  [Orabug: 20342354] - drivers/net: Convert remaining uses of pr_warning 
to pr_warn (Joe Perches)  [Orabug: 20342354] - enic: implement 
rx_copybreak (Govindarajulu Varadarajan)  [Orabug: 20342354] - PCI: 
Remove DEFINE_PCI_DEVICE_TABLE macro use (Benoit Taine)  [Orabug: 
20342354] - enic: add pci_zalloc_consistent to kcompat.h (Govindarajulu 
Varadarajan)  [Orabug: 20342354] - enic: use pci_zalloc_consistent (Joe 
Perches)  [Orabug: 20342354] - enic: Add ethtool support to show 
classifier filters added by the driver (Govindarajulu Varadarajan) 
[Orabug: 20342354] - enic: remove #ifdef CONFIG_RFS_ACCEL around filter 
structures (Govindarajulu Varadarajan)  [Orabug: 20342354] - enic: fix 
return values in enic_set_coalesce (Govindarajulu Varadarajan)  [Orabug: 
20342354] - enic: fix compile issue when CONFIG_NET_RX_BUSY_POLL is N 
(Govindarajulu Varadarajan)  [Orabug: 20342354] - enic: add kcompat file 
(Govindarajulu Varadarajan)  [Orabug: 20342354] - enic: Make dummy rfs 
functions inline to fix !CONFIG_RFS_ACCEL build (Geert Uytterhoeven) 
[Orabug: 20342354] - enic: do tx cleanup in napi poll (Govindarajulu 
Varadarajan)  [Orabug: 20342354] - enic: add low latency socket 
busy_poll support (Govindarajulu Varadarajan)  [Orabug: 20342354] - net: 
vlan: add protocol argument to packet tagging functions (Patrick 
McHardy)  [Orabug: 20342354] - net: vlan: prepare for 802.1ad VLAN 
filtering offload (Patrick McHardy)  [Orabug: 20342354] - net: vlan: 
rename NETIF_F_HW_VLAN_* feature flags to NETIF_F_HW_VLAN_CTAG_* 
(Patrick McHardy)  [Orabug: 20342354] - enic: fix lockdep around 
devcmd_lock (Tony Camuso)  [Orabug: 20342354] - enic: Add Accelerated 
RFS support (Govindarajulu Varadarajan)  [Orabug: 20342354] - enic: 
alloc/free rx_cpu_rmap (Govindarajulu Varadarajan)  [Orabug: 20342354] - 
enic: devcmd for adding IP 5 tuple hardware filters (Govindarajulu 
Varadarajan)  [Orabug: 20342354] - enic: fix return value in 
_vnic_dev_cmd (Govindarajulu Varadarajan)  [Orabug: 20342354] - net: use 
SPEED_UNKNOWN and DUPLEX_UNKNOWN when appropriate (Jiri Pirko)  [Orabug: 
20342354] - enic: Fix 64 bit divide on 32bit system (Govindarajulu 
Varadarajan)  [Orabug: 20342354] - enic: Add support for adaptive 
interrupt coalescing (Sujith Sankar)  [Orabug: 20342354] - net: get rid 
of SET_ETHTOOL_OPS (Wilfried Klaebe)  [Orabug: 20342354] - enic: Use 
pci_enable_msix_range() instead of pci_enable_msix() (Alexander Gordeev) 
  [Orabug: 20342354] - bnx2x: Not use probe_defer (Vaughan Cao) 
[Orabug: 20405577] - Revert "nfsd4: fix leak of inode reference on 
delegation failure" (Dan Duval)  [Orabug: 20280060] - ipoib/ib core: set 
module_unload_allowed = 0 as default (Qing Huang)  [Orabug: 20048920] - 
xfs: fix directory hash ordering bug (Mark Tinguely)  [Orabug: 19695297] 
- xfs: fix node forward in xfs_node_toosmall (Mark Tinguely)  [Orabug: 
19695297] - XFS: Assertion failed: first <= last && last < 
BBTOB(bp->b_length), file: fs/xfs/xfs_trans_buf.c, line: 568 (Dave 
Chinner)  [Orabug: 19695297] - mlx4_vnic: Skip fip discover restart if 
pkey index not changed (Yuval Shaia)  [Orabug: 19153757]

[3.8.13-65.el6uek]
- uek-rpm: ol7: update update-el to 7.1 (Guangyu Sun)  [Orabug: 20524699]

[3.8.13-64.el6uek]
- storvsc: ring buffer failures may result in I/O freeze (Long Li) 
[Orabug: 20328185] - crypto: add missing crypto module aliases (Mathias 
Krause)  [Orabug: 20429934]  {CVE-2013-7421}
- crypto: include crypto- module prefix in template (Kees Cook) 
[Orabug: 20429934]  {CVE-2014-9644}
- crypto: prefix module autoloading with "crypto-" (Kees Cook)  [Orabug: 
20429934]  {CVE-2013-7421}
- be2iscsi : Bump the driver version (John Soni Jose)  [Orabug: 
20426078] - be2iscsi : Fix memory leak in the unload path (John Soni 
Jose)  [Orabug: 20426078] - be2iscsi : Fix the PCI request region 
reserving. (John Soni Jose)  [Orabug: 20426078] - be2iscsi : Fix the 
retry count for boot targets (John Soni Jose)  [Orabug: 20426078] - 
fuse: Ensure request structure is not modified after being reused. 
(Ashish Samant)  [Orabug: 20396380] - x86, apic, kexec: Add 
disable_cpu_apicid kernel parameter (HATAYAMA Daisuke)  [Orabug: 
20344754] - nfsd4: zero op arguments beyond the 8th compound op (J. 
Bruce Fields)  [Orabug: 20070817] - ocfs2: implement delayed dropping of 
last dquot reference (Jan Kara)  [Orabug: 19559063] - ib/sdp: fix null 
dereference of sk->sk_wq in sdp_rx_irq() (Chuck Anderson)  [Orabug: 
20482741]

[3.8.13-63.el6uek]
- ext4: protect write with sb_start/end_write in ext4_file_dio_write 
(Guangyu Sun)  [Orabug: 20427284] - fs/pipe.c: skip file_update_time on 
frozen fs (Dmitry Monakhov)  [Orabug: 20427126] - hpsa: remove 'action 
required' phrasing (Stephen M. Cameron)  [Orabug: 20363086] - hpsa: 
remove spin lock around command allocation (Stephen M. Cameron) 
[Orabug: 20363086] - hpsa: always call pci_set_master after 
pci_enable_device (Robert Elliott)  [Orabug: 20363086] - hpsa: Convert 
SCSI LLD ->queuecommand() for host_lock less operation (Nicholas 
Bellinger)  [Orabug: 20363086] - hpsa: do not be so noisy about check 
conditions (Stephen M. Cameron)  [Orabug: 20363086] - hpsa: use atomics 
for commands_outstanding (Stephen M. Cameron)  [Orabug: 20363086] - 
hpsa: get rid of type/attribute/direction bit field where possible 
(Stephen M. Cameron)  [Orabug: 20363086] - hpsa: fix endianness issue 
with scatter gather elements (Stephen M. Cameron)  [Orabug: 20363086] - 
hpsa: fix allocation sizes for CISS_REPORT_LUNs commands (Stephen M. 
Cameron)  [Orabug: 20363086] - hpsa: correct off-by-one sizing of 
chained SG block (Webb Scales)  [Orabug: 20363086] - hpsa: fix a couple 
pci id table mistakes (Stephen M. Cameron)  [Orabug: 20363086] - hpsa: 
remove dev_warn prints from RAID-1ADM (Robert Elliott)  [Orabug: 
20363086] - hpsa: Clean up warnings from sparse. (Don Brace)  [Orabug: 
20363086] - hpsa: add missing pci_set_master in kdump path (Tomas Henzl) 
  [Orabug: 20363086] - hpsa: refine the pci enable/disable handling 
(Tomas Henzl)  [Orabug: 20363086] - hpsa: Fallback to MSI rather than to 
INTx if MSI-X failed (Alexander Gordeev)  [Orabug: 20363086] - libata: 
prevent HSM state change race between ISR and PIO (David Jeffery) 
[Orabug: 20019302]

[3.8.13-62.el6uek]
- i40e: Bump i40e version to 1.2.2 and i40evf version to 1.0.6 
(Catherine Sullivan)  [Orabug: 20199714] - i40e: get pf_id from HW 
rather than PCI function (Shannon Nelson)  [Orabug: 20199714] - i40e: 
increase ARQ size (Mitch Williams)  [Orabug: 20199714] - i40e: Increase 
reset delay (Kevin Scott)  [Orabug: 20199714] - i40evf: make early init 
sequence even more robust (Mitch Williams)  [Orabug: 20199714] - i40e: 
fix netdev_stat macro definition (Shannon Nelson)  [Orabug: 20199714] - 
i40e: Define and use i40e_is_vf macro (Anjali Singhai Jain)  [Orabug: 
20199714] - i40e: Add a virtual channel op to config RSS (Anjali Singhai 
Jain)  [Orabug: 20199714] - i40e: don't enable PTP support on more than 
one PF per port (Jacob Keller)  [Orabug: 20199714] - i40e: allow various 
base numbers in debugfs aq commands (Shannon Nelson)  [Orabug: 20199714] 
- i40e: remove useless debug noise (Shannon Nelson)  [Orabug: 20199714] 
- i40e: Remove unneeded break statement (Shannon Nelson)  [Orabug: 
20199714] - i40e: trigger SW INT with no ITR wait (Shannon Nelson) 
[Orabug: 20199714] - i40evf: remove unnecessary else (Mitch Williams) 
[Orabug: 20199714] - i40evf: make checkpatch happy (Mitch Williams) 
[Orabug: 20199714] - i40evf: update header comments (Mitch Williams) 
[Orabug: 20199714] - i40e: don't overload fields (Mitch Williams) 
[Orabug: 20199714] - i40e: Prevent link flow control settings when PFC 
is enabled (Neerav Parikh)  [Orabug: 20199714] - i40e: Update VEB's 
enabled_tc after reconfiguration (Neerav Parikh)  [Orabug: 20199714] - 
i40e: Bump version to 1.1.23 (Catherine Sullivan)  [Orabug: 20199714] - 
i40e: re-enable VFLR interrupt sooner (Mitch Williams)  [Orabug: 
20199714] - i40e: only warn once of PTP nonsupport in 100Mbit speed 
(Shannon Nelson)  [Orabug: 20199714] - i40evf: don't use more queues 
than CPUs (Mitch Williams)  [Orabug: 20199714] - i40evf: make early init 
processing more robust (Mitch Williams)  [Orabug: 20199714] - i40e: 
clean up throttle rate code (Jesse Brandeburg)  [Orabug: 20199714] - 
i40e: don't do link_status or stats collection on every ARQ (Shannon 
Nelson)  [Orabug: 20199714] - i40e: poll firmware slower (Kamil 
Krawczyk)  [Orabug: 20199714] - i40e: properly parse MDET registers 
(Mitch Williams)  [Orabug: 20199714] - i40e: configure VM ID in qtx_ctl 
(Mitch Williams)  [Orabug: 20199714] - i40e: enable debug earlier 
(Shannon Nelson)  [Orabug: 20199714] - i40e: better wording for resource 
tracking errors (Shannon Nelson)  [Orabug: 20199714] - i40e: scale msix 
vector use when more cores than vectors (Shannon Nelson)  [Orabug: 
20199714] - i40e: remove debugfs dump stats (Shannon Nelson)  [Orabug: 
20199714] - i40e: avoid disable of interrupt when changing ITR (Jesse 
Brandeburg)  [Orabug: 20199714] - i40evf: Add support for 10G base T 
parts (Paul M Stillwell Jr)  [Orabug: 20199714] - i40e: fix link 
checking logic (Mitch Williams)  [Orabug: 20199714] - i40evf: properly 
handle multiple AQ messages (Mitch Williams)  [Orabug: 20199714] - i40e: 
Add condition to enter fdir flush and reinit (Akeem G Abodunrin) 
[Orabug: 20199714] - i40e: Bump version (Catherine Sullivan)  [Orabug: 
20199714] - i40e: Moving variable declaration out of the loops (Akeem G 
Abodunrin)  [Orabug: 20199714] - i40e: Add 10GBaseT support (Mitch 
Williams)  [Orabug: 20199714] - i40e: process link events when setting 
up switch (Mitch Williams)  [Orabug: 20199714] - i40e: Fix a bug where 
Rx would stop after some time (Anjali Singhai Jain)  [Orabug: 20199714] 
- i40e/i40evf: Use usleep_range() instead of udelay() (Neerav Parikh) 
[Orabug: 20199714] - i40e: enable LSE poke and simplify link state 
(Jesse Brandeburg)  [Orabug: 20199714] - i40e: mask phy events (Jesse 
Brandeburg)  [Orabug: 20199714] - i40e: _MASK vs _SHIFT typo in 
i40e_handle_mdd_event() (Dan Carpenter)  [Orabug: 20199714] - 
i40e/i40evf: Bump i40e/i40evf versions (Catherine Sullivan)  [Orabug: 
20199714] - i40e: fix panic due to too-early Tx queue enable (Jesse 
Brandeburg)  [Orabug: 20199714] - i40e: Fix an issue when PF reset fails 
(Anjali Singhai Jain)  [Orabug: 20199714] - i40e: make warning less 
verbose (Jesse Brandeburg)  [Orabug: 20199714] - i40e: Tell OS link is 
going down when calling set_phy_config (Catherine Sullivan)  [Orabug: 
20199714] - i40e: Remove unnecessary assignment (Serey Kong)  [Orabug: 
20199714] - i40e: Change wording to be more consistent (Serey Kong) 
[Orabug: 20199714] - i40e: Allow user to change link settings if link is 
down (Catherine Sullivan)  [Orabug: 20199714] - i40e: Add dual speed 
module support (Catherine Sullivan)  [Orabug: 20199714] - i40e/i40evf: 
Bump i40e & i40evf version (Catherine Sullivan)  [Orabug: 20199714] - 
i40e/i40evf: Ignore a driver perceived Tx hang if the number of desc 
pending < 4 (Anjali Singhai Jain)  [Orabug: 20199714] - i40e: quiet 
complaints when removing default MAC VLAN filter and make set_mac 
reversible (Shannon Nelson)  [Orabug: 20199714] - i40e/i40evf: add max 
buf len to aq debug print helper (Shannon Nelson)  [Orabug: 20199714] - 
i40e: Add checks and message for Qualified Module info (Carolyn Wyborny) 
  [Orabug: 20199714] - i40e: set num_queue_pairs to num configured by VF 
(Ashish Shah)  [Orabug: 20199714] - i40e: Enable l2tsel bit for VLAN tag 
control (Shannon Nelson)  [Orabug: 20199714] - i40e: Add a FD flush 
counter to ethtool (Anjali Singhai Jain)  [Orabug: 20199714] - i40e: ATR 
policy change to flush the table to clean stale ATR rules (Anjali 
Singhai Jain)  [Orabug: 20199714] - i40e: Some FD message fixes (Anjali 
Singhai Jain)  [Orabug: 20199714] - i40e: Update flow director error 
messages to reduce user confusion (Carolyn Wyborny)  [Orabug: 20199714] 
- i40evf: Fix TSO and hw checksums for non-accelerated vlan packets. 
(Vlad Yasevich)  [Orabug: 20199714] - i40e: Fix TSO and hw checksums for 
non-accelerated vlan packets. (Vlad Yasevich)  [Orabug: 20199714] - 
i40e: fix PTP bug (Jesse Brandeburg)  [Orabug: 20199714] - i40e: Fix a 
few potential VF dereferences (Anjali Singhai Jain)  [Orabug: 20199714] 
- i40e: Fix for recent kernel panic (Anjali Singhai Jain)  [Orabug: 
20199714] - i40e: Cleaning up missing null-terminate in conjunction with 
strncpy (Rickard Strandqvist)  [Orabug: 20199714] - i40e: use correct 
structure type name in sizeof (Julia Lawall)  [Orabug: 20199714] - i40e: 
fix sparse non static symbol warning (Wei Yongjun)  [Orabug: 20199714] - 
i40e: Fix missing uapi/linux/dcbnl.h include in i40e_fcoe.c (Lucas 
Tanure)  [Orabug: 20199714] - i40evf: Fixed guest OS panic when removing 
vf driver (Serey Kong)  [Orabug: 20199714] - i40evf: fix memory leak on 
unused interfaces (Mitch Williams)  [Orabug: 20199714] - i40evf: don't 
leak queue vectors (Mitch Williams)  [Orabug: 20199714] - i40evf: do not 
re-arm watchdog after remove (Ashish Shah)  [Orabug: 20199714] - i40evf: 
future-proof vfr_stat state check (Ashish Shah)  [Orabug: 20199714] - 
i40e: remove support for vf unicast promiscuous mode (Ashish Shah) 
[Orabug: 20199714] - i40e: Minor comment changes (Akeem G Abodunrin) 
[Orabug: 20199714] - i40evf: fix scan warning on sprintf (Jesse 
Brandeburg)  [Orabug: 20199714] - i40e: disable local loopback on vmdq 
vsi (Shannon Nelson)  [Orabug: 20199714] - i40e: use correct vf_id 
offset for virtchnl message (Ashish Shah)  [Orabug: 20199714] - i40e: 
expose debug_write_register request (Shannon Nelson)  [Orabug: 20199714] 
- i40e: adds FCoE to build and updates its documentation (Vasu Dev) 
[Orabug: 20199714] - i40e: Adds FCoE related code to i40e core driver 
(Vasu Dev)  [Orabug: 20199714] - i40e: adds FCoE code to the i40e driver 
(Vasu Dev)  [Orabug: 20199714] - i40e: always print aqtx answer (Shannon 
Nelson)  [Orabug: 20199714] - i40e: Give link more time after setting 
flow control (Catherine Sullivan)  [Orabug: 20199714] - i40e/i40evf: ARQ 
copy desc data even for failed commands (Kamil Krawczyk)  [Orabug: 
20199714] - i40evf: don't wait so long (Mitch Williams)  [Orabug: 
20199714] - i40e/i40evf: Add nvmupdate support (Shannon Nelson) 
[Orabug: 20199714] - i40e: fix format mismatch in 
drivers/net/ethernet/intel/i40e/i40e_debugfs.c (Toralf Förster) 
[Orabug: 20199714] - i40e: (ptp) warn when PF_ID does not match in 
PRTTSYN_CTL0 (Jacob Keller)  [Orabug: 20199714] - i40e/i40evf: Clean up 
code (Paul M Stillwell Jr)  [Orabug: 20199714] - i40e: fix race 
conditions on queuing skb for HW time stamp (Jakub Kicinski)  [Orabug: 
20199714] - i40e: never generate both software and hardware timestamps 
(Jakub Kicinski)  [Orabug: 20199714] - i40evf: remove unnecessary break 
after goto (Fabian Frederick)  [Orabug: 20199714] - i40e: remove 
unnecessary break after goto (Fabian Frederick)  [Orabug: 20199714] - 
i40e/i40evf: Bump i40e to 0.4.21 and i40evf to 0.9.40 (Catherine 
Sullivan)  [Orabug: 20199714] - i40e: Implement set_settings for ethtool 
(Catherine Sullivan)  [Orabug: 20199714] - i40e: Add set_pauseparam to 
ethtool (Catherine Sullivan)  [Orabug: 20199714] - i40e/i40evf: Add 
set_fc and init of FC settings (Catherine Sullivan)  [Orabug: 20199714] 
- i40e: move nway reset (Jesse Brandeburg)  [Orabug: 20199714] - 
i40e/i40evf: Add new HW link info variable an_enabled and function 
update_link_info (Catherine Sullivan)  [Orabug: 20199714] - i40e: add 
needed macro (Brian Maly)  [Orabug: 20199714] - i40e: Finish 
implementation of ethtool get settings (Jesse Brandeburg)  [Orabug: 
20199714] - i40e: disable TPH (Jesse Brandeburg)  [Orabug: 20199714] - 
i40e: Fix a boundary condition and turning off of ntuple (Anjali Singhai 
Jain)  [Orabug: 20199714] - i40evf: invite vector 0 to the interrupt 
party (Mitch Williams)  [Orabug: 20199714] - i40e: tolerate lost 
interrupts (Mitch Williams)  [Orabug: 20199714] - i40e/i40evf: Force a 
shifted '1' to be unsigned (Paul M Stillwell Jr)  [Orabug: 20199714] - 
i40evf: don't violate scope (Mitch Williams)  [Orabug: 20199714] - 
i40e/i40evf: Do not free the dummy packet buffer synchronously (Anjali 
Singhai Jain)  [Orabug: 20199714] - i40e/i40evf: Bump i40e to 0.4.19 and 
i40evf to 0.9.38 (Catherine Sullivan)  [Orabug: 20199714] - i40evf: 
change branding string (Mitch Williams)  [Orabug: 20199714] - i40e: 
remove linux/export.h header from i40e_ptp.c (Jacob Keller)  [Orabug: 
20199714] - i40e: limit GLLAN_TXPRE_QDIS to QINDX 0-127 (Christopher 
Pau)  [Orabug: 20199714] - i40e/i40evf: initialize context descriptor 
(Jesse Brandeburg)  [Orabug: 20199714] - i40e: FD filter replay logic 
bug fix (Anjali Singhai Jain)  [Orabug: 20199714] - i40e/i40evf: add ASQ 
write back timeout variable to AQ structure (Kamil Krawczyk)  [Orabug: 
20199714] - i40evf: set flags before sending message (Mitch Williams) 
[Orabug: 20199714] - i40e: Correct mask assignment value (Kevin Scott) 
[Orabug: 20199714] - i40e: clear all queues and interrupts (Shannon 
Nelson)  [Orabug: 20199714] - i40e/i40evf: clear aq bah-bal on shutdown 
(Shannon Nelson)  [Orabug: 20199714] - i40e/i40evf: Add base address 
registers to aq struct (Shannon Nelson)  [Orabug: 20199714] - i40e: fix 
fdir programming (Jesse Brandeburg)  [Orabug: 20199714] - i40e: Add 
debugfs hooks to print current total FD filter count (Anjali Singhai 
Jain)  [Orabug: 20199714] - i40e: Fix the FD sideband logic to detect a 
FD table full condition (Anjali Singhai Jain)  [Orabug: 20199714] - 
i40e: Avoid adding the TCP-IPv4 filter twice (Anjali Singhai Jain) 
[Orabug: 20199714] - i40e: only create PTP device node once (Jacob 
Keller)  [Orabug: 20199714] - i40e: don't store user requested mode 
until we've validated it (Jacob Keller)  [Orabug: 20199714] - i40e: 
break PTP hardware control from ioctl command for timestamp mode (Jacob 
Keller)  [Orabug: 20199714] - i40e: rename i40e_ptp_enable to 
i40e_ptp_feature_enable (Jacob Keller)  [Orabug: 20199714] - i40evf: 
resend FW request if no response (Mitch Williams)  [Orabug: 20199714] - 
i40evf: fix typo (Mitch Williams)  [Orabug: 20199714] - i40evf: return 
more useful error information (Mitch Williams)  [Orabug: 20199714] - 
i40evf: don't stop watchdog if it hasn't started (Mitch Williams) 
[Orabug: 20199714] - i40e/i40evf: Big endian fixes for handling HMC 
(Paul M Stillwell Jr)  [Orabug: 20199714] - i40e: do not take NVM 
ownership for SR read (Kamil Krawczyk)  [Orabug: 20199714] - 
i40e/i40evf: Bump i40e to 0.4.17 and i40evf to 0.9.36 (Catherine 
Sullivan)  [Orabug: 20199714] - i40e: Bypass timeout recovery level 0 so 
as to not cause MDD (Anjali Singhai Jain)  [Orabug: 20199714] - i40e: no 
pf reset at pci remove (Shannon Nelson)  [Orabug: 20199714] - i40e: 
reapply LAA after reset (Shannon Nelson)  [Orabug: 20199714] - i40e: 
allow user to set LAA again (Shannon Nelson)  [Orabug: 20199714] - i40e: 
use WoL flag when setting LAA (Shannon Nelson)  [Orabug: 20199714] - 
i40e: Add ablitity to enable/disable link from set_link_restart_an 
(Catherine Sullivan)  [Orabug: 20199714] - i40e/i40evf: remove reserved 
type (Jesse Brandeburg)  [Orabug: 20199714] - i40e: Fix ethtool coalesce 
settings (Carolyn Wyborny)  [Orabug: 20199714] - i40e: fix a stray print 
message (Shannon Nelson)  [Orabug: 20199714] - i40e: warn on newer/older 
firmware API rev (Shannon Nelson)  [Orabug: 20199714] - i40e: Add PF 
reset when Malicious driver event for PF (Neerav Parikh)  [Orabug: 
20199714] - i40e: make prep_for_reset void (Shannon Nelson)  [Orabug: 
20199714] - i40e: Stop the VF device after setting its MAC address (Greg 
Rose)  [Orabug: 20199714] - i40e/i40evf: Bump i40e to 0.4.13 and i40evf 
to 0.9.35 (Catherine Sullivan)  [Orabug: 20199714] - i40e/i40evf: modify 
debug prints to avoid seg faults (Kamil Krawczyk)  [Orabug: 20199714] - 
i40e/i40evf: Update RSS configuration (Carolyn Wyborny)  [Orabug: 
20199714] - i40evf: fix off-by-one (Mitch Williams)  [Orabug: 20199714] 
- i40e: keep service tasks out of reset process (Shannon Nelson) 
[Orabug: 20199714] - i40e: clear VEB stats when pf stats are cleared 
(Shannon Nelson)  [Orabug: 20199714] - i40e: debugfs fix to dump remote 
LLDPDU (Neerav Parikh)  [Orabug: 20199714] - i40e: Helper routine for 
Rx/Tx queue enable/disable wait (Neerav Parikh)  [Orabug: 20199714] - 
i40e: Fix dangling ring pointers upon driver removal (Anjali Singhai 
Jain)  [Orabug: 20199714] - i40e/i40evf: Reset Head and Tail on AQ 
initialization (Michal Kosiarz)  [Orabug: 20199714] - i40e: workaround 
NVM GLQF_HKEY (Jesse Brandeburg)  [Orabug: 20199714] - i40e/i40evf: 
i40e_register.h update (Anjali Singhai Jain)  [Orabug: 20199714] - 
i40e/i40evf: Bump i40e to version 0.4.10 and i40evf to 0.9.34 (Catherine 
Sullivan)  [Orabug: 20199714] - i40e: use stored base_queue value 
(Shannon Nelson)  [Orabug: 20199714] - i40e: Fix a bug in ethtool for FD 
drop packet filter action (Anjali Singhai Jain)  [Orabug: 20199714] - 
i40e/i40evf: Add Flow director stats to PF stats (Anjali Singhai Jain) 
[Orabug: 20199714] - i40e/i40evf: remove FTYPE (Jesse Brandeburg) 
[Orabug: 20199714] - i40evf: check admin queue error bits (Mitch 
Williams)  [Orabug: 20199714] - i40e/i40evf: User ether_addr_copy 
instead of memcpy (Greg Rose)  [Orabug: 20199714] - i40e: Do not accept 
tagged packets by default (Greg Rose)  [Orabug: 20199714] - i40evf: 
don't go further down (Mitch Williams)  [Orabug: 20199714] - i40e: 
Change the notion of src and dst for FD_SB in ethtool (Anjali Singhai 
Jain)  [Orabug: 20199714] - i40e/i40evf: AdminQ API update for new FW 
(Shannon Nelson)  [Orabug: 20199714] - i40e/i40evf: set headwb Tx 
context flags and use them (Ashish Shah)  [Orabug: 20199714] - 
i40e/i40evf: bump version to 0.4.7 for i40e and 0.9.31 for i40evf 
(Shannon Nelson)  [Orabug: 20199714] - i40e: Allow RSS table entry range 
and GPS to be any number, not necessarily power of 2 (Anjali Singhai 
Jain)  [Orabug: 20199714] - i40e: Delete stale MAC filters after change 
(Greg Rose)  [Orabug: 20199714] - i40e: Do not fall back to one queue 
model if the only feature enabled is ATR (Anjali Singhai Jain)  [Orabug: 
20199714] - i40e: keep SR-IOV enabled in the case that RSS, VMDQ, FD_SB 
and DCB are disabled (Frank Zhang)  [Orabug: 20199714] - i40e: Changes 
to Interrupt distribution policy (Anjali Singhai Jain)  [Orabug: 
20199714] - i40e: implement anti-spoofing for VFs (Mitch Williams) 
[Orabug: 20199714] - i40e: don't complain about removing non-existent 
addresses (Shannon Nelson)  [Orabug: 20199714] - i40e: remove unused 
variable and memory allocation (Shannon Nelson)  [Orabug: 20199714] - 
i40evf: Fix function header (Catherine Sullivan)  [Orabug: 20199714] - 
i40e: add checks for AQ error status bits (Shannon Nelson)  [Orabug: 
20199714] - i40e/i40evf: Bump build version (Catherine Sullivan) 
[Orabug: 20199714] - i40e/i40evf: remove deprecated device IDs (Jesse 
Brandeburg)  [Orabug: 20199714] - i40e/i40evf: fix TSO accounting (Jesse 
Brandeburg)  [Orabug: 20199714] - i40e/i40evf: remove chatty reset 
messages (Mitch Williams)  [Orabug: 20199714] - i40e: not all VSIs have 
rings (Mitch Williams)  [Orabug: 20199714] - i40e: clear pxe after 
adminq is rebuilt (Shannon Nelson)  [Orabug: 20199714] - i40evf: use 
correct format for printing MAC addresses (Mitch Williams)  [Orabug: 
20199714] - i40evf: clean up log message formatting (Mitch Williams) 
[Orabug: 20199714] - i40evf: remove bogus comment (Mitch Williams) 
[Orabug: 20199714] - i40evf: remove unnecessary log messages (Mitch 
Williams)  [Orabug: 20199714] - i40e/i40evf: Clean up a few things 
(Akeem G Abodunrin)  [Orabug: 20199714] - i40e/i40evf: Fix code to 
accommodate i40e_register.h changes (Anjali Singhai Jain)  [Orabug: 
20199714] - i40e/i40evf: fix rx descriptor status (Jesse Brandeburg) 
[Orabug: 20199714] - i40e/i40evf: Bump build version (Catherine 
Sullivan)  [Orabug: 20199714] - i40e: remove irqs only when they are set 
up (Shannon Nelson)  [Orabug: 20199714] - i40e: don't remove HMC that 
doesn't exist (Shannon Nelson)  [Orabug: 20199714] - i40e: print full 
link message (Jesse Brandeburg)  [Orabug: 20199714] - i40e: add xcast 
stats for port (Shannon Nelson)  [Orabug: 20199714] - i40e: add vsi 
x-cast stats (Shannon Nelson)  [Orabug: 20199714] - i40e: increase reset 
wait time (Shannon Nelson)  [Orabug: 20199714] - i40e/i40evf: add Tx pre 
queue disable function (Matt Jared)  [Orabug: 20199714] - i40e/i40evf: 
check AQ register for valid data (Kamil Krawczyk)  [Orabug: 20199714] - 
i40evf: make messages less dire (Mitch Williams)  [Orabug: 20199714] - 
i40e: add VEB stats to ethtool (Shannon Nelson)  [Orabug: 20199714] - 
i40e: set lan_veb index (Shannon Nelson)  [Orabug: 20199714] - i40e: add 
missing VSI statistics (Shannon Nelson)  [Orabug: 20199714] - 
i40e/i40evf: remove rx_errors and rx_missed (Shannon Nelson)  [Orabug: 
20199714] - i40e: refactor stats collection (Shannon Nelson)  [Orabug: 
20199714] - i40e: refactor send version (Jesse Brandeburg)  [Orabug: 
20199714] - i40e/i40evf: VEB structure added, GTIME macro update (Kamil 
Krawczyk)  [Orabug: 20199714] - i40e: notify VF of all types of resets 
(Mitch Williams)  [Orabug: 20199714] - i40evf: fix crash when changing 
ring sizes (Mitch Williams)  [Orabug: 20199714] - i40evf: set descriptor 
multiple to 32 (Mitch Williams)  [Orabug: 20199714] - i40e: clamp jumbo 
frame size (Jesse Brandeburg)  [Orabug: 20199714] - i40e/i40evf: remove 
unused RX_LRO define (Jesse Brandeburg)  [Orabug: 20199714] - i40e: 
remove check for large buffer (Kamil Krawczyk)  [Orabug: 20199714] - 
i40e: Rework register diagnostic (Kamil Krawczyk)  [Orabug: 20199714] - 
i40e: don't use OR to check a value (Jesse Brandeburg)  [Orabug: 
20199714] - i40evf: don't use RESETTING state during reinit (Mitch 
Williams)  [Orabug: 20199714] - i40e: add clear_pxe AdminQ request 
(Shannon Nelson)  [Orabug: 20199714] - i40e: Clear recovery pending, if 
reset failed (Akeem G Abodunrin)  [Orabug: 20199714] - i40e/i40evf: 
Change type to u32 to avoid sparse error (Greg Rose)  [Orabug: 20199714] 
- i40e/i40evf: remove storm control (Jesse Brandeburg)  [Orabug: 
20199714] - i40e: Use the new i40e_get_fd_cnt_all function in other 
places (Anjali Singhai Jain)  [Orabug: 20199714] - i40e: Report 
cmd->data in ETHTOOL_GRXCLSRLCNT instead of ETHTOOL_GRXCLSRULE (Anjali 
Singhai Jain)  [Orabug: 20199714] - i40e/i40evf: Remove reserved PCTYPE 
defines (Kevin Scott)  [Orabug: 20199714] - i40e: Tx/Rx rings 
declaration (Akeem G Abodunrin)  [Orabug: 20199714] - i40evf: tweak Tx 
rate params and de-magic-ify (Mitch Williams)  [Orabug: 20199714] - 
i40e: enable descriptor prefetch for VFs (Brian Maly)  [Orabug: 
20199714] - i40e/i40evf: Update check for AQ aliveness (Kevin Scott) 
[Orabug: 20199714] - i40evf: Use is_multicast_ether_addr helper (Tobias 
Klauser)  [Orabug: 20199714] - i40evf: Use pci_enable_msix_range() 
instead of pci_enable_msix() (Alexander Gordeev)  [Orabug: 20199714] - 
i40e: Check PCI_IOV config to avoid compile error (Greg Rose)  [Orabug: 
20199714] - i40e: remove Tx work for ptp (Jesse Brandeburg)  [Orabug: 
20199714] - i40e: Don't disable SR-IOV when VFs are assigned (Mitch 
Williams)  [Orabug: 20199714] - i40e: remove hardcode of stats struct 
size in ethtool (Shannon Nelson)  [Orabug: 20199714] - i40e/i40evf: 
control auto ITR through ethtool (Mitch Williams)  [Orabug: 20199714] - 
i40e/i40evf: set proper default for ITR registers (Mitch Williams) 
[Orabug: 20199714] - i40evf: make ethtool_ops const (Mitch Williams) 
[Orabug: 20199714] - i40evf: don't lie to ethtool (Mitch Williams) 
[Orabug: 20199714] - i40evf: Use macro param for ethtool stats (Mitch 
Williams)  [Orabug: 20199714] - i40e: add required include (Mitch 
Williams)  [Orabug: 20199714] - i40evf: Fix the headers and update 
copyright year. (Jesse Brandeburg)  [Orabug: 20199714] - i40evf: Remove 
unused defines (Catherine Sullivan)  [Orabug: 20199714] - i40evf: Update 
AdminQ interface (Shannon Nelson)  [Orabug: 20199714] - i40e/i40evf: 
Bump build version (Catherine Sullivan)  [Orabug: 20199714] - 
i40e/i40evf: Retrieve and store missing link config information (Neerav 
Parikh)  [Orabug: 20199714] - i40e: Do not expose fd-sb commands from 
debugfs (Anjali Singhai Jain)  [Orabug: 20199714] - i40e: Do not enable 
NTUPLE feature control in MFP mode (Anjali Singhai Jain)  [Orabug: 
20199714] - i40e: Change variable type to avoid typecheck failure (Kevin 
Scott)  [Orabug: 20199714] - i40evf: remove debugging message (Mitch 
Williams)  [Orabug: 20199714] - i40evf: fix panic on PF driver fail 
(Mitch Williams)  [Orabug: 20199714] - i40e/i40evf: add driver version 
string to driver version command (Shannon Nelson)  [Orabug: 20199714] - 
i40e: Use port VLAN in MAC/VLAN filter configuration (Greg Rose) 
[Orabug: 20199714] - i40evf: support ethtool RSS options (Mitch A 
Williams)  [Orabug: 20199714] - i40e: Retain MAC filters when changing 
port VLAN (Greg Rose)  [Orabug: 20199714] - i40e: remove ptp_tx_work 
timestamp work item (Jacob Keller)  [Orabug: 20199714] - bond: add 
support to read speed and duplex via ethtool (Andy Gospodarek)  [Orabug: 
20359512]

[3.8.13-61.el6uek]
- ib_ipoib: CSUM support in connected mode (Yuval Shaia)  [Orabug: 
19404558] - sched: Fix possible divide by zero in avg_atom() calculation 
(Mateusz Guzik)  [Orabug: 20354438] - include/linux/math64.h: add 
div64_ul() (Alex Shi)  [Orabug: 20354438]

[3.8.13-60.el6uek]
- Drivers: hv: hv_fcopy: fix a race condition for SMP guest (Dexuan Cui) 
  [Orabug: 20225216] - Drivers: hv: util: Fix a bug in the KVP code (K. 
Y. Srinivasan)  [Orabug: 20225216] - Drivers: hv: vmbus: Fix a bug in 
the channel callback dispatch code (K. Y. Srinivasan)  [Orabug: 
20225216] - hyperv: Add IPv6 into the hash computation for vRSS (Haiyang 
Zhang)  [Orabug: 20225181] - hyperv: Add handling of IP header with 
option field in netvsc_set_hash() (Haiyang Zhang)  [Orabug: 20225181] - 
x86, pageattr: Prevent overflow in slow_virt_to_phys() for X86_PAE 
(Dexuan Cui)  [Orabug: 20225181] - hyperv: Fix the total_data_buflen in 
send path (Haiyang Zhang)  [Orabug: 20225181] - hyperv: Fix a bug in 
netvsc_send() (KY Srinivasan)  [Orabug: 20225181] - hyperv: Fix a bug in 
netvsc_start_xmit() (KY Srinivasan)  [Orabug: 20225181] - hyperv: NULL 
dereference on error (Dan Carpenter)  [Orabug: 20225158] - hyperv: 
Increase the buffer length for netvsc_channel_cb() (Haiyang Zhang) 
[Orabug: 20225158] - hyperv: Adjust the size of sendbuf region to 
support ws2008r2 (KY Srinivasan)  [Orabug: 20225158] - Drivers: 
net-next: hyperv: Increase the size of the sendbuf region (KY 
Srinivasan)  [Orabug: 20225158] - Drivers: scsi: storvsc: Fix a bug in 
storvsc limits (K. Y. Srinivasan)  [Orabug: 19706977] - xen-blkback: fix 
leak on grant map error path (Roger Pau Monné)  [Orabug: 19897419] - 
xen/blkback: unmap all persistent grants when frontend gets disconnected 
(Vitaly Kuznetsov)  [Orabug: 19897419] - xen/pci: Allocate memory for 
physdev_pci_device_add's optarr (Boris Ostrovsky)  [Orabug: 19897419] - 
x86/xen: panic on bad Xen-provided memory map (Martin Kelly)  [Orabug: 
19897419] - x86/xen: avoid race in p2m handling (Juergen Gross) 
[Orabug: 19897419] - x86/xen: delay construction of mfn_list_list 
(Juergen Gross)  [Orabug: 19897419] - x86/xen: avoid writing to freed 
memory after race in p2m handling (Juergen Gross)  [Orabug: 19897419] - 
xen/balloon: Don't continue ballooning when BP_ECANCELED is encountered 
(Boris Ostrovsky)  [Orabug: 19897419] - xen, blkfront: factor out 
flush-related checks from do_blkif_request() (Arianna Avanzini) 
[Orabug: 19897419] - xen: remove DEFINE_XENBUS_DRIVER() macro (David 
Vrabel)  [Orabug: 19897419] - xen/xenbus: Remove BUG_ON() when error 
string trucated (Chen Gang)  [Orabug: 19897419] - xen/xenbus: Correct 
the comments for xenbus_grant_ring() (Chen Gang)  [Orabug: 19897419] - 
x86/xen: Set EFER.NX and EFER.SCE in PVH guests (Mukesh Rathor) 
[Orabug: 19897419] - xen: eliminate scalability issues from initrd 
handling (Juergen Gross)  [Orabug: 19897419] - xen: sync some headers 
with xen tree (Juergen Gross)  [Orabug: 19897419] - arm{,64}/xen: Remove 
"EXPERIMENTAL" in the description of the Xen options (Julien Grall) 
[Orabug: 19897419] - x86: remove the Xen-specific _PAGE_IOMAP PTE flag 
(David Vrabel)  [Orabug: 19897419] - x86/xen: do not use _PAGE_IOMAP PTE 
flag for I/O mappings (David Vrabel)  [Orabug: 19897419] - x86: skip 
check for spurious faults for non-present faults (David Vrabel) 
[Orabug: 19897419] - xen/events: support threaded irqs for interdomain 
event channels (Juergen Gross)  [Orabug: 19897419] - xen/grant-table: 
refactor error cleanup in grow_gnttab_list() (Chen Gang)  [Orabug: 
19897419] - xen/setup: Remap Xen Identity Mapped RAM (Matt Rushton) 
[Orabug: 19897419]

[3.8.13-59.el6uek]
- intel_pstate: add Oracle X4170 M3 to bypass list and correct OEM table 
id (Ethan Zhao)  [Orabug: 20051898] - intel_pstate: add kernel parameter 
to force loading on Sun X86 servers. (Ethan Zhao)  [Orabug: 20051898] - 
intel_pstate: skip this driver if Sun server has _PPC method (Ethan 
Zhao)  [Orabug: 20051898] - acpi-cpufreq: Fail initialization if driver 
cannot be registered (Rafael J. Wysocki)  [Orabug: 20051898] - Revert 
"cpufreq: Use rwsem for protecting critical sections" (Ethan Zhao) 
[Orabug: 20051898] - Revert "cpufreq: intel_pstate: allow driver to be 
built as a module" (Ethan Zhao)  [Orabug: 20051898] - spec: only enable 
intel_pstate as builtin for OL7 (Ethan Zhao)  [Orabug: 20051898] - 
cpufreq: fix a NULL pointer dereference triggered by _PPC  changed 
notification (Ethan Zhao)  [Orabug: 20048063]

[3.8.13-58.el6uek]
- ACPI: x2apic entry ignored (Cathy Avery)  [Orabug: 20246254] - x86, 
efi: correct call to free_pages (Roy Franz)  [Orabug: 20225277] - x86, 
efi: retry ExitBootServices() on failure (Zach Bobroff)  [Orabug: 
20225277] - i40e: relax the firmware API version check (Shannon Nelson) 
  [Orabug: 20046875] - i40e: print message for pre-production hardware 
(Jesse Brandeburg)  [Orabug: 20157380] - i40e: Fix firmware API version 
errors (Catherine Sullivan)  [Orabug: 20147320] - iommu/{vt-d,amd}: 
Remove multifunction assumption around grouping (Alex Williamson) 
[Orabug: 20116056] - rds: cancel s_refill_w before destroying resouces 
(Wengang Wang)  [Orabug: 19939883] - avoid race between 
xs_reset_transport and xs_tcp_setup_socket (Wengang Wang)  [Orabug: 
19676982] [Orabug: 19899837] - deadlock when two nodes are converting 
same lock from PR to EX and idletimeout closes conn (Tariq Saeed) 
[Orabug: 18803152] - o2dlm: fix a race between purge and master query 
(Srinivas Eeda)  - ocfs2: o2net: fix connect expired (Junxiao Bi) 
[Orabug: 19982959] - Revert "fuse: return -EGAIN if not connected" 
(Ashish Samant)  [Orabug: 20193762] - perf/x86/amd: Rework AMD PMU init 
code (Peter Zijlstra)  [Orabug: 19915388] - spec: add x86 tools 
turbostat (Ethan Zhao)  [Orabug: 18900365] - ext4: error out if 
verifying the block bitmap fails (Darrick J. Wong)  [Orabug: 19727054] - 
ext4: fix type declaration of ext4_validate_block_bitmap (Darrick J. 
Wong)  [Orabug: 19727054] - ldoms: the guest command prompt hangs after 
fast input. (Bijan Mottahedeh)  [Orabug: 20077689] - VCC hangs during 
probe or when receiving large volume of data from domain. (Bijan 
Mottahedeh)  [Orabug: 20080044] - sparc64: Fix constraints on swab 
helpers. (David S. Miller)  [Orabug: 20096685] - sunvdc: don't call 
VD_OP_GET_VTOC (Dwight Engen)  [Orabug: 20046764] - sparc64: Virtual 
Disk Driver (VDS) (Bijan Mottahedeh)  [Orabug: 20020891] - fix soft 
lockups in control domain when resetting guest domain (Aaron Young) 
[Orabug: 19804556] - x86, fpu: remove the logic of non-eager fpu mem 
allocation at the first usage (Annie Li)  [Orabug: 20231434]

[3.8.13-57.el6uek]
- nfsd: Fix ACL null pointer deref (Sergio Gelato)  [Orabug: 20223564] - 
bnx2fc: do not add shared skbs to the fcoe_rx_list (Maurizio Lombardi) 
[Orabug: 20224025] - nfsd4: fix leak of inode reference on delegation 
failure (J. Bruce Fields)  [Orabug: 20224024] - nfsd: Fix slot wake up 
race in the nfsv4.1 callback code (Trond Myklebust)  [Orabug: 20224023] 
- rt2x00: do not align payload on modern H/W (Stanislaw Gruszka) 
[Orabug: 20224022] - can: dev: avoid calling kfree_skb() from interrupt 
context (Thomas Körper)  [Orabug: 20224021] - target: Don't call 
TFO->write_pending if data_length == 0 (Roland Dreier)  [Orabug: 
20224020] - can: esd_usb2: fix memory leak on disconnect (Alexey 
Khoroshilov)  [Orabug: 20224019] - pptp: fix stack info leak in 
pptp_getname() (Mathias Krause)  [Orabug: 20224017] - inetdevice: fixed 
signed integer overflow (Vincent BENAYOUN)  [Orabug: 20224016] - KVM: 
x86: Don't report guest userspace emulation error to userspace (Nadav 
Amit)  [Orabug: 20224015] - dell-wmi: Fix access out of memory (Pali 
Rohár)  [Orabug: 20224014] - br: fix use of ->rx_handler_data in code 
executed on non-rx_handler path (Jiri Pirko)  [Orabug: 20224013] - 
netfilter: nf_log: release skbuff on nlmsg put failure (Houcheng Lin) 
[Orabug: 20224012] - netfilter: nfnetlink_log: fix maximum packet length 
logged to userspace (Florian Westphal)  [Orabug: 20224011] - netfilter: 
nf_log: account for size of NLMSG_DONE attribute (Florian Westphal) 
[Orabug: 20224010] - nfs: Fix use of uninitialized variable in 
nfs_getattr() (Jan Kara)  [Orabug: 20224009] - NFSv4: Ensure that we 
remove NFSv4.0 delegations when state has expired (Trond Myklebust) 
[Orabug: 20224008] - scsi: only re-lock door after EH on devices that 
were reset (Christoph Hellwig)  [Orabug: 20224007] - nfs: fix pnfs 
direct write memory leak (Peng Tao)  [Orabug: 20224006] - firewire: 
cdev: prevent kernel stack leaking into ioctl arguments (Stefan Richter) 
  [Orabug: 20224005] - mac80211: fix use-after-free in defragmentation 
(Johannes Berg)  [Orabug: 20224004] - libceph: do not crash on large 
auth tickets (Ilya Dryomov)  [Orabug: 20224003] - net: sctp: fix memory 
leak in auth key management (Daniel Borkmann)  [Orabug: 20224001] - net: 
sctp: fix NULL pointer dereference in af->from_addr_param on malformed 
packet (Daniel Borkmann)  [Orabug: 20224000] - Btrfs: fix kfree on 
list_head in btrfs_lookup_csums_range error cleanup (Chris Mason) 
[Orabug: 20223998] - sysfs: driver core: Fix glue dir race condition by 
gdp_mutex (Yijing Wang)  [Orabug: 20223997] - posix-timers: Fix stack 
info leak in timer_create() (Mathias Krause)  [Orabug: 20223996] - tty: 
Fix high cpu load if tty is unreleaseable (Peter Hurley)  [Orabug: 
20223995] - nfsd4: fix crash on unknown operation number (J. Bruce 
Fields)  [Orabug: 20223994] - lib/bitmap.c: fix undefined shift in 
__bitmap_shift_{left|right}() (Jan Kara)  [Orabug: 20223993] - 
cgroup/kmemleak: add kmemleak_free() for cgroup deallocations. (Wang 
Nan)  [Orabug: 20223992] - usb: Do not allow usb_alloc_streams on 
unconfigured devices (Hans de Goede)  [Orabug: 20223991] - serial: Fix 
divide-by-zero fault in uart_get_divisor() (Peter Hurley)  [Orabug: 
20223989] - ext4: fix oops when loading block bitmap failed (Jan Kara) 
[Orabug: 20223988] - ext4: fix overflow when updating superblock backups 
after resize (Jan Kara)  [Orabug: 20223987] - ext4: check EA value 
offset when loading (Darrick J. Wong)  [Orabug: 20223985] - jbd2: free 
bh when descriptor block checksum fails (Darrick J. Wong)  [Orabug: 
20223984] - target: Fix queue full status NULL pointer for 
SCF_TRANSPORT_TASK_SENSE (Quinn Tran)  [Orabug: 20223983] - qla_target: 
don't delete changed nacls (Joern Engel)  [Orabug: 20223980] - KVM: x86: 
Check non-canonical addresses upon WRMSR (Nadav Amit)  [Orabug: 
20223978]  {CVE-2014-3610}
- KVM: x86: Prevent host from panicking on shared MSR writes. (Andy 
Honig)  [Orabug: 20223975] - kvm: fix excessive pages un-pinning in 
kvm_iommu_map error path. (Quentin Casasnovas)  [Orabug: 20223973] 
{CVE-2014-3601} {CVE-2014-3601}
- modules, lock around setting of MODULE_STATE_UNFORMED (Prarit 
Bhargava)  [Orabug: 20223970] - dm log userspace: fix memory leak in 
dm_ulog_tfr_init failure path (Alexey Khoroshilov)  [Orabug: 20223969] - 
selinux: fix inode security list corruption (Stephen Smalley)  [Orabug: 
20223968] - mnt: Prevent pivot_root from creating a loop in the mount 
tree (Eric W. Biederman)  [Orabug: 20223967]  {CVE-2014-7970}
- x86, fpu: __restore_xstate_sig()->math_state_restore() needs 
preempt_disable() (Oleg Nesterov)  [Orabug: 20223966] - UBIFS: fix a 
race condition (Artem Bityutskiy)  [Orabug: 20223964] - UBIFS: remove 
mst_mutex (Artem Bityutskiy)  [Orabug: 20223963] - fs: Fix theoretical 
division by 0 in super_cache_scan(). (Tetsuo Handa)  [Orabug: 20223961] 
- ipv4: dst_entry leak in ip_send_unicast_reply() (Vasily Averin) 
[Orabug: 20223959] - ecryptfs: avoid to access NULL pointer when write 
metadata in xattr (Chao Yu)  [Orabug: 20223957] - NFSv4.1: Fix an 
NFSv4.1 state renewal regression (Andy Adamson)  [Orabug: 20223955] - 
NFSv4: fix open/lock state recovery error handling (Trond Myklebust) 
[Orabug: 20223953] - NFSv4: Fix lock recovery when 
CREATE_SESSION/SETCLIENTID_CONFIRM fails (Trond Myklebust)  [Orabug: 
20223952] - firmware_class: make sure fw requests contain a name (Kees 
Cook)  [Orabug: 20223951] - be2iscsi: check ip buffer before copying 
(Mike Christie)  [Orabug: 20223950] - regmap: fix NULL pointer 
dereference in _regmap_write/read (Pankaj Dubey)  [Orabug: 20223949] - 
regmap: debugfs: fix possbile NULL pointer dereference (Xiubo Li) 
[Orabug: 20223948] - x86/intel/quark: Switch off CR4.PGE so TLB flush 
uses CR3 instead (Bryan O'Donoghue)  [Orabug: 20223947] - kvm: don't 
take vcpu mutex for obviously invalid vcpu ioctls (David Matlack) 
[Orabug: 20223945] - kvm: x86: fix stale mmio cache bug (David Matlack) 
  [Orabug: 20223944] - fs: Add a missing permission check to do_umount 
(Andy Lutomirski)  [Orabug: 20223943]  {CVE-2014-7975}
- Btrfs: fix race in WAIT_SYNC ioctl (Sage Weil)  [Orabug: 20223942] - 
Btrfs: fix build_backref_tree issue with multiple shared blocks (Josef 
Bacik)  [Orabug: 20223941] - l2tp: fix race while getting PMTU on PPP 
pseudo-wire (Guillaume Nault)  [Orabug: 20223940] - openvswitch: fix 
panic with multiple vlan headers (Jiri Benc)  [Orabug: 20223937] - 
packet: handle too big packets for PACKET_V3 (Eric Dumazet)  [Orabug: 
20223936] - nl80211: clear skb cb before passing to netlink (Johannes 
Berg)  [Orabug: 20223935] - ring-buffer: Fix infinite spin in reading 
buffer (Steven Rostedt (Red Hat))  [Orabug: 20223934] - perf: fix perf 
bug in fork() (Peter Zijlstra)  [Orabug: 20223933] - ext2: Fix fs 
corruption in ext2_get_xip_mem() (Jan Kara)  [Orabug: 20223932] - ipvs: 
avoid netns exit crash on ip_vs_conn_drop_conntrack (Julian Anastasov) 
[Orabug: 20223931] - perf: Fix a race condition in 
perf_remove_from_context() (Cong Wang)  [Orabug: 20223930] - sched: Fix 
unreleased llc_shared_mask bit during CPU hotplug (Wanpeng Li)  [Orabug: 
20223929] - ocfs2/dlm: do not get resource spinlock if lockres is new 
(Joseph Qi)  [Orabug: 20223928] - kcmp: fix standard comparison bug 
(Rasmus Villemoes)  [Orabug: 20223927] - lockd: fix rpcbind crash on 
lockd startup failure (J. Bruce Fields)  [Orabug: 20223925] - percpu: 
perform tlb flush after pcpu_map_pages() failure (Tejun Heo)  [Orabug: 
20223924] - percpu: fix pcpu_alloc_pages() failure path (Tejun Heo) 
[Orabug: 20223923] - SCSI: libiscsi: fix potential buffer overrun in 
__iscsi_conn_send_pdu (Mike Christie)  [Orabug: 20223922] - 
iscsi-target: Fix memory corruption in 
iscsit_logout_post_handler_diffcid (Nicholas Bellinger)  [Orabug: 
20223921] - iscsi-target: avoid NULL pointer in iscsi_copy_param_list 
failure (Joern Engel)  [Orabug: 20223920] - shmem: fix nlink for rename 
overwrite directory (Miklos Szeredi)  [Orabug: 20223918] - x86 
early_ioremap: Increase FIX_BTMAPS_SLOTS to 8 (Dave Young)  [Orabug: 
20223917] - NFSv4: nfs4_state_manager() vs. nfs_server_remove_lists() 
(Steve Dickson)  [Orabug: 20223916] - USB: EHCI: unlink QHs even after 
the controller has stopped (Alan Stern)  [Orabug: 20223914] - usb: hub: 
take hub->hdev reference when processing from eventlist (Joe Lawrence) 
[Orabug: 20223912] - xhci: fix oops when xhci resumes from hibernate 
with hw lpm capable devices (Mathias Nyman)  [Orabug: 20223911] - USB: 
serial: fix potential heap buffer overflow (Johan Hovold)  [Orabug: 
20223909] - USB: serial: fix potential stack buffer overflow (Johan 
Hovold)  [Orabug: 20223908] - vfs: fix bad hashing of dentries (Linus 
Torvalds)  [Orabug: 20223907] - dcache.c: get rid of pointless macros 
(Al Viro)  [Orabug: 20223906] - blkcg: don't call into policy draining 
if root_blkg is already gone (Tejun Heo)  [Orabug: 20223904] - mtd/ftl: 
fix the double free of the buffers allocated in build_maps() (Kevin Hao) 
  [Orabug: 20223903] - CIFS: Possible null ptr deref in SMB2_tcon (Steve 
French)  [Orabug: 20223901] - md/raid1,raid10: always abort recover on 
write error. (NeilBrown)  [Orabug: 20223900] - xfs: don't zero partial 
page cache pages during O_DIRECT writes (Chris Mason)  [Orabug: 
20223898] - xfs: don't zero partial page cache pages during O_DIRECT 
writes (Dave Chinner)  [Orabug: 20223896] - xfs: don't dirty buffers 
beyond EOF (Dave Chinner)  [Orabug: 20223894] - xfs: quotacheck leaves 
dquot buffers without verifiers (Dave Chinner)  [Orabug: 20223892] - 
md/raid10: Fix memory leak when raid10 reshape completes. (NeilBrown) 
[Orabug: 20223891] - md/raid10: fix memory leak when reshaping a RAID10. 
(NeilBrown)  [Orabug: 20223890] - md/raid6: avoid data corruption during 
recovery of double-degraded RAID6 (NeilBrown)  [Orabug: 20223871] - mnt: 
Change the default remount atime from relatime to the existing value 
(Eric W. Biederman)  [Orabug: 20223868] - mnt: Correct permission checks 
in do_remount (Eric W. Biederman)  [Orabug: 20223863] - mnt: Move the 
test for MNT_LOCK_READONLY from change_mount_flags into do_remount (Eric 
W. Biederman)  [Orabug: 20223860] - mnt: Only change user settable mount 
flags in remount (Eric W. Biederman)  [Orabug: 20223825] - ring-buffer: 
Up rb_iter_peek() loop count to 3 (Steven Rostedt (Red Hat))  [Orabug: 
20223824] - ring-buffer: Always reset iterator to reader page (Steven 
Rostedt (Red Hat))  [Orabug: 20223821] - ACPI / cpuidle: fix deadlock 
between cpuidle_lock and cpu_hotplug.lock (Jiri Kosina)  [Orabug: 
20223820] - ACPICA: Utilities: Fix memory leak in 
acpi_ut_copy_iobject_to_iobject (David E. Box)  [Orabug: 20223819] - 
kernel/smp.c:on_each_cpu_cond(): fix warning in fallback path (Sasha 
Levin)  [Orabug: 20223818] - iommu/amd: Fix cleanup_domain for mass 
device removal (Joerg Roedel)  [Orabug: 20223817] - NFSv4: Fix problems 
with close in the presence of a delegation (Trond Myklebust)  [Orabug: 
20223815] - svcrdma: Select NFSv4.1 backchannel transport based on 
forward channel (Chuck Lever)  [Orabug: 20223814] - NFSD: Decrease 
nfsd_users in nfsd_startup_generic fail (Kinglong Mee)  [Orabug: 
20223813] - jbd2: fix infinite loop when recovering corrupt journal 
blocks (Darrick J. Wong)  [Orabug: 20223812] - Btrfs: fix csum tree 
corruption, duplicate and outdated checksums (Filipe Manana)  [Orabug: 
20223811] - ext4: fix BUG_ON in mb_free_blocks() (Theodore Ts'o) 
[Orabug: 20223810] - KVM: x86: Inter-privilege level ret emulation is 
not implemeneted (Nadav Amit)  [Orabug: 20223803] - serial: core: 
Preserve termios c_cflag for console resume (Peter Hurley)  [Orabug: 
20223801] - ext4: fix ext4_discard_allocated_blocks() if we can't 
allocate the pa struct (Theodore Ts'o)  [Orabug: 20223785] - USB: OHCI: 
don't lose track of EDs when a controller dies (Alan Stern)  [Orabug: 
20223765]

[3.8.13-56.el6uek]
- isofs: Fix unbounded recursion when processing relocated directories 
(Jan Kara)  [Orabug: 20223656]  {CVE-2014-5471} {CVE-2014-5472}
- x86_64, traps: Stop using IST for #SS (Andy Lutomirski)  [Orabug: 
20217158]  {CVE-2014-9090} {CVE-2014-9322}
- x86, kvm: Clear paravirt_enabled on KVM guests for espfix32's benefit 
(Andy Lutomirski)  [Orabug: 20217104]  {CVE-2014-8134} {CVE-2014-8134}
- x86/tls: Validate TLS entries to protect espfix (Andy Lutomirski) 
[Orabug: 20217015]  {CVE-2014-8133}
- tracing/syscalls: Ignore numbers outside NR_syscalls' range (Rabin 
Vincent)  [Orabug: 19987873]  {CVE-2014-7826}
- ALSA: control: Protect user controls against concurrent access 
(Lars-Peter Clausen)  [Orabug: 20192537]  {CVE-2014-4652}
- target/rd: Refactor rd_build_device_space + rd_release_device_space 
(Nicholas Bellinger)  [Orabug: 20192512]  {CVE-2014-4027}
- HID: logitech: perform bounds checking on device_id early enough (Jiri 
Kosina)  [Orabug: 20192473]  {CVE-2014-3182}
- udf: Avoid infinite loop when processing indirect ICBs (Jan Kara) 
[Orabug: 20192439]  {CVE-2014-6410}
- ALSA: control: Make sure that id->index does not overflow (Lars-Peter 
Clausen)  [Orabug: 20192412]  {CVE-2014-4656}
- ALSA: control: Handle numid overflow (Lars-Peter Clausen)  [Orabug: 
20192345]  {CVE-2014-4656}
- HID: picolcd: sanity check report size in raw_event() callback (Jiri 
Kosina)  [Orabug: 20192196]  {CVE-2014-3186}
- net: sctp: fix remote memory pressure from excessive queueing (Daniel 
Borkmann)  [Orabug: 20192050]  {CVE-2014-3688}



More information about the Oraclevm-errata mailing list