diff --git a/lustre/ChangeLog b/lustre/ChangeLog index d4cca12afd0e70650d4ec4948255907f3147f2ba..86b26dd8f2888b571cf88156ee68a3f400e90fd6 100644 --- a/lustre/ChangeLog +++ b/lustre/ChangeLog @@ -4,7 +4,7 @@ tbd Cluster File Systems, Inc. <info@clusterfs.com> 2.6.5-7.286 (SLES 9), 2.6.9-55.0.6.EL (RHEL 4), 2.6.16.46-0.14 (SLES 10), - 2.6.18-8.1.10.el5 (RHEL 5), + 2.6.18-8.1.14.el5 (RHEL 5), 2.6.18.8 vanilla (kernel.org) * Client support for unpatched kernels: (see http://wiki.lustre.org/index.php?title=Patchless_Client) @@ -109,6 +109,17 @@ Details : if request processig with error which can be recoverable on server request should be resend, otherwise page released from cache and marked as error. +Severity : critical +Bugzilla : 13751 +Description: Kernel patches update for RHEL5 2.6.18-8.1.14.el5. +Details : Modify target file & which_patch. + A flaw was found in the IA32 system call emulation provided + on AMD64 and Intel 64 platforms. An improperly validated 64-bit + value could be stored in the %RAX register, which could trigger an + out-of-bounds system call table access. An untrusted local user + could exploit this flaw to run code in the kernel + (ie a root privilege escalation). (CVE-2007-4573). + -------------------------------------------------------------------------------- 2007-09-27 Cluster File Systems, Inc. <info@clusterfs.com> diff --git a/lustre/kernel_patches/targets/2.6-rhel5.target.in b/lustre/kernel_patches/targets/2.6-rhel5.target.in index d8ece8d0b4e9cafe616894ad3620116a592d2d6c..eceac159d16d1240afd93d35d4ec50db5e46c02f 100644 --- a/lustre/kernel_patches/targets/2.6-rhel5.target.in +++ b/lustre/kernel_patches/targets/2.6-rhel5.target.in @@ -1,5 +1,5 @@ lnxmaj="2.6.18" -lnxrel="8.1.10.el5" +lnxrel="8.1.14.el5" KERNEL=linux-${lnxmaj}-${lnxrel}.tar.bz2 SERIES=2.6-rhel5.series diff --git a/lustre/kernel_patches/which_patch b/lustre/kernel_patches/which_patch index edbe77d0643167480d1e10ac95440416703afae7..73a5166474bfbdb92cf0dc79fb44882633d5aa83 100644 --- a/lustre/kernel_patches/which_patch +++ b/lustre/kernel_patches/which_patch @@ -5,7 +5,7 @@ SUPPORTED KERNELS: 2.6-suse-newer SLES9: 2.6.5-7.286 extra patches for SLES9 after SP1 2.6-rhel4 RHEL4: 2.6.9-55.0.6.EL 2.6-sles10 SLES10: 2.6.16.46-0.14 -2.6-rhel5.series RHEL5: 2.6.18-8.1.10.el5 +2.6-rhel5.series RHEL5: 2.6.18-8.1.14.el5 2.6.18-vanilla.series kernel.org: 2.6.18.8 CLIENT SUPPORT FOR UNPATCHED KERNELS: