# changelog

author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.6.1.el5]
changelog:
  - [fs] gfs2: fix permissions checking for setflags ioctl (Steven Whitehouse) [595580 595399] {CVE-2010-1641}
  - [mm] clear page errors when issuing a fresh read of page (Rik van Riel) [599739 590763]
  - [misc] keys: do not find already freed keyrings (Vitaly Mayatskikh) [585099 585100] {CVE-2010-1437}
  - [net] sctp: file must be valid before setting timeout (Jiri Pirko) [598355 578261]
  - [net] tg3: fix panic in tg3_interrupt (John Feeney) [600498 569106]
  - [net] e1000/e1000e: implement simple interrupt moderation (Andy Gospodarek) [599332 586416]
  - [net] cnic: Fix crash during bnx2x MTU change (Stanislaw Gruszka) [596385 582367]
  - [net] bxn2x: add dynamic lro disable support (Stanislaw Gruszka) [596385 582367]
  - [net] implement dev_disable_lro api for RHEL5 (Stanislaw Gruszka) [596385 582367]
  - [x86_64] fix time drift due to faulty lost tick tracking (Ulrich Obergfell) [601090 579711]
  - [net] neigh: fix state transitions via Netlink request (Jiri Pirko) [600215 485903]
  - [mm] fix hugepage corruption using vm.drop_caches (Larry Woodman) [599737 579469]
  - [nfs] don't unhash dentry in nfs_lookup_revalidate (Jeff Layton) [596384 582321]
  - [fs] remove unneccessary f_ep_lock from fasync_helper (Lachlan McIlroy) [599730 567479]
  - [xen] set hypervisor present CPUID bit (Paolo Bonzini) [599734 573771]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.7.1.el5]
changelog:
  - [virt] don't compute pvclock adjustments if we trust tsc (Glauber Costa) [601080 570824]
  - [virt] add a global synchronization point for pvclock (Glauber Costa) [601080 570824]
  - [virt] enable pvclock flags in vcpu_time_info structure (Glauber Costa) [601080 570824]
  - [misc] add atomic64_cmpxcgh to x86_64 include files (Glauber Costa) [601080 570824]
  - [x86] grab atomic64 types from upstream (Glauber Costa) [601080 570824]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.9.1.el5]
changelog:
  - [xen] ia64: unset be from the task psr (Andrew Jones) [587475 587477] {CVE-2010-2070}
  - [fs] ext4: MOVE_EXT can't overwrite append-only files (Eric Sandeen) [601007 601008] {CVE-2010-2066}
  - [pci] acpiphp: fix missing acpiphp_glue_exit (Prarit Bhargava) [607486 515556]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.10.1.el5]
changelog:
  - [fs] xfs: don't let swapext operate on write-only files (Jiri Pirko) [605160 605161] {CVE-2010-2226}
  - [fs] nfs: fix bug in nfsd4 read_buf (Jiri Olsa) [612034 612035] {CVE-2010-2521}
  - [fs] cifs: reject DNS upcall add_key req from userspace (Jeff Layton) [612170 612171] {CVE-2010-2524}
  - [security] keys: new key flag for add_key from userspace (Jeff Layton) [612170 612171] {CVE-2010-2524}
  - [message] mptsas: fix disk add failing due to timeout (Rob Evers) [612539 542892]
  - [block] cfq-iosched: fix bad locking in changed_ioprio (Jeff Moyer) [607483 582435]
  - [block] cfq-iosched: kill cfq_exit_lock (Jeff Moyer) [607483 582435]
  - [fs] cifs: fix kernel BUG with remote OS/2 server (Jeff Layton) [608587 608588] {CVE-2010-2248}
  - [net] bluetooth: fix possible bad memory access via sysfs (Mauro Carvalho Chehab) [576020 576021] {CVE-2010-1084}
  - [net] tcp: fix rcv mss estimate for lro (Stanislaw Gruszka) [613900 593801]
  - [net] cnic: fix panic when nl msg rcvd when device down (Stanislaw Gruszka) [615260 595862]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.11.2.el5]
changelog:
  - [mm] pass correct mm when growing stack (Jiri Pirko) [607857 607858] {CVE-2010-2240}
  - [mm] fix up some user-visible effects of stack guard page (Jiri Pirko) [607857 607858] {CVE-2010-2240}
  - [mm] fix page table unmap for stack guard page properly (Jiri Pirko) [607857 607858] {CVE-2010-2240}
  - [mm] fix missing unmap for stack guard page failure case (Jiri Pirko) [607857 607858] {CVE-2010-2240}
  - [mm] keep a guard page below a grow-down stack segment (Jiri Pirko) [607857 607858] {CVE-2010-2240}


