[SECURITY] Fedora 7 Update: kernel-2.6.22.4-65.fc7

updates at fedoraproject.org updates at fedoraproject.org
Fri Aug 24 05:44:00 UTC 2007


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-1785
2007-08-23 22:42:07.243832
--------------------------------------------------------------------------------

Name        : kernel
Product     : Fedora 7
Version     : 2.6.22.4
Release     : 65.fc7
Summary     : The Linux kernel (the core of the Linux operating system)
Description :
The kernel package contains the Linux kernel (vmlinuz), the core of any
Linux operating system.  The kernel handles the basic functions
of the operating system:  memory allocation, process allocation, device
input and output, etc.

--------------------------------------------------------------------------------
Update Information:

Update to kernel 2.6.22.2, 2.6.22.3 and 2.6.22.4:
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.2
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.3
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.4

- Fix failure to find serial ports on some machines.
- Detect broken timers on some AMD dual-core machines: fixes
hangs and failure to boot.
- Don't crash when a userspace driver requests too much memory.
- Update the CFS scheduler to more closely match upstream.
- Wireless driver update.
- Enable ACPI_DEBUG in -debug builds.
- Fix e820 memory hole sizing on x86_64.
- Add four bugfixes for sky2 ethernet.
- Fix some SCSI async scanning bugs.
- Fix polling in r8169 driver.
- Fix wrong sensor values with some chips.

CVE-2007-3848:
Linux kernel 2.4.35 and other versions allows local users to
send arbitrary signals to a child process that is running at
higher privileges by causing a setuid-root parent process to
die, which delivers an attacker-controlled parent process
death signal (PR_SET_PDEATHSIG).

--------------------------------------------------------------------------------
ChangeLog:

* Tue Aug 21 2007 Chuck Ebbert <cebbert at redhat.com>
- sky2: don't clear PHY power bits
* Tue Aug 21 2007 Chuck Ebbert <cebbert at redhat.com>
- Hibernation: do not try to mark invalid PFNs as nosave
* Tue Aug 21 2007 Dave Jones <davej at redhat.com>
- 2.6.22.4
* Thu Aug 16 2007 Dave Jones <davej at redhat.com>
- Fix symvers warning on install of debug kernel.
* Thu Aug 16 2007 Chuck Ebbert <cebbert at redhat.com>
- sensors:   fix wrong values with some chips
- r8169:     fix polling
- forcedeth: fix wrong OUI for PHY
- SCSI:      fix async scanning
- sky2:      4 patches from maintainer
* Thu Aug 16 2007 Chuck Ebbert <cebbert at redhat.com>
- enable ACPI_DEBUG in -debug builds
- fix e820 memory hole sizing on x86_64
- export GFS2 symbols for lock modules
* Wed Aug 15 2007 Chuck Ebbert <cebbert at redhat.com>
- Linux 2.6.22.3
* Wed Aug 15 2007 Chuck Ebbert <cebbert at redhat.com>
- ACPI: fix broken conversion of older FADTs
- ACPI: fix possible corruption of GPE list
* Tue Aug 14 2007 Chuck Ebbert <cebbert at redhat.com>
- revert "don't BUG on too-large memory allocation"
- limit memory allocated by input force feedback drivers
* Tue Aug 14 2007 John W. Linville <linville at redhat.com>
- Update wireless-dev bits (mac80211 & ssb updates, bcm43xx -> b43 rename)
* Tue Aug 14 2007 Chuck Ebbert <cebbert at redhat.com>
- update CFS scheduler with upstream patches
* Tue Aug 14 2007 Chuck Ebbert <cebbert at redhat.com>
- set CONFIG_NET_RADIO (#251094)
* Fri Aug 10 2007 Chuck Ebbert <cebbert at redhat.com>
- 2.6.22.2
- serial: revert changes to port detection
* Fri Aug 10 2007 Chuck Ebbert <cebbert at redhat.com>
- don't use incremental patches for -stable updates
- update CFS scheduler patch
- update utrace patches
* Wed Aug  8 2007 John W. Linville <linville at redhat.com>
- Update wireless bits (upstream fixes, iwlwifi and bcm43xx updates)
* Wed Aug  8 2007 Chuck Ebbert <cebbert at redhat.com>
- add xt_statistic.h to header list for iptables
- detect broken lapic timer on some dual-core AMD systems
- don't BUG on too-large memory allocation
* Tue Aug  7 2007 John W. Linville <linville at redhat.com>
- mac80211: probe for hidden SSIDs during when scanning for association
* Mon Aug  6 2007 John W. Linville <linville at redhat.com>
- Update git-wireless-dev.patch (bcm43xx & zd1211rw updates)
- mac80211: Filter locally-originated multicast frames echoed by AP (2nd try)
* Fri Aug  3 2007 John W. Linville <linville at redhat.com>
- Disable busted mac80211 local multicast filter patch
* Thu Aug  2 2007 John W. Linville <linville at redhat.com>
- Update git-wireless-dev.patch (iwlwifi, rt2x00, & zd1211rw updates)
- mac80211: Filter locally-originated multicast frames echoed by AP
* Wed Aug  1 2007 Chuck Ebbert <cebbert at redhat.com>
- fix crash in xfrm4
* Tue Jul 31 2007 David Woodhouse <dwmw2 at infradead.org>
- fix softmac deadlock.
* Fri Jul 27 2007 John W. Linville <linville at redhat.com>
- Update git-wireless-dev.patch (iwlwifi & bcm43xx updates)
- Remove hunk of linux-2.6-wireless that was reverted upstream
* Fri Jul 27 2007 Chuck Ebbert <cebbert at redhat.com>
- revert upstream "genirq: do not mask interrupts by default"
* Fri Jul 27 2007 Chuck Ebbert <cebbert at redhat.com>
- fix DMI strings in HP notebook quirk for ALI controller
* Fri Jul 27 2007 Chuck Ebbert <cebbert at redhat.com>
- sync the CFS scheduler timekeeping changes with upstream
* Fri Jul 27 2007 David Woodhouse <dwmw2 at infradead.org>
- Update PlayStation 3 support (#249217)
* Wed Jul 25 2007 John W. Linville <linville at redhat.com>
- update wireless bits
* Wed Jul 25 2007 Chuck Ebbert <cebbert at redhat.com>
- kernel requires newer version of cpuspeed
- pata_hpt37x: Fix 2.6.22 clock PLL regression (#249254)
- atl1: possibly fix DMA bugs (#249511)
* Wed Jul 25 2007 David Woodhouse <dwmw2 at infradead.org>
- Restore bcm43xx functionality
- Restore PowerMac suspend-to-ram via /sys/power/state
  (since userspace forgot how to use the PMU ioctls)
- Restore ofpath functionality (IDE_PROC_FS=y)
* Mon Jul 23 2007 Chuck Ebbert <cebbert at redhat.com>
- set CONFIG_DEBUG_SHIRQ only in -debug kernels
* Mon Jul 23 2007 Chuck Ebbert <cebbert at redhat.com>
- set CONFIG_USB_DEVICE_CLASS (should fix #249211)
* Mon Jul 23 2007 Jarod Wilson <jwilson at redhat.com>
- Re-enable aes-i586 and twofish-i586 for i686 kernels (#249158)
* Fri Jul 20 2007 Chuck Ebbert <cebbert at redhat.com>
- SDHCI: clear the error interrupt bit
- ftdi_sio: fix oops
* Fri Jul 20 2007 John W. Linville <linville at redhat.com>
- update wireless bits
* Fri Jul 20 2007 Chuck Ebbert <cebbert at redhat.com>
- utrace update
- CFS scheduler update
* Tue Jul 17 2007 John W. Linville <linville at redhat.com>
- update wireless bits
* Tue Jul 17 2007 Chuck Ebbert <cebbert at redhat.com>
- gfs2: update to the latest
- sched: fix show_task()/show_tasks() output
- sched: fix newly idle load balance in case of SMT
- sched: fix the all pinned logic in load_balance_newidle()
- fix leaks of struct seq_operations
- fix leaks of ref to user struct
- pata_atiixp: add SB700 PCI ID
- ata_piix: fix pio/mwdma programming
- sdhci: add ene controller id
- sdhci: Fix "Unexpected interrupt" handling
* Mon Jul 16 2007 Chuck Ebbert <cebbert at redhat.com>
- bluetooth: hangup tty before releasing rfcomm
- driver core: get driver properly during release
- net scheduler: fix deadlock
- input: rfkill driver screws up the CPU flags
- acpi-cpufreq: make register write work properly again
* Mon Jul 16 2007 Chuck Ebbert <cebbert at redhat.com>
- add proper caching of last_ctl to the 'unbreak SMART' fix
* Mon Jul 16 2007 Dave Jones <davej at redhat.com>
- Unbreak SMART on libata.
* Mon Jul 16 2007 Dave Jones <davej at redhat.com>
- Disable warnings that trigger due to disabled USB suspend.
* Fri Jul 13 2007 Chuck Ebbert <cebbert at redhat.com>
- add more ATI SB700 ids to the ahci driver
* Thu Jul 12 2007 Dave Jones <davej at redhat.com>
- Some systems have a HPET which is not incrementing, which leads
  to a complete hang.  Detect it during HPET setup.
* Thu Jul 12 2007 Dave Jones <davej at redhat.com>
- Replace the pcspkr private PIT lock by the global PIT lock to
  serialize the PIT access all over the place.
* Thu Jul 12 2007 Dave Jones <davej at redhat.com>
- Add back the rediffed PS3 patches.
* Thu Jul 12 2007 Chuck Ebbert <cebbert at redhat.com>
- ata: update noncq list
- idr: multiple bugfixes
- tcp: sack fix leak msgs
- vbe: always save ddc data
* Thu Jul 12 2007 Jarod Wilson <jwilson at redhat.com>
- Fix up some uname -r issues in certain kernel version
  cases (due to new versioning scheme)
* Wed Jul 11 2007 Chuck Ebbert <cebbert at redhat.com>
- jbd: fix transaction dropping (kernel oops)
- kvm: reinit real mode TSS on shutdown
- kvm: detect SVM disabled by BIOS
* Wed Jul 11 2007 Chuck Ebbert <cebbert at redhat.com>
- sky2: re-enable lost interrupt workarounds
- aacraid: ioctl handler needs permission check
* Wed Jul 11 2007 Dave Jones <davej at redhat.com>
- NFS: Add the mount option "nosharecache"
* Wed Jul 11 2007 Dave Jones <davej at redhat.com>
- Revert mkinitrd requires: bump to what's in FC7.
* Wed Jul 11 2007 Dave Jones <davej at redhat.com>
- Remove the x86-64 tickless patches, they aren't ready.
* Wed Jul 11 2007 Chuck Ebbert <cebbert at redhat.com>
- 2.6.22.1
* Wed Jul 11 2007 John W. Linville <linville at redhat.com>
- Update git-wireless-dev.patch
- Add upstream version of rtl8187 patch
- Add updated iwlwifi driver from intellinuxwireless.org
* Tue Jul 10 2007 Dave Jones <davej at redhat.com>
- Fix issue with PIE randomization (#246623).
* Tue Jul 10 2007 Dave Jones <davej at redhat.com>
- Rebase to 2.6.22
--------------------------------------------------------------------------------
References:

  [ 1 ] CVE-2007-3848
        http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3848
--------------------------------------------------------------------------------
Updated packages:

1c23041b40c8d7078355f0edf78fbdf0e605bfb3 kernel-doc-2.6.22.4-65.fc7.noarch.rpm
86832531976f1f28acc75764757bc22400b16cbe kernel-headers-2.6.22.4-65.fc7.i386.rpm
f0dd47d7242768e1f911f4fa4767b2a5c84e1333 kernel-devel-2.6.22.4-65.fc7.i686.rpm
0d9cf179eaa5b1dfaf0a8994a16ad6bcc3e2665b kernel-debug-devel-2.6.22.4-65.fc7.i686.rpm
37c1a8a4f5f02cf77f14faceb73c5a36c479bb2e kernel-PAE-debug-2.6.22.4-65.fc7.i686.rpm
6cc3db041616d19b2b9731975d789c3dcd63edae kernel-PAE-debug-debuginfo-2.6.22.4-65.fc7.i686.rpm
2a0fc573d73dc94d34bd9a56e73e14f2e1243817 kernel-debuginfo-2.6.22.4-65.fc7.i686.rpm
6065128b0ae24348fa864338aa645921f310c1ed kernel-debug-debuginfo-2.6.22.4-65.fc7.i686.rpm
7aba789ef190b5fe31e50498598ecc0f5147d2df kernel-PAE-2.6.22.4-65.fc7.i686.rpm
5a950dfe594587da704fc4a66d488f6681a8973c kernel-debug-2.6.22.4-65.fc7.i686.rpm
e2aa091be53eeaae49b2fba9da97c38cc4345d8a kernel-PAE-debug-devel-2.6.22.4-65.fc7.i686.rpm
bdef9dd56dff73dad9505e6f59718ddb48ecbd97 kernel-2.6.22.4-65.fc7.i686.rpm
94ca318de12bf3d97d0a454e29763fe9d061ffe2 kernel-PAE-devel-2.6.22.4-65.fc7.i686.rpm
ff8745274535dcc77b2d13eef6169e19d5601cb2 kernel-PAE-debuginfo-2.6.22.4-65.fc7.i686.rpm
f7455a2eec1b86a1714780d7c2906c9af5296e63 kernel-debuginfo-common-2.6.22.4-65.fc7.i686.rpm
2093207008ca2968065bc5aa734bdf416de2c7e7 kernel-debuginfo-2.6.22.4-65.fc7.ppc64.rpm
3fe83c9c8df9f350b21cd19bbea67618312cc33c kernel-debuginfo-common-2.6.22.4-65.fc7.ppc64.rpm
b0d336f45c1aa3da57e1704a9d3639fe5b6c8085 kernel-headers-2.6.22.4-65.fc7.ppc64.rpm
68009ed7312a32076b3c5c3470daa6d6115dec16 kernel-kdump-debuginfo-2.6.22.4-65.fc7.ppc64.rpm
10e783faa67c6d2b41091a39c644d97208033a02 kernel-kdump-2.6.22.4-65.fc7.ppc64.rpm
c30323da2f9a073e3ba0da77debe9b20e4b35759 kernel-2.6.22.4-65.fc7.ppc64.rpm
cf27321c70608399c37fb685e9ee57e31eeb0037 kernel-devel-2.6.22.4-65.fc7.ppc64.rpm
7067412ffd0c9cf905eea5871eea9ec8b6cd6f26 kernel-kdump-devel-2.6.22.4-65.fc7.ppc64.rpm
f35b79a1f7805514859165f7b502e7707d77299e kernel-devel-2.6.22.4-65.fc7.i586.rpm
04e856a961d85e42a4971367e48b7a732dd4e723 kernel-debuginfo-common-2.6.22.4-65.fc7.i586.rpm
9667c42d11547d4d79fa788a6af3429b5718d298 kernel-2.6.22.4-65.fc7.i586.rpm
86c14be93fc82c4281af0e66c5500cc90eddcc16 kernel-debuginfo-2.6.22.4-65.fc7.i586.rpm
d72fba9743a1cc45bd82b6e9b2c170422caa2524 kernel-debug-debuginfo-2.6.22.4-65.fc7.x86_64.rpm
085d71a5e7a57c345b40eb22d82216f3aa5b53bc kernel-debug-2.6.22.4-65.fc7.x86_64.rpm
42a1db3c15a71bd8ce8a3455f1414cf9624aa772 kernel-debug-devel-2.6.22.4-65.fc7.x86_64.rpm
86368325d1e6e7c16970f78e473b347d31408d17 kernel-2.6.22.4-65.fc7.x86_64.rpm
7e93b66a71abc40121096a1dfc8e66d92f584036 kernel-headers-2.6.22.4-65.fc7.x86_64.rpm
bcbc4932609e3103c2bee1d0191e409a1c01376f kernel-debuginfo-2.6.22.4-65.fc7.x86_64.rpm
e5a2d387f83d6a833064f597f59b42592c485813 kernel-devel-2.6.22.4-65.fc7.x86_64.rpm
2f457eea7810e9f1bc524ea7610d33c09a0ae463 kernel-debuginfo-common-2.6.22.4-65.fc7.x86_64.rpm
0581ee204060c0fba195a9bbef1035f171f6c8df kernel-2.6.22.4-65.fc7.ppc.rpm
064a373695f097a77cf3c3018faf94eaa9d9c0e1 kernel-smp-2.6.22.4-65.fc7.ppc.rpm
9c8e6fd0b15b9b350acfe362ccfee5fcb56337a6 kernel-smp-devel-2.6.22.4-65.fc7.ppc.rpm
eba8dec236b9ae678e8e50dbe3bd6a01803f5954 kernel-debuginfo-common-2.6.22.4-65.fc7.ppc.rpm
89268e15396336b8d5412eaeded500b05c7c0d3a kernel-debuginfo-2.6.22.4-65.fc7.ppc.rpm
3b0f9bb3da20dc9eb915e1d425a7cad8209cf98d kernel-headers-2.6.22.4-65.fc7.ppc.rpm
29affa1fa6f567ffcf044ba43f0c96b1871592c8 kernel-smp-debuginfo-2.6.22.4-65.fc7.ppc.rpm
2f646cbec5dea2cdd8f9ab81da60dd5d006dc5a7 kernel-devel-2.6.22.4-65.fc7.ppc.rpm
ab073b2d7f612d97e6b872908a7e78fa34081cfe kernel-2.6.22.4-65.fc7.src.rpm

This update can be installed with the 'yum' update program.  Use 'yum update
package-name' at the command line.  For more information, refer to 'Managing
Software with yum,' available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------




More information about the Fedora-package-announce mailing list