[ANNOUNCE] WOLK v4.10s FINAL - Server Edition

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi all,

so here we go, FINAL v4.10. This is the 10th maintenance update for WOLK4.0.
I am very proud to announce this because it fixes several (read TONS) of
serious bugs :-) ... It's working very very well on all of my systems
including a Quad XEON with 2GB RAM, 3 Dual XEON machines in production for
tons of weeks now.

Please excuse me for this horribly f*cking delay doing v4.10s :(


Note for all grsecurity PaX users: It is important when you configure the
new kernel to not simply load an old configuration. There are new PaX options
that you need to choose for PaX to be enabled. To retain the same
functionality as before, enable the "legacy ELF header marking" and "ELF
program header marking", leave MAC system integration set to none, and
disable soft mode.


I encourage _all_ WOLK users to update to v4.10s! It fixes all known security
issues up to 25th February 2004 (today).



        Have fun!


Changelog from v4.9s -> v4.10s
- ------------------------------
o   added:    Promise PDC ULTRA SATA support v1.00.0.10
o   added:    Emulex LP8000/9000/9002L/9002DC/9402DC/9802 FC support v1.23a
o   added:    Quick Sort support (qsort)
o   added:    ignore unrecognized mount options
o   added:    ATI IGP chipset support
o   added:    S3 Savage support
o   added:    VIA CLE266 support
o   added:    full XAPIC support (vanilla has half of this :p)
o   added:    rICMP support
o   added:    libata (S-ATA support via SCSI layer)
                same as 2.6 kernel version (2004-02-18)
o   fixed:    broken 2.4.x rt_sigprocmask error handling
o   fixed:    IDE timeout race fix
o   fixed:    CAN-2004-0077: return proper do_munmap() error code
o   fixed:    CAN-2003-0984: /dev/rtc can leak parts of kernel memory to
                unpriviledged users
o   fixed:    CAN-2003-0985: malicious users of mremap() syscall can gain
                priviledges
o   fixed:    check bounds in do_brk (recently used to exploit Debian Servers)
o   fixed:    full modular IDE build problems
o   fixed:    Support for processor throttling when VMware runs
o   fixed:    overflow on unaligned checksum buffers
o   fixed:    handle unreachable IO-APICs in ACPI without panic
o   fixed:    problem where every user who can open /dev/cdrom crash kernel
o   fixed:    boot code overflow with more CPUs than CONFIG_NR_CPUS
o   fixed:    missing brackets in agpgart
o   fixed:    SCSI: never ever merge requests if we exceed the maximum number
                of scatter-gather segments that fit into a page.
o   fixed:    another potential procfs memory leak
o   fixed:    PAX' SEGMEXEC did not work with HIGHMEM vs. SMP
o   fixed:    years outstanding bug with P3/P4 Hyperthreading :-(
o   fixed:    problem with set_ioapic_affinity()
o   fixed:    SMP kernel dummy APIC emulation in smpboot for x86:
                the process timer must be driven from the 8253 in this case.
o   fixed:    mpparse for default MP systems
o   fixed:    missing memory barrier in get_request_wait_wakeup()
o   fixed:    Data region of memory output was negative
o   fixed:    more irq/bh races (smp_mb()'s)
o   fixed:    nvidia-kernel-1.0.4496 didn't compile
o   fixed:    race in the O(1) scheduler
o   fixed:    memory leak in kernel module loader
o   fixed:    possible SMP deadlock on reboot
o   fixed:    log_buf_len boot parameter
o   fixed:    too few characters for boot parameters
o   fixed:    ipc_init() SMP crash
o   fixed:    route SMIs through IOAPIC
o   fixed:    RCU helpers for PREEMPT
o   fixed:    reduce bkl contention caused by blkdev_put
o   fixed:    missing symbol 'console_printk' for IDE modularization
o   fixed:    disable the anti-DoS fix tested on some embedded
                platforms, to avoid regressions due softirq delays
o   fixed:    mmap on /dev/mem wrt to uncached accesses
o   fixed:    wrong APIC handling for SMP/HT
o   fixed:    ieee1394 locking bug in nodemgr
o   fixed:    memory leak in user space communication with USB devices
o   fixed:    memory leaks in LVM v1.0.7
o   fixed:    IPVS: ip_vs_tunnel_xmit to return NF_DROP when no memory
                available
o   fixed:    IPVS: add strict boundary check in parsing FTP commands
o   updated:  LSI MegaRAID (driver series v1.18k)
o   updated:  LSI MegaRAID (driver series v2.10.1)
o   updated:  Intel e100 driver v2.3.38
o   updated:  Intel e1000 driver v5.2.20
o   updated:  DRBD v0.6.11
o   updated:  AIC7xxx v6.3.4 / AIC79xx v2.0.5 (v2004-02-09)
o   updated:  PPP Microsoft encryption/compression (MPPE/MPPC) v0.98
o   updated:  SysKonnect SK-98xx driver v6.21
o   updated:  Device Mapper (LVM2) v4.0.4-ioctl (2003-08-30)
o   updated:  EVMS v2.1.1
o   updated:  LVM v1.0.8
o   updated:  replaced Super FreeS/WAN with OpenS/WAN v1.0.1
o   updated:  CryptoAPI from 2.4.22/2.4.23/2.4.24/2.4.25
o   updated:  CryptoLOOP (jari edition)
o   updated:  rmap VM v15l
o   updated:  grsecurity v1.9.14
o   updated:  tons of ACPI fixes for UP/SMP/HT and better Notebook support.
o   updated:  convert /proc/interrupts to use seq_file
o   updated:  shfs v0.32-pre2
o   updated:  Intel VTune Support
o   updated:  RFCOMM protocol support v12
o   updated:  FireWire IEEE1394 rev1050
o   updated:  USB: tons of fixes and updates
o   updated:  Broadcom BCM5700 driver v7.0.0
o   updated:  Broadcom Tigon3 v2.6
o   updated:  Compressed Loop (cloop) v1.02
o   updated:  DAC960 RAID Driver v2.4.20 of 1 May 2003
                (Vanilla still has the driver from kernel 2.4.11!!)
o   updated:  Intel/ICP RAID Controller support v2.06a
o   updated:  AACRAID v1.1-3
o   updated:  Qlogic QLA 2x00 v6 FC SCSI support v6.06.00
o   updated:  3ware Driver v1.02.00.037
o   updated:  CPU Frequency scaling v2.4.22 2003-09-01
o   updated:  XFS v1.3.1 Final (SCO: go and fuck yourself!)
o   removed:  RMAP: OOM killer braindamage fix fix fix fix: BROKEN!
o   removed:  Option 'PS/2 keyboard support': broke too much stuff
o   changed:  CPU - Cap Processor Usage: Make it a config option




md5sums:
- --------
081b06a88a0a15820a801dd6d35174d1 *linux-2.4.20-wolk4.10s-fullkernel.tar.bz2
3d6c78d822f72a3b36faebf1587466e9 *linux-2.4.20-wolk4.10s-fullkernel.tar.gz
7ab3d945def110a2ee78ce88175c7abe *linux-2.4.20-wolk4.10s.patch.bz2
169b00070d19a20988dd66919899ecb3 *linux-2.4.20-wolk4.10s.patch.gz
9d7e2b0ad390b2cae589cb80ec22b6f2 *linux-2.4.20-wolk4.9s-to-4.10s.patch.bz2
96459f1257130f077e3e67d6faf96a8d *linux-2.4.20-wolk4.9s-to-4.10s.patch.gz



- --
Kind regards
        Marc-Christian Petersen

http://sourceforge.net/projects/wolk

PGP/GnuPG Key: 1024D/569DE2E3DB441A16
Fingerprint:  3469 0CF8 CA7E 0042 7824 080A 569D E2E3 DB44 1A16
Key available at http://pgp.mit.edu. Encrypted e-mail preferred
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFAPLfVVp3i49tEGhYRAjXeAJsFxmIrIGQZVAZ0SrLmz9kBpStbmACfUuYy
uHz7DVto08MzNSMobFJbGtQ=
=sS/A
-----END PGP SIGNATURE-----


-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click