[SECURITY] Fedora Core 6 Test Update: kernel-2.6.22.1-24.fc6

Chuck Ebbert cebbert at redhat.com
Fri Jul 20 16:17:29 UTC 2007 

---------------------------------------------------------------------
Fedora Test Update Notification
FEDORA-2007-640
2007-07-20
---------------------------------------------------------------------

Product     : Fedora Core 6
Name        : kernel
Version     : 2.6.22.1
Release     : 24.fc6
Summary     : The Linux kernel (the core of the Linux operating system)
Description :
The kernel package contains the Linux kernel (vmlinuz), the core of any
Linux operating system.  The kernel handles the basic functions
of the operating system:  memory allocation, process allocation, device
input and output, etc.

---------------------------------------------------------------------
Update Information:

Rebase kernel to 2.6.22.1:
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.1

Includes the CFS scheduler from upstream kernel 2.6.23.

Users should update to the latest autofs package with this
kernel or autofs will use excessive amounts of CPU time.

CVE-2007-3642:
The decode_choice function in
net/netfilter/bf_conntrack_h323_asn1.c in the Linux kernel
before 2.6.22 allows remote attackers to cause a denial of
service (crash) via an encoded, out-of-range index value for
a choice field, which triggers a NULL pointer dereference.

---------------------------------------------------------------------
* Thu Jul 19 2007 Chuck Ebbert <cebbert at redhat.com>
- restore the libata COMBINED_MODE hacks
- set CONFIG_NF_CONNTRACK_PROC_COMPAT
- restore the old firewire stack
- new utrace backport
* Tue Jul 17 2007 Chuck Ebbert <cebbert at redhat.com>
- disable the nohz and highres kernel options
  by default -- enable with 'nohz=yes highres=yes'
* Tue Jul 17 2007 Chuck Ebbert <cebbert at redhat.com>
- gfs2: update to the latest
- sched: fix show_task()/show_tasks() output
- sched: fix newly idle load balance in case of SMT
- sched: fix the all pinned logic in load_balance_newidle()
- fix leaks of struct seq_operations
- fix leaks of ref to user struct
- pata_atiixp: add SB700 PCI ID
- ata_piix: fix pio/mwdma programming
- sdhci: add ene controller id
- sdhci: Fix "Unexpected interrupt" handling
* Mon Jul 16 2007 Chuck Ebbert <cebbert at redhat.com>
- bluetooth: hangup tty before releasing rfcomm
- driver core: get driver properly during release
- net scheduler: fix deadlock
- input: rfkill driver screws up the CPU flags
- acpi-cpufreq: make register write work properly again
* Mon Jul 16 2007 Chuck Ebbert <cebbert at redhat.com>
- add proper caching of last_ctl to the 'unbreak SMART' fix
* Mon Jul 16 2007 Dave Jones <davej at redhat.com>
- Unbreak SMART on libata.
* Mon Jul 16 2007 Dave Jones <davej at redhat.com>
- Disable warnings that trigger due to disabled USB suspend.
* Thu Jul 12 2007 Dave Jones <davej at redhat.com>
- Some systems have a HPET which is not incrementing, which leads
  to a complete hang.  Detect it during HPET setup.
* Thu Jul 12 2007 Dave Jones <davej at redhat.com>
- Replace the pcspkr private PIT lock by the global PIT lock to
  serialize the PIT access all over the place.
* Thu Jul 12 2007 Chuck Ebbert <cebbert at redhat.com>
- ata: update noncq list
- idr: multiple bugfixes
- tcp: sack fix leak msgs
- vbe: always save ddc data
* Thu Jul 12 2007 Jarod Wilson <jwilson at redhat.com>
- Fix up some uname -r issues in certain kernel version
  cases (due to new versioning scheme)
* Wed Jul 11 2007 Chuck Ebbert <cebbert at redhat.com>
- jbd: fix transaction dropping (kernel oops)
* Wed Jul 11 2007 Dave Jones <davej at redhat.com>
- NFS: Add the mount option "nosharecache"
* Wed Jul 11 2007 Chuck Ebbert <cebbert at redhat.com>
- 2.6.22.1
* Wed Jul 11 2007 Dave Jones <davej at redhat.com>
- Revert mkinitrd requires: bump to what's in FC6.
* Wed Jul 11 2007 Dave Jones <davej at redhat.com>
- Remove the x86-64 tickless patches, they aren't ready.
* Tue Jul 10 2007 Dave Jones <davej at redhat.com>
- Fix issue with PIE randomization (#246623).
* Tue Jul 10 2007 Chuck Ebbert <cebbert at redhat.com>
- sky2: re-enable lost interrupt workarounds
- aacraid: ioctl handler needs permission check
* Mon Jul  9 2007 Dave Jones <davej at redhat.com>
- Disable forced HPET on ESB2 too
* Mon Jul  9 2007 Chuck Ebbert <cebbert at redhat.com>
- changed default TCP/IPV4 congestion control to CUBIC
* Mon Jul  9 2007 Dave Jones <davej at redhat.com>
- Rebase to 2.6.22

---------------------------------------------------------------------
This update can be downloaded from:
    http://download.fedora.redhat.com/pub/fedora/linux/core/updates/testing/6/

8db24715d453faf638d8d6421fe4ddd2de1082ce  SRPMS/kernel-2.6.22.1-24.fc6.src.rpm
8db24715d453faf638d8d6421fe4ddd2de1082ce  noarch/kernel-2.6.22.1-24.fc6.src.rpm
0178b4dec6e3aa5e0d2b6079ae9601b987a21624  ppc/debug/kernel-smp-debuginfo-2.6.22.1-24.fc6.ppc.rpm
a72306415eb77430e36e003d99972509c8dddc1b  ppc/kernel-devel-2.6.22.1-24.fc6.ppc.rpm
a0fabd175784267cbc4b332ed94299909bcca26a  ppc/kernel-2.6.22.1-24.fc6.ppc.rpm
5b373a49665018730dcbf5906012bc9ce1f8f13e  ppc/kernel-smp-2.6.22.1-24.fc6.ppc.rpm
af4746a8f1c8636f864ece9bc2e9b468e1c7561b  ppc/kernel-smp-devel-2.6.22.1-24.fc6.ppc.rpm
563b6f92ca6975d3b535ec562a1457a6d59e2c48  ppc/debug/kernel-debuginfo-2.6.22.1-24.fc6.ppc.rpm
d798b3c5c616cb0e51ea8ea66eb8951359fa7831  ppc/kernel-headers-2.6.22.1-24.fc6.ppc.rpm
1b4849a0e08f94e4a393343f646c9a33390d8f16  ppc/debug/kernel-debuginfo-common-2.6.22.1-24.fc6.ppc.rpm
76ff8070003938cec69e55276f6a1998ac5adbf2  ppc/kernel-doc-2.6.22.1-24.fc6.noarch.rpm
bbf11f372d325cea66a588a59c3122bf94f903eb  x86_64/debug/kernel-debuginfo-2.6.22.1-24.fc6.x86_64.rpm
90e1a8f7e29185b076fe1b521cd744fe5fc383f8  x86_64/debug/kernel-debuginfo-common-2.6.22.1-24.fc6.x86_64.rpm
18386cf1fe2b97ad62cc2a417b99a7ebf45a2d6a  x86_64/kernel-debug-2.6.22.1-24.fc6.x86_64.rpm
af57266d95a177e31752f39abe1c0b4a7ccab8e3  x86_64/debug/kernel-debug-debuginfo-2.6.22.1-24.fc6.x86_64.rpm
34d5f842eb7d2f6e2ee05469012318efa37a79c7  x86_64/kernel-2.6.22.1-24.fc6.x86_64.rpm
49acf779b907df624413339d1e73ab1e3c6888b5  x86_64/kernel-headers-2.6.22.1-24.fc6.x86_64.rpm
2e1eb630ae9465393b466a4e9bda115dffc025f4  x86_64/kernel-debug-devel-2.6.22.1-24.fc6.x86_64.rpm
5c8637554b34beb227729254437b05936fc2150b  x86_64/kernel-devel-2.6.22.1-24.fc6.x86_64.rpm
76ff8070003938cec69e55276f6a1998ac5adbf2  x86_64/kernel-doc-2.6.22.1-24.fc6.noarch.rpm
0ed81c04a00774b392fae406d4df120ac4f8f66f  i386/kernel-headers-2.6.22.1-24.fc6.i386.rpm
c28f6c6c75712843b346ae05a90475b55a497762  i386/debug/kernel-debuginfo-2.6.22.1-24.fc6.i586.rpm
e75a209755ba7805b0d2ac116e53712d48ae49ed  i386/debug/kernel-debuginfo-common-2.6.22.1-24.fc6.i586.rpm
392ef748c44b39cb68c0fdd6db56ed891668e8da  i386/kernel-devel-2.6.22.1-24.fc6.i586.rpm
335c26820d1a791cfeb63b916e0df77556664ace  i386/kernel-2.6.22.1-24.fc6.i586.rpm
a07376e2b2910e8f3a3b158cc29030bf72abc176  i386/kernel-PAE-2.6.22.1-24.fc6.i686.rpm
a9bd65a08caaf1c7b14b56547aff9248543233da  i386/kernel-2.6.22.1-24.fc6.i686.rpm
459d9921291894c28ea2baf1257a1dcba441e749  i386/kernel-PAE-debug-devel-2.6.22.1-24.fc6.i686.rpm
ccab3f9663bed881a73078330300a3df63658b02  i386/debug/kernel-debuginfo-2.6.22.1-24.fc6.i686.rpm
d3f0ff9a9669f0e362c03343a2338daa97ba7df9  i386/debug/kernel-PAE-debuginfo-2.6.22.1-24.fc6.i686.rpm
22adaefd1ad90ff4d1badffb726fdd1243cced92  i386/kernel-devel-2.6.22.1-24.fc6.i686.rpm
268b7d5c44ebe76ae932a95d06d481e6e6b07578  i386/kernel-debug-devel-2.6.22.1-24.fc6.i686.rpm
4cb023574d46e2db40c27ec28efb72de3cdc3689  i386/debug/kernel-debuginfo-common-2.6.22.1-24.fc6.i686.rpm
79d9a39d184a0ea4871a6a6985cdc3279b6c8892  i386/debug/kernel-debug-debuginfo-2.6.22.1-24.fc6.i686.rpm
c160c2253005b7c4644ba170905f010e92151295  i386/kernel-PAE-debug-2.6.22.1-24.fc6.i686.rpm
6e1c5d8d078a04bb8eb8f9ce6e6ad28cea5dbf7b  i386/debug/kernel-PAE-debug-debuginfo-2.6.22.1-24.fc6.i686.rpm
dae3e55d59f88260f811559b9a3b592657de471b  i386/kernel-debug-2.6.22.1-24.fc6.i686.rpm
0b46667112e1e62779a3c3812723125bc169b9ea  i386/kernel-PAE-devel-2.6.22.1-24.fc6.i686.rpm
76ff8070003938cec69e55276f6a1998ac5adbf2  i386/kernel-doc-2.6.22.1-24.fc6.noarch.rpm

This update can be installed with the 'yum' update program.  Use 'yum update
package-name' at the command line.  For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------

More information about the fedora-test-list mailing list