Download/kernel/rhel6/042stab116.1/changes - Revision history

Kir: fix rhel6 update description

2016-09-13T18:36:34Z

fix rhel6 update description

Kir: describe rhel6 update

2016-09-13T18:35:56Z

describe rhel6 update

Kir: links to OVZ issues

2016-09-13T18:35:16Z

links to OVZ issues

Kir: formatting fixes, slight rewording

2016-09-13T18:34:39Z

formatting fixes, slight rewording

Vvs: /* Changes */

2016-05-25T08:24:48Z

‎Changes

Vvs: /* Changes */

2016-05-25T08:22:30Z

‎Changes

Vvs: Created page with "== Changes == Since {{kernel link|rhel6|042stab113.21}}: * Rebase to RHEL6 kernel 2.6.32-573.26.1.el6 * CVE-2016-3156: ipv4: Don't do expensive useless work during inetdev de..."

2016-05-25T08:20:12Z

Created page with "== Changes == Since {{kernel link|rhel6|042stab113.21}}: * Rebase to RHEL6 kernel 2.6.32-573.26.1.el6 * CVE-2016-3156: ipv4: Don't do expensive useless work during inetdev de..."

New page

== Changes ==
Since {{kernel link|rhel6|042stab113.21}}:

* Rebase to RHEL6 kernel 2.6.32-573.26.1.el6
* CVE-2016-3156: ipv4: Don't do expensive useless work during inetdev destroy. PSBM-42403)
issue was workarounded in 042stab113.11 kernel by adding per-container limit on using of ipv4 addresses
here old workaround is replaced by fix backported from mainline linux kernel.
* A flaw was found in the way the Linux kernel handled IRET faults during the processing of NMIs. An unprivileged, local user could use this flaw to crash the system or, potentially (although highly unlikely), escalate their privileges on the system. (CVE-2015-5157)
* A race condition flaw was found in the way the Linux kernel's SCTP implementation handled sctp_accept() during the processing of heartbeat timeout events. A remote attacker could use this flaw to prevent further connections to be accepted by the SCTP server running on the system, resulting in a denial of service. (CVE-2015-8767)
* NFS client with kernels 2.6.32-573.10.2.el6 or above could hang with 'not responding, still trying' messages and running processes in spinlock. (https://access.redhat.com/solutions/2215491)
* Network devices that used the mainline veth driver did not check TCP checksums. (https://access.redhat.com/solutions/2216661)
vethX interfaces of OpenVZ and VZ containers are not affected as they use a different driver.
The affected veth driver was used inside Docker-ready containers or
could be used by host admin for their own purposes.* Fix for kernel BUG at block/cfq-iosched.c:2806 (OVZ-6651)
* Fix for kernel crash inside pick_next_task_fair() (PSBM-44475)
* write to CIFS share hangs (OVZ-6642)
* ub memcg: fake use_hierarhy file is required for KVM's libvirtd (OVZ-6660)
* Warning at drivers/block/ploop/io_direct_map.c:841 trim_extent_mappings. (PSBM-45999)
* LDT entries were incorrectly restored from CPT image. (OVZ-6228)
* some internal fixes

=== See also ===
* {{RHSA|2016-0715}}
* {{CVE|2015-5157}}
* {{CVE|2015-8767}}
* {{CVE|2016-3156}}

@@ Line 2: / Line 2: @@
 Since {{kernel link|rhel6|042stab113.21}}:
-* Rebase to RHEL6 kernel 2.6.32-573.26.1.el6 (security, bug fix, and enhancement)
+* Rebase to RHEL6 kernel 2.6.32-573.26.1.el6 (security, bug fixes, and enhancements)
 * ipv4: Don't do expensive useless work during inetdev destroy. (CVE-2016-3156, PSBM-42403)
 : (the issue was workarounded in 042stab113.11 kernel by adding per-container limit on using of ipv4 addresses; now the old workaround is replaced by a fix backported from mainline)

@@ Line 2: / Line 2: @@
 Since {{kernel link|rhel6|042stab113.21}}:
-* Rebase to RHEL6 kernel 2.6.32-573.26.1.el6
+* Rebase to RHEL6 kernel 2.6.32-573.26.1.el6 (security, bug fix, and enhancement)
 * ipv4: Don't do expensive useless work during inetdev destroy. (CVE-2016-3156, PSBM-42403)
 : (the issue was workarounded in 042stab113.11 kernel by adding per-container limit on using of ipv4 addresses; now the old workaround is replaced by a fix backported from mainline)

@@ Line 10: / Line 10: @@
 * Network devices that used the mainline veth driver did not check TCP checksums. (https://access.redhat.com/solutions/2216661)
 : (vethX interfaces of OpenVZ and VZ containers are not affected as they use a different driver. The affected veth driver was used inside Docker-ready containers or could be used by host admin for their own purposes)
-* Fix for kernel BUG at block/cfq-iosched.c:2806  (OVZ-6651)
+* Fix for kernel BUG at block/cfq-iosched.c:2806  ({{OVZ|6651}})
 * Fix for kernel crash inside pick_next_task_fair() (PSBM-44475)
-* write to CIFS share hangs (OVZ-6642)
+* write to CIFS share hangs ({{OVZ|6642}})
-* ub memcg: fake use_hierarhy file is required for KVM's libvirtd (OVZ-6660)
+* ub memcg: fake use_hierarhy file is required for KVM's libvirtd ({{OVZ|6660}})
 * Warning at drivers/block/ploop/io_direct_map.c:841 trim_extent_mappings. (PSBM-45999)
-* LDT entries were incorrectly restored from CPT image. (OVZ-6228)
+* LDT entries were incorrectly restored from CPT image. ({{OVZ|6228}})
 * some internal fixes