Hello community, here is the log from the commit of package kernel-source for openSUSE:11.4 checked in at Wed Jan 4 00:42:31 CET 2012. -------- --- old-versions/11.4/UPDATES/all/kernel-source/kernel-debug.changes 2011-10-24 17:40:39.000000000 +0200 +++ 11.4/kernel-source/kernel-debug.changes 2011-12-21 17:33:48.000000000 +0100 @@ -1,0 +2,219 @@ +Mon Dec 19 23:39:38 CET 2011 - bpoirier@suse.de + +- econet: 4 byte infoleak to the network (bnc#681184 + CVE-2011-1173). +- commit d3bfb6d + +------------------------------------------------------------------- +Sun Dec 18 23:04:20 CET 2011 - bpoirier@suse.de + +- ipv6: netfilter: ip6_tables: fix infoleak to userspace + (bnc#681185 CVE-2011-1172). +- commit 869dd96 + +------------------------------------------------------------------- +Tue Dec 13 19:45:17 CET 2011 - bpoirier@suse.de + +- batman-adv: Only write requested number of byte to user buffer + (bnc#736149 CVE-2011-4604). +- batman-adv: bat_socket_read missing checks (bnc#736149 + CVE-2011-4604). +- commit 07f855d + +------------------------------------------------------------------- +Thu Dec 8 16:42:33 CET 2011 - bpoirier@suse.de + +- ipv6: fix NULL dereference in udp6_ufo_fragment() (bnc#707288 + CVE-2011-2699). +- commit 2d6bb88 + +------------------------------------------------------------------- +Mon Dec 5 16:37:44 CET 2011 - bpoirier@suse.de + +- netfilter: ip_tables: fix infoleak to userspace (bnc#681181 + CVE-2011-1171). +- commit e090058 + +------------------------------------------------------------------- +Mon Dec 5 01:09:38 CET 2011 - bpoirier@suse.de + +- netfilter: arp_tables: fix infoleak to userspace (bnc#681180 + CVE-2011-1170). +- commit 8b41f28 + +------------------------------------------------------------------- +Fri Dec 2 21:42:53 CET 2011 - bpoirier@suse.de + +- bridge: netfilter: fix information leak (bnc#676602 + CVE-2011-1080). +- commit 62c3d6e + +------------------------------------------------------------------- +Thu Dec 1 15:41:39 CET 2011 - mhocko@suse.cz + +- Refresh + patches.fixes/cgroup_freezer_freeze_stopped_tasks_correctly.patch. +- commit 22bd277 + +------------------------------------------------------------------- +Thu Dec 1 09:34:26 CET 2011 - jbeulich@novell.com + +- patches.xen/1124-x86-undo-limit-pages.patch: x86: undo_limit_pages() + must reset page count. +- patches.xen/1126-netback-invalidation-index.patch: netback: use correct + index for invalidation in netbk_tx_check_mop(). +- patches.xen/xen3-patch-2.6.37: Add barrier emulation to blkback. +- Refresh other Xen patches. +- commit 36149a1 + +------------------------------------------------------------------- +Thu Dec 1 00:01:12 CET 2011 - bpoirier@suse.de + +- inet_diag: fix inet_diag_bc_audit() (bnc#700879 CVE-2011-2213). +- commit 12c0a80 + +------------------------------------------------------------------- +Thu Nov 24 10:33:03 CET 2011 - jdelvare@suse.de + +- patches.fixes/drm-radeon-kms-fix-up-gpio-i2c-mask-bits-for-r4xx.patch: Add missing git-commit. +- commit 350fcc8 + +------------------------------------------------------------------- +Wed Nov 23 17:59:15 CET 2011 - jdelvare@suse.de + +- hwmon: (max1111) Fix race condition causing NULL pointer + exception. +- hwmon: (it87) Fix label group removal. +- hwmon: (coretemp) Fix TjMax detection for older CPUs. +- hwmon: (coretemp) Relax target temperature range check. +- hwmon: (asus_atk0110) Fix memory leak. +- i2c/pca954x: Initialize the mux to disconnected state. +- commit f33e890 + +------------------------------------------------------------------- +Wed Nov 23 10:33:26 CET 2011 - jdelvare@suse.de + +- Move drm-radeon-kms-fix-up-gpio-i2c-mask-bits-for-r4xx.patch to a better place +- commit 5da68df + +------------------------------------------------------------------- +Tue Nov 22 15:55:49 CET 2011 - jdelvare@suse.de + +- drm/radeon/kms: fix up gpio i2c mask bits for r4xx (bnc#691052). +- commit 1b9d079 + +------------------------------------------------------------------- +Tue Nov 22 11:16:20 CET 2011 - mhocko@suse.cz + +- cgroup_freezer: fix freezing groups with stopped tasks + (bnc#713933). +- commit fef1462 + +------------------------------------------------------------------- +Mon Nov 21 21:52:19 CET 2011 - bpoirier@suse.de + +- netfilter: ipt_CLUSTERIP: fix buffer overflow (bnc#702037 + CVE-2011-2534). +- commit 6480665 + +------------------------------------------------------------------- +Fri Nov 18 23:37:34 CET 2011 - bpoirier@suse.de + +- dccp: handle invalid feature options length (bnc#692498 + CVE-2011-1770). +- commit fa6032a + +------------------------------------------------------------------- +Tue Nov 15 17:45:17 CET 2011 - bpoirier@suse.de + +- ipv6: make fragment identifications less predictable (bnc#707288 + CVE-2011-2699). +- commit 9c1c64f + +------------------------------------------------------------------- +Tue Nov 15 17:05:09 CET 2011 - jbeulich@novell.com + +- re-introduce machine_to_phys_order for kABI consistency. +- commit 5dbc86b + +------------------------------------------------------------------- +Tue Nov 15 13:52:02 CET 2011 - jbeulich@novell.com + +- patches.xen/1101-x86-m2p-nr.patch: x86: replace order-based range + checking of M2P table by linear one. +- Refresh other Xen patches. +- commit 8dd9722 + +------------------------------------------------------------------- +Mon Nov 14 16:46:15 CET 2011 - bpoirier@suse.de + +- gro: Only reset frag0 when skb can be pulled (bnc#709764 + CVE-2011-2723). +- commit e289f56 + +------------------------------------------------------------------- +Mon Nov 14 14:02:54 CET 2011 - bpoirier@suse.de + +- igbvf: Remove extra struct page member + (http://article.gmane.org/gmane.linux.network/180760). +- commit 1ad2feb + +------------------------------------------------------------------- +Fri Nov 11 22:18:34 CET 2011 - bpoirier@suse.de + +- af_packet: prevent information leak (bnc#710235 CVE-2011-2898). +- commit 1e4accd + +------------------------------------------------------------------- +Mon Nov 7 05:21:38 CET 2011 - neilb@suse.de + +- sunrpc: wake up SOFTCONN tasks when a connection error happens + (bnc#679059). +- commit 561328d + +------------------------------------------------------------------- +Fri Nov 4 18:22:55 CET 2011 - jbohac@suse.cz + +- ip: ip_options_compile() resilient to NULL skb route + (bnc#709561, CVE-2011-4087). +- bridge: reset IPCB in br_parse_ip_options (bnc#709561, + CVE-2011-4087). +- commit af1bd88 + +------------------------------------------------------------------- +Thu Nov 3 17:56:46 CET 2011 - mszeredi@suse.cz + +- patches.fixes/hfs-fix-hfs_find_init-sb-ext_tree-null-ptr-oops.patch: + hfs: fix hfs_find_init() sb->ext_tree NULL ptr oops + (CVE-2011-2203 bnc#699709). +- commit 726dc6b + +------------------------------------------------------------------- +Thu Nov 3 16:55:32 CET 2011 - jeffm@suse.com + +- crypto: ghash - Avoid null pointer dereference if no key is set + (CVE-2011-4081 bnc#726788). +- commit fc6977d + ++++ 22 more lines (skipped) ++++ between old-versions/11.4/UPDATES/all/kernel-source/kernel-debug.changes ++++ and 11.4/kernel-source/kernel-debug.changes kernel-default.changes: same change kernel-desktop.changes: same change kernel-docs.changes: same change kernel-ec2.changes: same change kernel-net.changes: same change kernel-pae.changes: same change kernel-ppc64.changes: same change kernel-ps3.changes: same change kernel-s390.changes: same change kernel-source.changes: same change kernel-syms.changes: same change kernel-trace.changes: same change kernel-vanilla.changes: same change kernel-vmi.changes: same change kernel-xen.changes: same change calling whatdependson for 11.4-i586 Old: ---- minmem needed_space_in_mb ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ kernel-debug.spec ++++++ --- /var/tmp/diff_new_pack.z8ue8i/_old 2012-01-04 00:40:54.000000000 +0100 +++ /var/tmp/diff_new_pack.z8ue8i/_new 2012-01-04 00:40:54.000000000 +0100 @@ -1,7 +1,7 @@ # # spec file for package kernel-debug # -# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -56,7 +56,7 @@ Name: kernel-debug Summary: A Debug Version of the Kernel Version: 2.6.37.6 -Release: 0.<RELEASE9> +Release: 0.<RELEASE11> %if %using_buildservice %else %endif kernel-default.spec: same change kernel-desktop.spec: same change kernel-docs.spec: same change kernel-ec2.spec: same change ++++++ kernel-net.spec ++++++ --- /var/tmp/diff_new_pack.z8ue8i/_old 2012-01-04 00:40:55.000000000 +0100 +++ /var/tmp/diff_new_pack.z8ue8i/_new 2012-01-04 00:40:55.000000000 +0100 @@ -1,7 +1,7 @@ # # spec file for package kernel-net # -# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -56,7 +56,7 @@ Name: kernel-net Summary: Minimal kernel with disk and net support Version: 2.6.37.6 -Release: 0.<RELEASE4> +Release: 0.<RELEASE5> %if %using_buildservice %else %endif ++++++ kernel-pae.spec ++++++ --- /var/tmp/diff_new_pack.z8ue8i/_old 2012-01-04 00:40:55.000000000 +0100 +++ /var/tmp/diff_new_pack.z8ue8i/_new 2012-01-04 00:40:55.000000000 +0100 @@ -1,7 +1,7 @@ # # spec file for package kernel-pae # -# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -56,7 +56,7 @@ Name: kernel-pae Summary: Kernel with PAE Support Version: 2.6.37.6 -Release: 0.<RELEASE9> +Release: 0.<RELEASE11> %if %using_buildservice %else %endif ++++++ kernel-ppc64.spec ++++++ --- /var/tmp/diff_new_pack.z8ue8i/_old 2012-01-04 00:40:55.000000000 +0100 +++ /var/tmp/diff_new_pack.z8ue8i/_new 2012-01-04 00:40:55.000000000 +0100 @@ -1,7 +1,7 @@ # # spec file for package kernel-ppc64 # -# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -56,7 +56,7 @@ Name: kernel-ppc64 Summary: Kernel for ppc64 Systems Version: 2.6.37.6 -Release: 0.<RELEASE4> +Release: 0.<RELEASE5> %if %using_buildservice %else %endif kernel-ps3.spec: same change kernel-s390.spec: same change ++++++ kernel-source.spec ++++++ --- /var/tmp/diff_new_pack.z8ue8i/_old 2012-01-04 00:40:55.000000000 +0100 +++ /var/tmp/diff_new_pack.z8ue8i/_new 2012-01-04 00:40:55.000000000 +0100 @@ -1,7 +1,7 @@ # # spec file for package kernel-source # -# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -30,7 +30,7 @@ Name: kernel-source Summary: The Linux Kernel Sources Version: 2.6.37.6 -Release: 0.<RELEASE9> +Release: 0.<RELEASE11> %if %using_buildservice %else %endif ++++++ kernel-syms.spec ++++++ --- /var/tmp/diff_new_pack.z8ue8i/_old 2012-01-04 00:40:55.000000000 +0100 +++ /var/tmp/diff_new_pack.z8ue8i/_new 2012-01-04 00:40:55.000000000 +0100 @@ -1,7 +1,7 @@ # # spec file for package kernel-syms # -# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -24,7 +24,7 @@ Name: kernel-syms Summary: Kernel Symbol Versions (modversions) Version: 2.6.37.6 -Release: 0.<RELEASE9> +Release: 0.<RELEASE11> %if %using_buildservice %else %define kernel_source_release %(LC_ALL=C rpm -q kernel-devel%variant-%version --qf "%{RELEASE}" | grep -v 'not installed' || echo 0) ++++++ kernel-trace.spec ++++++ --- /var/tmp/diff_new_pack.z8ue8i/_old 2012-01-04 00:40:55.000000000 +0100 +++ /var/tmp/diff_new_pack.z8ue8i/_new 2012-01-04 00:40:55.000000000 +0100 @@ -1,7 +1,7 @@ # # spec file for package kernel-trace # -# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -56,7 +56,7 @@ Name: kernel-trace Summary: The Standard Kernel with Tracing Features Version: 2.6.37.6 -Release: 0.<RELEASE9> +Release: 0.<RELEASE11> %if %using_buildservice %else %endif kernel-vanilla.spec: same change kernel-vmi.spec: same change kernel-xen.spec: same change ++++++ patches.fixes.tar.bz2 ++++++ ++++ 1957 lines of diff (skipped) ++++++ patches.kabi.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/patches.kabi/1101-x86-m2p-nr.patch new/patches.kabi/1101-x86-m2p-nr.patch --- old/patches.kabi/1101-x86-m2p-nr.patch 1970-01-01 01:00:00.000000000 +0100 +++ new/patches.kabi/1101-x86-m2p-nr.patch 2011-11-15 17:05:09.000000000 +0100 @@ -0,0 +1,27 @@ +From: jbeulich@novell.com +Subject: re-introduce machine_to_phys_order for kABI consistency +Patch-mainline: n/a + +On 64-bit we can safely expose the symbol, but on 32-bit exposing it +leaves the problem addressed by the original change un-fixed for any +consumer. + +--- 11.4-2011-10-05.orig/arch/x86/kernel/head-xen.c 2010-11-25 14:57:41.000000000 +0100 ++++ 11.4-2011-10-05/arch/x86/kernel/head-xen.c 2011-10-06 10:58:43.000000000 +0200 +@@ -82,6 +82,8 @@ unsigned long *__read_mostly machine_to_ + EXPORT_SYMBOL(machine_to_phys_mapping); + unsigned long __read_mostly machine_to_phys_nr; + EXPORT_SYMBOL(machine_to_phys_nr); ++static unsigned int machine_to_phys_order; ++EXPORT_SYMBOL(machine_to_phys_order); + + void __init xen_start_kernel(void) + { +@@ -99,6 +101,7 @@ void __init xen_start_kernel(void) + WARN_ON(machine_to_phys_mapping + (machine_to_phys_nr - 1) + < machine_to_phys_mapping); + #endif ++ machine_to_phys_order = __fls(machine_to_phys_nr - 1); + + if (!xen_feature(XENFEAT_auto_translated_physmap)) + phys_to_machine_mapping = ++++++ patches.xen.tar.bz2 ++++++ ++++ 23171 lines of diff (skipped) ++++++ series.conf ++++++ --- /var/tmp/diff_new_pack.z8ue8i/_old 2012-01-04 00:40:59.000000000 +0100 +++ /var/tmp/diff_new_pack.z8ue8i/_new 2012-01-04 00:40:59.000000000 +0100 @@ -90,6 +90,11 @@ # Bug workarounds for binutils ######################################################## + ######################################################## + # Generic cgroup patches + ######################################################## + patches.fixes/cgroup_freezer_freeze_stopped_tasks_correctly.patch + ######################################################## # Scheduler / Core ######################################################## @@ -255,6 +260,7 @@ patches.fixes/fuse-check-size-of-fuse_notify_inval_entry-message.patch patches.fixes/memsw-remove-noswapaccount-kernel-parameter.patch + patches.fixes/oom-thaw-threads-if-oom-killed-thread-is-frozen-befo.patch ######################################################## # IPC patches @@ -371,6 +377,9 @@ patches.fixes/bonding-Incorrect-TX-queue-offset.patch patches.fixes/cdc-phonet-fix-stop-queue-handling.patch patches.fixes/ip_expire-must-revalidate-route.patch + patches.fixes/ipv6-make-fragment-identifications-less-predictable.patch + patches.fixes/ipv6-fix-NULL-dereference-in-udp6_ufo_fragment.patch + patches.fixes/ipv6-netfilter-ip6_tables-fix-infoleak-to-userspace.patch ######################################################## # NFS @@ -385,6 +394,7 @@ patches.kabi/NLM-Don-t-hang-forever-on-NLM-unlock-requests-fix.patch patches.fixes/nfsd-nfs4state-bug-fix patches.fixes/nfsd-fix-filp-leak.patch + patches.fixes/nfs-connect-timeout ######################################################## # lockd + statd @@ -503,6 +513,7 @@ patches.suse/0015-ext4-Use-IS_POSIXACL-to-check-for-POSIX-ACL-support.patch patches.suse/0016-ext4-Implement-richacl-support-in-ext4.patch + patches.fixes/hfs-fix-hfs_find_init-sb-ext_tree-null-ptr-oops.patch patches.fixes/debugfs_remove_corruption.diff patches.fixes/ecryptfs-add-mount-option-to-check-uid-of-device.patch @@ -610,11 +621,14 @@ patches.fixes/loop-queue_lock-null-pointer-derefence-in-blk_throtl_exit-v3.patch patches.fixes/scsi-blacklist-traxdata-iomega-drives-avoid-lock-ups + patches.fixes/ata-pata_it821x-fix-types-array.patch + ######################################################## # DRM/Video ######################################################## patches.fixes/drm-radeon-kms-check-AA-resolve-registers-on-r300.patch patches.fixes/drm-radeon-kms-fix-i2c-masks.patch + patches.fixes/drm-radeon-kms-fix-up-gpio-i2c-mask-bits-for-r4xx.patch ######################################################## # video4linux @@ -646,6 +660,18 @@ patches.fixes/bridge-fix-802.3ad-bonding.patch patches.fixes/rose-prevent-heap-corruption-with-bad-facilities.patch patches.fixes/rose-add-length-checks-to-CALL_REQUEST-parsing.patch + patches.fixes/bridge-reset-IPCB-in-br_parse_ip_options.patch + patches.fixes/ip-ip_options_compile-resilient-to-NULL-skb-route.patch + patches.fixes/af_packet-prevent-information-leak + patches.fixes/igbvf-remove-extra-struct-page-member + patches.fixes/gro-only-reset-frag0-when-skb-can-be-pulled + patches.fixes/dccp-handle-invalid-feature-options-length + patches.fixes/netfilter-ipt_CLUSTERIP-fix-buffer-overflow + patches.fixes/inet_diag-fix-inet_diag_bc_audit.patch + patches.fixes/bridge-netfilter-fix-information-leak.patch + patches.fixes/netfilter-arp_tables-fix-infoleak-to-userspace.patch + patches.fixes/netfilter-ip_tables-fix-infoleak-to-userspace.patch + patches.fixes/econet-4-byte-infoleak-to-the-network.patch ######################################################## # Wireless Networking @@ -656,6 +682,8 @@ patches.fixes/orinoco-allow-IW_AUTH_MFP-to-pass-through.patch patches.drivers/iwl-cleanup-iwl_good_ack_health.patch patches.drivers/iwl-fix-ack-health-for-WiFi-BT-combo-devices.patch + patches.fixes/batman-adv-bat_socket_read-missing-checks.patch + patches.fixes/batman-adv-Only-write-requested-number-of-byte-to-us.patch ######################################################## # ISDN @@ -684,6 +712,8 @@ # I2C ######################################################## patches.fixes/i2c-algo-bit-call-pre-post_xfer-for-bit_test.patch + patches.fixes/i2c-taos-evm-fix-log-messages.patch + patches.fixes/i2c-pca954x-initialize-the-mux-to-disconnected-state.patch ######################################################## # Input & Console @@ -745,6 +775,7 @@ # Other driver fixes ######################################################## patches.fixes/parport-mutex + patches.fixes/i8k-avoid-lahf-in-64bit-code.patch # suse-2.4 compatible crypto loop driver patches.suse/twofish-2.6 @@ -754,6 +785,12 @@ patches.fixes/ips-use-interruptible-waits.patch patches.fixes/eeepc-laptop-Use-ACPI-handle-to-identify-rfkill-port.patch + patches.fixes/hwmon-asus_atk0110-fix-memory-leak.patch + patches.fixes/hwmon-coretemp-relax-temperature-range-checks.patch + patches.fixes/hwmon-coretemp-fix-tjmax-detection-for-older-cpus.patch + patches.fixes/hwmon-it87-fix-label-group-removal.patch + patches.fixes/hwmon-max1111-fix-race-condition-causing-null-pointer-exception.patch + ######################################################## # Other drivers we have added to the tree ######################################################## @@ -868,6 +905,11 @@ patches.fixes/kvm-ioapic.patch patches.fixes/kvm-macos.patch + ######################################################## + # Crypto + ######################################################## + patches.fixes/crypto-ghash-avoid-null-pointer-dereference-if-no-key-is-set + ######################################################## # Staging tree patches # new drivers that are going upstream @@ -945,6 +987,9 @@ patches.xen/1090-blktap-locking.patch patches.xen/1091-xenbus-dev-no-BUG.patch patches.xen/1098-blkfront-cdrom-ioctl-check.patch + patches.xen/1101-x86-m2p-nr.patch + patches.xen/1124-x86-undo-limit-pages.patch + patches.xen/1126-netback-invalidation-index.patch # changes outside arch/{i386,x86_64}/xen patches.xen/xen3-fixup-kconfig @@ -1030,3 +1075,4 @@ patches.xen/xen-x86_64-dump-user-pgt patches.xen/xen-x86_64-note-init-p2m patches.xen/xen-x86_64-unmapped-initrd + patches.kabi/1101-x86-m2p-nr.patch ++++++ source-timestamp ++++++ --- /var/tmp/diff_new_pack.z8ue8i/_old 2012-01-04 00:40:59.000000000 +0100 +++ /var/tmp/diff_new_pack.z8ue8i/_new 2012-01-04 00:40:59.000000000 +0100 @@ -1,3 +1,3 @@ -2011-10-19 22:33:27 +0200 -GIT Revision: 449d08f0d885f5830890eaf9b833579ee5938cc8 +2011-12-19 23:39:38 +0100 +GIT Revision: d3bfb6d541fd88f51a6e79389d445c715fefb91e GIT Branch: openSUSE-11.4 continue with "q"... Remember to have fun... -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org