kernel-2.6.18-128.7AXS3

エラータID: AXSA:2009-168:07

Release date: 
Tuesday, August 4, 2009 - 14:00
Subject: 
kernel-2.6.18-128.7AXS3
Affected Channels: 
Asianux Server 3 for x86_64
Asianux Server 3 for x86
Severity: 
High
Description: 

The kernel package contains the Linux kernel (vmlinuz), the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc.
Fixed bugs:
CVE-2008-5700
libata in the Linux kernel before 2.6.27.9 does not set minimum timeouts for SG_IO requests, which allows local users to cause a denial of service (Programmed I/O mode on drives) via multiple simultaneous invocations of an unspecified test program.
CVE-2008-3528
The error-reporting functionality in (1) fs/ext2/dir.c, (2) fs/ext3/dir.c, and possibly (3) fs/ext4/dir.c in the Linux kernel 2.6.26.5 does not limit the number of printk console messages that report directory corruption, which allows physically proximate attackers to cause a denial of service (temporary system hang) by mounting a filesystem that has corrupted dir->i_size and dir->i_blocks values and performing (a) read or (b) write operations. NOTE: there are limited scenarios in which this crosses privilege boundaries.
Other bugs:
- [fs] proc: avoid info leaks to non-privileged processes
- [net] tg3: Fix firmware event timeouts
- [scsi] libiscsi: fix nop response/reply and session cleanup race
- [misc] compile: add -fwrapv to gcc CFLAGS
- [misc] random: make get_random_int more random
- [gfs2] fix uninterruptible quotad sleeping
- [mm] cow vs gup race fix (Andrea Arcangeli
- [mm] fork vs gup race fix (Andrea Arcangeli
- [nfs] fix hangs during heavy write workloads
- [fs] keep eventpoll from locking up the box
- [misc] waitpid reports stopped process more than once
- [ata] libata: ahci enclosure management bios workaround
- [ia64] fix regression in nanosleep syscall
- [nfs] race with nfs_access_cache_shrinker() and umount
- [fs] fix softlockup in posix_locks_deadlock
- [net] ipv4: remove uneeded bh_lock/unlock from udp_rcv
- [scsi] qla2xxx: reduce DID_BUS_BUSY failover errors
- [net] ixgbe: stop double counting frames and bytes
- [xen] x86: update the earlier APERF/MPERF patch
- [xen] x86: fix dom0 panic when using dom0_max_vcpus
- [net] fix oops when using openswan
- [x86] NONSTOP_TSC in tsc clocksource
- [ppc] keyboard not recognized on bare metal
- [xen] x86: silence WRMSR warnings
- [dlm] fix length calculation in compat code
- [nfs] fix hung clients from deadlock in flush_workqueue
- [ia64] use current_kernel_time/xtime in hrtimer_start()
- [net] bonding: fix arp_validate=3 slaves behaviour
- [net] enic: return notify intr credits
- [input] wacom: 12x12 problem while using lens cursor
- [net] ehea: improve behaviour in low mem conditions (AMEET M. PARANJAPE ) [487035 483148]
- [x86] add nonstop_tsc flag in /proc/cpuinfo
- [x86_64] mce: do not clear an unrecoverable error status
- [wireless] iwlwifi: booting with RF-kill switch enabled
- [misc] signal: modify locking to handle large loads
- [x86] TSC keeps running in C3+
- [x86] limit max_cstate to use TSC on some platforms
- [ptrace] correctly handle ptrace_update return value
- [firmware] dell_rbu: prevent oops
- [gfs2] panic in debugfs_remove when unmounting
- [scsi] libata: sas_ata fixup sas_sata_ops
- [qla2xxx] correct endianness during flash manipulation
- [net] ixgbe: frame reception and ring parameter issues
- [misc] fix memory leak during pipe failure
- [nfs] handle attribute timeout and u32 jiffies wrap
- [net] deadlock in Hierarchical token bucket scheduler
- [wireless] iwl: fix BUG_ON in driver
- [sched] fix clock_gettime monotonicity
- [nfs] create rpc clients with proper auth flavor
- [md] fix oops with device-mapper mirror target
- [openib] restore traffic in connected mode on HCA
- [x86_64] copy_user_c assembler can leave garbage in rsi
- [misc] setpgid returns ESRCH in some situations
- [s390] zfcp: fix hexdump data in s390dbf traces
- Added EDAC support for MCH 3200/3210
- ACPI SRAT on x86: added support for nodes spanning other nodes. Example of fixed bug: for sytems with the following NUMA topology, the system would not boot: 8 GB memory spread beween 2 nodes:
– node 0: 0-2GB, 4-6GB
– node 1: 2-4GB, 6-8GB
- updated “OCFS2” from 1.2.8 to 1.4.7.
- updated the “e1000e” driver to version 0.5.18.3.
- the “CPUID” driver now supports “cpuid.4” and “cpuid.0xb” instruments
- added proper support for “megaraid sas” tape: the erase command for SAS (megaraid_sas) tape would return input/output error.
- Added support for Nehalem to keep TSC running even in C3/C4 states.
- the “igb” has been updated to version 1.3.8.6.
- the "ioatdma/dca" driver has been updated to version 3.61
- fixed the following problem: loading multiple instances of the “cpufreq” driver could corrupt the driver data structure.
- added support for “Intel AES-NI” instructions on x86_64 platform
- added support for Toshiba “afxxxc” RAID driver
- when using “kexec” to boot another kernel, the network did not start (the “igb” driver would not work).
- fixed a problem with “hugepages” that would cause the machine to reboot.
- when “KVM” was loaded, the system would hang after "echo c > /proc/sysrq-trigger"
- “afxxxc” source code has been cleaned up.
- the “e1000e” network driver now works when a second kernel is loaded with “kexec”.
- the “ixgbe” driver support has been added.
- changed the format of “/proc/net/IPv6_route”.
- fixed a problem with “modprobe ioatdma” that would trigger kernel panic.
- the writeback cache of the “afxxxc” driver can be enabled.
- fixed a problem with the “ocfs2” kernel module.

Solution: 

Update packages.

Additional Info: 

From Asianux Server 3 SP2 updated packages.

Download: 

SRPMS
  1. kernel-2.6.18-128.7AXS3.src.rpm
    MD5: 519146b36ed0c097a34f85494959e4ca
    SHA-256: 5757f5792a8dbd2d9d1b79f03042160453e9647bfd8ee97d287c9bff364eaf59
    Size: 66.28 MB

Asianux Server 3 for x86
  1. kernel-2.6.18-128.7AXS3.i686.rpm
    MD5: 385647da73034494eef192edd9e62de6
    SHA-256: f98ca081e57a253bd15e2a4ac576e46d66bb14e7a7193857288aa0972f57b210
    Size: 15.28 MB
  2. kernel-devel-2.6.18-128.7AXS3.i686.rpm
    MD5: e6827393a2eb73bf29e88f6fe757d881
    SHA-256: 3d85a499080b5e881bd8df4786a3075422630a5a30fe2012a29c5dce4b2b0b1b
    Size: 5.10 MB
  3. kernel-PAE-2.6.18-128.7AXS3.i686.rpm
    MD5: d5dd8f8732dfcf40bbb9cdd4e4f8bc70
    SHA-256: 814248732ee6936fd0c9bef67ed98890767d8812fee1bdd81bee0936c53c4a19
    Size: 15.29 MB
  4. kernel-PAE-devel-2.6.18-128.7AXS3.i686.rpm
    MD5: 054d1b770542b8d197c61cdc36834aa2
    SHA-256: 7b1d71b6275e67370ee66ad04c87c5b777b4d7b9f8a13a227f2c16f539fd884d
    Size: 5.10 MB
  5. kernel-xen-2.6.18-128.7AXS3.i686.rpm
    MD5: f6ec98911b3f1c953495a13f8403a499
    SHA-256: 5a746607d189834b06e4688032fdf6f0a0e0e2a466c3904ab533953d9c42ffa5
    Size: 16.26 MB
  6. kernel-xen-devel-2.6.18-128.7AXS3.i686.rpm
    MD5: ab856297535ea36f347fe82869354825
    SHA-256: 655919cf0353753f431de5cc61b64e264096e6c34479c2ac46594a093a6112e0
    Size: 5.10 MB
  7. kernel-doc-2.6.18-128.7AXS3.noarch.rpm
    MD5: 2549a89b800dd40dcd66fb72001fe555
    SHA-256: 79c45910a7754cd984b85718f34e5f667efc1a3106658598cc3e62f522a0f315
    Size: 2.92 MB
  8. kernel-headers-2.6.18-128.7AXS3.i386.rpm
    MD5: 11df85c5421bdef026805369fcd9eb9a
    SHA-256: 9ace41cb71bbb2f59e4541ff65e778693cde20d505af13e60a24790afb88dcb9
    Size: 939.06 kB

Asianux Server 3 for x86_64
  1. kernel-2.6.18-128.7AXS3.x86_64.rpm
    MD5: 0af6d528529add5a3e54e8609463a5d0
    SHA-256: 90dece5315f90fda862b06b4aabcee28d9a28fc0bf5dba8e2e458eb667354999
    Size: 16.83 MB
  2. kernel-devel-2.6.18-128.7AXS3.x86_64.rpm
    MD5: eac6dd865896ccb9a2c6a8b7c26ebdb8
    SHA-256: ddf41b03087a8c5a9673746246561c89be9af1c7158b41cff2cf594a5298cbd0
    Size: 5.28 MB
  3. kernel-headers-2.6.18-128.7AXS3.x86_64.rpm
    MD5: eb5ef4dedbfc6aac2d659ca93b735d52
    SHA-256: bdd0fdcba678c79654928c5ad4d84fff1d19e735dc42b652b32ad395b829db3a
    Size: 0.95 MB
  4. kernel-xen-2.6.18-128.7AXS3.x86_64.rpm
    MD5: ef9c4cbb7eb9ffb65355f06f7767918d
    SHA-256: aff5e071c4858b9ff832687f70dcf89c4929a85269c6f16d358dbd421bd95e93
    Size: 17.49 MB
  5. kernel-xen-devel-2.6.18-128.7AXS3.x86_64.rpm
    MD5: f8d3f4df573736da9ba321390de7dde7
    SHA-256: 5031354cf4915736ae61903972e9324a8a60f4d16bfccb1ecd1f7fba94305f56
    Size: 5.29 MB
  6. kernel-doc-2.6.18-128.7AXS3.noarch.rpm
    MD5: 0bfbc4b79926558c9ccca4a35b140415
    SHA-256: 696771d93ce8ccc2e4de4d13388c8f2b8cadea660c97de68295290978fff4259
    Size: 2.92 MB