[SECURITY] Fedora 13 Update: kernel-2.6.33.5-112.fc13

updates at fedoraproject.org updates at fedoraproject.org
Mon May 31 18:30:28 UTC 2010


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-9183
2010-05-28 16:50:29
--------------------------------------------------------------------------------

Name        : kernel
Product     : Fedora 13
Version     : 2.6.33.5
Release     : 112.fc13
URL         : http://www.kernel.org/
Summary     : The Linux kernel
Description :
The kernel package contains the Linux kernel (vmlinuz), the core of any
Linux operating system.  The kernel handles the basic functions
of the operating system: memory allocation, process allocation, device
input and output, etc.

--------------------------------------------------------------------------------
Update Information:

Update to kernel 2.6.33.5:
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.33.5
--------------------------------------------------------------------------------
ChangeLog:

* Thu May 27 2010 Chuck Ebbert <cebbert at redhat.com>  2.6.33.5-112
- CVE-2010-1437: keyrings: find_keyring_by_name() can gain the freed keyring
* Thu May 27 2010 Chuck Ebbert <cebbert at redhat.com>  2.6.33.5-111
- Linux 2.6.33.5
- Drop patches merged in -stable:
    iwlwifi_-check-for-aggregation-frame-and-queue.patch
    iwlwifi_-clear-all-the-stop_queue-flag-after-load-firmware.patch
    revert-ath9k_-fix-lockdep-warning-when-unloading-module.patch
    btrfs-check-for-read-permission-on-src-file-in-clone-ioctl.patch
- Revert drm patch already in F-13: drm-i915-disable-fbc-on-915gm-and-945gm.patch
- Apply DRM patches from -stable on top of F-13 DRM updates:
    drm-i915-use-pipe_control-instruction-on-ironlake-and-sandy-bridge.patch
    drm-i915-fix-non-ironlake-965-class-crashes.patch
* Thu May 27 2010 Ben Skeggs <bskeggs at redhat.com>
- drm-nouveau-updates.patch: add nv50 gpio fix (rh#582621)
* Wed May 26 2010 Adam Jackson <ajax at redhat.com>
- linux-2.6-cantiga-iommu-gfx.patch: Drop, redundant.
- config-generic: Disable i830.ko, userspace will never load it.
* Mon May 24 2010 John W. Linville <linville at redhat.com>
- iwlwifi: recover_from_tx_stall (#589777)
* Thu May 20 2010 Chuck Ebbert <cebbert at redhat.com>  2.6.33.4-106
- Remove "PatchNNNN" entries for dropped patches.
- More writeback fixes from block-2.6 tree (#593669)
* Thu May 20 2010 Kyle McMartin <kyle at redhat.com>
- kill some dead patches.
* Wed May 19 2010 John W. Linville <linville at redhat.com>
- iwlwifi: fix scan races
- iwlwifi: fix internal scan race
* Wed May 19 2010 Dave Airlie <airlied at redhat.com>
- disable vmwgfx at request of vmware
* Wed May 19 2010 Roland McGrath <roland at redhat.com>
- x86: put assembly CFI in .debug_frame
* Tue May 18 2010 Kyle McMartin <kyle at redhat.com>
- btrfs: check for read permission on src file in the clone ioctl
  (rhbz#593226)
* Mon May 17 2010 Matthew Garrett <mjg at redhat.com>
- thinkpad-acpi-fix-backlight.patch: Fix backlight control on some recent
   Thinkpads
* Mon May 17 2010 Kyle McMartin <kyle at redhat.com> 2.6.33.4-97
- perf-mount-debugfs-automatically.patch (#570821)
* Mon May 17 2010 Ben Skeggs <bskeggs at redhat.com> 2.6.33.4-96
- drm: fix edid modeline for 1024x768 at 85Hz (#582472)
* Thu May 13 2010 Jarod Wilson <jarod at redhat.com> 2.6.33.4-95
- Enable support for kworld ub435-q and 340u usb atsc tuners
* Thu May 13 2010 Peter Hutterer <peter.hutterer at redhat.com>
- linux-2.6-input-clickpad-support.patch: add support for ClickPad
  touchpads (#590835)
* Wed May 12 2010 Chuck Ebbert <cebbert at redhat.com>  2.6.33.4-93
- Linux 2.6.33.4
- Drop patches merged upstream:
    linux-2.6-pci-fixup-resume.patch
    linux-2.6-tun-orphan_an_skb_on_tx.patch
    libata-fix-accesses-at-LBA28-boundary.patch
    linux-2.6-creds_are_invalid-race.patch
    hugetlb-fix-infinite-loop-in-get-futex-key.patch
    reiserfs-fix-permissions-on-reiserfs-priv.patch
    ath9k-reorder-ieee80211_free_hw-behind-ath9k_uninit_.patch
- Revert -stable DRM patches we already have:
    drm-i915-add-initial-bits-for-vga-modesetting-bringup-on-sandybridge.patch
    drm-i915-fix-tiling-limits-for-i915-class-hw-v2.patch
- Fix up patches to apply on top of 2.6.33.4:
    linux-2.6-p54pci.patch
    vhost_net-rollup.patch
* Wed May 12 2010 Roland McGrath <roland at redhat.com>
- utrace update (#590954)
* Mon May 10 2010 Kyle McMartin <kyle at redhat.com>
- don't link binutils against perf. sigh. stupid gpl versions.
* Mon May 10 2010 Eric Paris <eparis at redhat.com>
- reduce size of selinux poliy memory allocation (rhbz#590363)
* Mon May 10 2010 Kyle McMartin <kyle at redhat.com>
- crypto-aesni-kill-module_alias.patch: kill MODULE_ALIAS to prevent
  aesni-intel from autoloading.
* Mon May 10 2010 Ben Skeggs <bskeggs at redhat.com>
- add linux-2.6-input-hid-quirk-egalax.patch, missed from F-12, requested
  by Peter Hutterer.
* Sun May  9 2010 Kyle McMartin <kyle at redhat.com>
- fs-explicitly-pass-in-whether-sb-is-pinned-or-not.patch (rhbz#588930)
* Sat May  8 2010 Kyle McMartin <kyle at redhat.com>
- Link perf against libbfd.a for name-demangling support. (rhbz#590289)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #585094 - CVE-2010-1437 kernel: keyrings: find_keyring_by_name() can gain the freed keyring
        https://bugzilla.redhat.com/show_bug.cgi?id=585094
  [ 2 ] Bug #593226 - CVE-2010-1636 kernel: btrfs: check for read permission on src file in the clone ioctl
        https://bugzilla.redhat.com/show_bug.cgi?id=593226
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update kernel' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


More information about the package-announce mailing list