Objavljena je nadogradnja jezgre operacijskog sustava Fedora 13 kojom su ispravljeni višestruki sigurnosni nedostaci. Jezgra (eng. kernel) je temeljni dio operacijskog sustava koji obavlja osnovne zadatke poput upravljanja sklopovljem, procesima, ulazno-izlaznim jedinicama i memorijom. Neki od nedostataka javljaju se zbog neispravne provjere ulaznih vrijednosti funkcije "do_tcp_setsockopt", neodgovarajuće provjere pojedinih polja kod funkcije "dvb_ca_ioctl" te cjelobrojnog prepisivanja koje se javlja u radu funkcije "ib_uverbs_poll_cq function". Napadač ove nedostatke može iskoristiti prvenstveno za rušenje aplikacije. Svim se korisnicima savjetuje primjena nadogradnje.
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-2134
2011-02-24 20:25:02
--------------------------------------------------------------------------------
Name : kernel
Product : Fedora 13
Version : 2.6.34.8
Release : 68.fc13
URL : http://www.kernel.org/
Summary : The Linux kernel
Description :
The kernel package contains the Linux kernel (vmlinuz), the core of any
Linux operating system. The kernel handles the basic functions
of the operating system: memory allocation, process allocation, device
input and output, etc.
--------------------------------------------------------------------------------
Update Information:
Stable update 2.6.34.8, extra bug fixes, some basic hardware backports for
Intel Sandy Bridge upon request.
Update to kernel 2.6.34.8:
http://www.kernel.org/pub/linux/kernel/v2.6/longterm/v2.6.34/ChangeLog-2.6.34.8
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 14 2011 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.8-68
- Backport commits from longterm-2.6.35.y to 'fix' Intel Sandy Bridge
chipsets. (Requested by Intel folks.)
* Sat Feb 12 2011 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- bridge: Fix mglist corruption that leads to memory corruption (#650151)
* Wed Feb 9 2011 Matthew Garrett <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- linux-2.6-acpi-fix-alias.patch: fix ACPI object aliasing (#608648)
* Sat Feb 5 2011 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Linux 2.6.34.8
- Drop merged patches:
01-compat-make-compat_alloc_user_space-incorporate-the-access_ok-check.patch
02-compat-test-rax-for-the-system-call-number-not-eax.patch
03-compat-retruncate-rax-after-ia32-syscall-entry-tracing.patch
aio-check-for-multiplication-overflow-in-do_io_submit.patch
cifs-fix-dns-resolver.patch
inotify-fix-inotify-oneshot-support.patch
inotify-send-IN_UNMOUNT-events.patch
irda-correctly-clean-up-self-ias_obj-on-irda_bind-failure.patch
keys-fix-bug-in-keyctl-session-to-parent-if-parent-has-no-session-keyring.patch
keys-fix-rcu-no-lock-warning-in-keyctl-session-to-parent.patch
wireless-extensions-fix-kernel-heap-content-leak.patch
pci-msi-remove-unsafe-and-unnecessary-hardware-access.patch
pci-msi-restore-read_msi_msg_desc-add-get_cached_msi_msg_desc.patch
x86-tsc-sched-recompute-cyc2ns_offset-s-during-resume-from-sleep-states.patch
x86-tsc-fix-a-preemption-leak-in-restore_sched_clock_state.patch
execve-improve-interactivity-with-large-arguments.patch
execve-make-responsive-to-sigkill-with-large-arguments.patch
setup_arg_pages-diagnose-excessive-argument-size.patch
alsa-seq-oss-fix-double-free-at-error-path-of-snd_seq_oss_open.patch
tracing-do-not-allow-llseek-to-set_ftrace_filter.patch
sched-00-fix-user-time-incorrectly-accounted-as-system-time-on-32-bit.patch
xen-handle-events-as-edge-triggered.patch
xen-use-percpu-interrupts-for-ipis-and-virqs.patch
sctp-do-not-reset-the-packet-during-sctp_packet_config.patch
r8169-fix-dma-allocations.patch
skge-quirk-to-4gb-dma.patch
depessimize-rds_copy_page_user.patch
via-ioctl-prevent-reading-uninit-memory.patch
v4l1-fix-32-bit-compat-microcode-loading-translation.patch
kvm-fix-fs-gs-reload-oops-with-invalid-ldt.patch
alsa-prevent-heap-corruption-in-snd_ctl_new.patch
gdth-integer-overflow-in-ioctl.patch
- Drop from drm-next patch:
d831692 sis-agp: Remove SIS 760, handled by amd64-agp
- Drop hunk of quiet-prove_RCU-in-cgroups.patch, now upstream.
* Sun Jan 30 2011 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Copy sunrpc oops fix from F14
* Wed Jan 26 2011 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- TCP networking fixes from 2.6.36.3, including one CVE
CVE-2010-4165: possible kernel oops from user MSS
- CVE-2011-0521: av7110 negative array offset
* Sat Jan 22 2011 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Security updates
CVE-2010-4346: install_special_mapping skips security_file_mmap check
CVE-2010-4649: IB/uverbs: Handle large number of entries in poll CQ
CVE-2011-0006: ima: fix add LSM rule bug
CVE-2010-4648: orinoco: fix TKIP countermeasure behaviour
CVE-2010-4650: fuse: verify ioctl retries
* Tue Jan 18 2011 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- sgruszka: hostap_cs: fix sleeping function called in invalid
context (#643758)
* Mon Jan 10 2011 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- CVE-2010-4163 CVE-2010-4668: panic when submitting 0-length I/O requests
* Sat Dec 18 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Fix SELinux issues with NFS/btrfs and/or xfsdump. (#662344)
* Fri Dec 17 2010 Neil Horman <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Enhance AF_PACKET to allow non-contiguous buffer alloc (bz 637619)
* Tue Dec 14 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.7-66
- CVE-2010-4157: gdth: integer overflow in ioc_general()
- CVE-2010-4158: socket filters infoleak
- CVE-2010-3874: CAN sockets minor heap overflow
* Tue Dec 14 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.7-65
- CVE-2010-4162: bio: integer overflow page count when mapping/copying user
data
- CVE-2010-4249: unix socket local dos
* Fri Dec 10 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- CVE-2010-2962: arbitrary kernel memory write via i915 GEM ioctl
- CVE-2010-2963: v4l: VIDIOCSMICROCODE arbitrary write
- CVE-2010-3698: kvm: invalid selector in fs/gs causes kernel panic
- CVE-2010-3705: sctp: Fix out-of-bounds reading in sctp_asoc_get_hmac()
- CVE-2010-3442: ALSA: prevent heap corruption in snd_ctl_new()
- CVE-2010-4258: failure to revert address limit override in OOPS error path
- CVE-2010-4169: perf_events: denial-of-service bug
* Thu Dec 9 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- ioat2-catch-and-recover-from-broken-vtd-configurations.patch: copy patch
from 2.6.35.y (#605845) [556ab45f]
* Thu Dec 9 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Copy tpm-fix-stall-on-boot.patch from rawhide tree. (#530393)
* Thu Dec 9 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.7-64
- Copy fix for (#632310) from F-14:
drm/radeon/kms: MC vram map needs to be >= pci aperture size
* Fri Dec 3 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.7-63
- Enable hpilo.ko on x86_64. (#571329)
* Mon Nov 29 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Make ima an opt-in parameter like we did in F-14. Pass ima=on if you want
it enabled.
* Mon Nov 29 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Backport XFS fixes for the kernel.org xfs boog. [4d4e307a]
Needed two other backports to simplify life.
* Fri Nov 26 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Quiet a netlink build warning the INET_DIAG fix caused.
* Fri Nov 26 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Plug stack leaks in tty/serial drivers. (#648663, #648660)
* Fri Nov 26 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- r8169 fixes from Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite. (#502974)
* Wed Nov 24 2010 John W. Linville <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- rtl8180: improve signal reporting for rtl8185 hardware
- rtl8180: improve signal reporting for actual rtl8180 hardware
* Tue Nov 23 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- zero struct memory in ipc compat (CVE-2010-4073) (#648658)
- zero struct memory in ipc shm (CVE-2010-4072) (#648656)
- fix logic error in INET_DIAG bytecode auditing (CVE-2010-3880) (#651264)
- posix-cpu-timers: workaround to suppress the problems with mt exec
(rhbz#656264)
- clear memory in viafb ioctl (CVE-2010-4082) (#648671)
* Fri Oct 22 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.7-62
- tpm-autodetect-itpm-devices.patch: Auto-fix TPM issues on various
laptops which prevented suspend/resume.
- depessimize-rds_copy_page_user.patch: Fix CVE-2010-3904, local
privilege escalation via RDS protocol.
- rt2x00: Backport fixes for #642031 from Stanislaw Gruszka.
* Mon Oct 18 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.7-61
- Add Ricoh e822 support. (rhbz#596475) Thanks to sgruszka@ for
sending the patches in.
* Mon Oct 18 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.7-60
- Quirk to disable DMAR with Ricoh card reader/firewire. (rhbz#605888)
* Mon Oct 18 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Two networking fixes (skge, r8169) from sgruska. (rhbz#447489,629158)
* Thu Oct 14 2010 Neil Horman <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Fix rcu warning in twsock_net (bz 642905)
* Wed Oct 6 2010 Neil Horman <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Fix WARN_ON when you try to create an exiting bond in bond_masters
* Thu Sep 30 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- CVE-2010-3432: sctp-do-not-reset-the-packet-during-sctp_packet_config.patch
* Thu Sep 30 2010 Ben Skeggs <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.7-59
- nouveau: fix theoretical race condition that could be responsible for
certain random hangs that have been reported.
* Mon Sep 27 2010 Ben Skeggs <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.7-58
- nouveau: better handling of certain GPU errors
* Fri Sep 24 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Fix typo in previous Xen fix that causes boot failure.
* Wed Sep 22 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Copy two Xen fixes from 2.6.35-stable for RHBZ#636534
* Tue Sep 21 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Fix RHBZ #633037, Process user time incorrectly accounted as system time
* Mon Sep 20 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Fix AGP aperture size detection on Intel G33/Q35 chipsets (#629203)
* Tue Sep 14 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.7-56
- Fix CVE-2010-3079: ftrace NULL pointer dereference
* Tue Sep 14 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Fix CVE-2010-3080: /dev/sequencer open failure is not handled correctly
* Tue Sep 14 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Fix bug added in 2.6.34.6-53
* Tue Sep 14 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Mitigate DOS with large argument lists.
* Tue Sep 14 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- x86_64: plug compat syscalls holes. (CVE-2010-3081, CVE-2010-3301)
upgrading is highly recommended.
- aio: check for multiplication overflow in do_io_submit. (CVE-2010-3067)
* Tue Sep 14 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Linux 2.6.34.7, should fix multiple USB HID device issues.
* Mon Sep 13 2010 Ben Skeggs <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.6-55
- nouveau: fix oops in acpi edid support (rhbz#613284)
* Thu Sep 9 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Backport 6f772d7e to hopefully fix #629442,
(drm/i915: Explosion following OOM in do_execbuffer.)
* Wed Sep 8 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Enable GPIO_SYSFS. (#631958)
* Sun Sep 5 2010 Jarod Wilson <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.6-54
- Restore lirc patch from 2.6.33.x F13 kernels, re-fixes multiple issues
* Sat Sep 4 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.6-53
- Disable asynchronous suspend, a new feature in 2.6.34
- Fix unsafe access to MSI registers during suspend
(pci-msi-remove-unsafe-and-unnecessary-hardware-access.patch,
pci-msi-restore-read_msi_msg_desc-add-get_cached_msi_msg_desc.patch)
-
x86-tsc-sched-recompute-cyc2ns_offset-s-during-resume-from-sleep-states.patch
Fix load balancing after suspend/resume cycle (taken from 2.6.32 stable
queue)
* Fri Sep 3 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.6-52
- acpi-ec-pm-fix-race-between-ec-transactions-and-system-suspend.patch:
another possible fix for suspend/resume problems.
- From 2.6.35.4: nfs-fix-an-oops-in-the-nfsv4-atomic-open-code.patch
- Add fix for CVE-2010-2960: keyctl_session_to_parent NULL deref system crash
* Fri Sep 3 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- default to pci=nocrs
- flexcop: fix registering braindead stupid names (#575873)
* Fri Sep 3 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.6-51
- lirc_imon: move alloc before use (rhbz#629980)
* Fri Sep 3 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.6-50
- Re-enable I2O, but only for 32-bit x86 (#629676)
- Add support for eject key on Dell laptops (#513530)
- irda-correctly-clean-up-self-ias_obj-on-irda_bind-failure.patch
(CVE-2010-2954)
- wireless-extensions-fix-kernel-heap-content-leak.patch (CVE-2010-2955)
* Thu Sep 2 2010 Dave Airlie <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.6-49
- fix radeon suspend/resume issues and two other minor patches
* Wed Sep 1 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.6-48
- Revert commit 6a1a82df91fa0eb1cc76069a9efe5714d087eccd from 2.6.34.1;
it breaks ftdi_sio (#613597)
* Fri Aug 27 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.6-47
- Linux 2.6.34.6
- drivers-hwmon-coretemp-c-detect-the-thermal-sensors-by-cpuid.patch (#625734)
- kprobes-x86-fix-kprobes-to-skip-prefixes-correctly.patch (#610941)
* Wed Aug 25 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.6-46.rc1
- Linux 2.6.34.6-rc1
- Drop merged patches:
matroxfb-fix-font-corruption.patch
* Tue Aug 24 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.5-45
- Revert commit 3d61510f4ecacfe47c75c0eb51c0659dfa77fb1b from 2.6.34.2;
it causes dropped keystrokes (#625758)
* Mon Aug 23 2010 Ben Skeggs <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.5-44
- nouveau: fix eDP panels that flip HPD during link training (rhbz#596562)
* Sat Aug 21 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.5-43
- Linux 2.6.34.5
- Drop merged patches:
mm-fix-page-table-unmap-for-stack-guard-page-properly.patch
mm-fix-up-some-user-visible-effects-of-the-stack-guard-page.patch
* Wed Aug 18 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Restore linux-2.6-umh-refactor.patch, still needed in 2.6.34 (#625150)
- Drop coredump-uid-pipe-check.patch, now upstream.
* Wed Aug 18 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.4-42
- Revert "ata-piix: Detect spurious IRQs and clear them",
should be fixed by commit 27943620c upstream.
* Wed Aug 18 2010 Jarod Wilson <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- make f13 lirc userspace happy with ioctl defs again (#623770)
* Wed Aug 18 2010 Dave Jones <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- ata-piix: Detect spurious IRQs and clear them.
* Tue Aug 17 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Touch .scmversion in the kernel top level to prevent scripts/setlocalversion
from recursing into our fedpkg git tree and trying to decide whether the
kernel git is modified (obviously not, since it's a tarball.) Fixes make
local.
* Tue Aug 17 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.4-41
- Fix fallout from the stack guard page fixes.
(mm-fix-page-table-unmap-for-stack-guard-page-properly.patch,
mm-fix-up-some-user-visible-effects-of-the-stack-guard-page.patch)
* Tue Aug 17 2010 Ben Skeggs <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.4-40
- drm-nouveau-nv50-crtc-update-delay.patch (rhbz#614452)
* Sun Aug 15 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.4-39
- Linux 2.6.34.4
* Fri Aug 13 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.4-38.rc1
- Linux 2.6.34.4-rc1
- Fix up drm-next patch to apply on top of 2.6.34.4
* Tue Aug 10 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.3-37
- Linux 2.6.34.3
- Disable AES-NI encryption until bugs can be sorted out (#622435)
* Tue Aug 10 2010 Ben Skeggs <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.3-36.rc1
- nouveau: disable accel on nva3/nva5/nva8 until it's fixed upstream
- rhbz#596330
* Sat Aug 7 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.3-35.rc1
- Linux 2.6.34.3-rc1
* Fri Aug 6 2010 Ben Skeggs <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.2-34
- nouveau: fix inter-engine race when under memory pressure (rhbz#602956)
- Disable CONFIG_MULTICORE_RAID456
* Tue Aug 3 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.2-33
- Linux 2.6.34.2
- Drop commented-out patches.
- Drop ancient linux-2.6-mac80211-age-scan-results-on-resume.patch
- Fix matroxfb font corruption (#617687)
- Don't resurrect dead task credentials (#591015)
- Fix "ext4 and xfs wrong data returned on read after write if
file size was changed with ftruncate" (#617699)
* Sun Aug 1 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.2-32.rc1
- Linux 2.6.34.2-rc1
- Comment out upstream merged patches:
pci-pm-do-not-use-native-pcie-pme-by-default.patch
linux-2.6-acpi-sleep-live-sci-live.patch (slightly different upstream
patch)
drm-i915-make-G4X-style-PLL-search-more-permissive.patch
drm-intel-945gm-stability-fixes.patch
drm-radeon-fix-shared-ddc-handling.patch
drm-i915-add-reclaimable-to-page-allocations.patch
drm-i915-fix-hibernate-memory-corruption.patch
iwlwifi-Recover-TX-flow-stall-due-to-stuck-queue.patch
iwlwifi-recover_from_tx_stall.patch
mac80211-do-not-wipe-out-old-supported-rates.patch
mac80211-fix-supported-rates-IE-if-AP-doesnt-give-us-its-rates.patch
iwlwifi-cancel-scan-watchdog-in-iwl_bg_abort_scan.patch
ata-generic-handle-new-mbp-with-mcp89.patch
ata-generic-implement-ata-gen-flags.patch
x86-debug-send-sigtrap-for-user-icebp.patch
ethtool-fix-buffer-overflow.patch
sched-fix-over-scheduling-bug.patch
kbuild-fix-modpost-segfault.patch
acpica-00-linux-2.6.git-0f849d2cc6863c7874889ea60a871fb71399dd3f.patch
acpica-01-linux-2.6.git-a997ab332832519c2e292db13f509e4360495a5a.patch
acpica-02-linux-2.6.git-e4e9a735991c80fb0fc1bd4a13a93681c3c17ce0.patch
acpica-03-linux-2.6.git-fd247447c1d94a79d5cfc647430784306b3a8323.patch
acpica-04-linux-2.6.git-c9a8bbb7704cbf515c0fc68970abbe4e91d68521.patch
acpica-05-linux-2.6.git-ce43ace02320a3fb9614ddb27edc3a8700d68b26.patch
acpica-06-linux-2.6.git-9d3c752de65dbfa6e522f1d666deb0ac152ef367.patch
acpi-pm-do-not-enable-gpes-for-system-wakeup-in-advance.patch
cifs-fix-malicious-redirect-problem-in-the-dns-lookup-code.patch
usb-obey-the-sysfs-power-wakeup-setting.patch
- Fix up virtqueue-wrappers.patch to apply after 2.6.34.2 due to:
virtio_net-fix-oom-handling-on-tx.patch
- Revert -stable DRM patches already in our drm-next patch:
amd64-agp-probe-unknown-agp-devices-the-right-way.patch
i915-fix-lock-imbalance-on-error-path.patch
drm-i915-hold-the-spinlock-whilst-resetting-unpin_work-along-error-path.patch
- Fix up drm-next.patch to apply after 2.6.34.2 due to:
drm-i915-gen3-page-flipping-fixes.patch
drm-i915-don-t-queue-flips-during-a-flip-pending-event.patch
- Drop patches now upstream from linux-2.6-v4l-dvb-uvcvideo-update.patch:
V4L/DVB: uvcvideo: Add support for unbranded Arkmicro 18ec:3290 webcams
V4L/DVB: uvcvideo: Add support for V4L2_PIX_FMT_Y16
- Temporarily comment out ssb_check_for_sprom.patch due to ugly conflicts
with:
ssb-handle-netbook-devices-where-the-sprom-address-is-changed.patch
* Sun Aug 1 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.1-31
- Backport initial dist-git fixes from master (377da6d08)
- Modify the prep stage so multiple trees can be prepped in a
single shared git directory.
* Mon Jul 26 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.1-30
- usb-obey-the-sysfs-power-wakeup-setting.patch:
Restore ability of USB devices to wake the machine (#617559)
* Thu Jul 22 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.1-29
- cifs-fix-malicious-redirect-problem-in-the-dns-lookup-code.patch:
Fix a malicious redirect problem in the DNS lookup code (CVE-2010-2524)
* Thu Jul 22 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.1-28
- input-synaptics-relax-capability-id-checks-on-new-hardware.patch:
Make mouse driver recognize newer synaptics hardware as touchpad.
* Thu Jul 22 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.1-27
- ACPI GPE enable/disable patches: fix system powering back on
after shutdown (#613239) (and possibly #615858)
* Thu Jul 22 2010 Jerome Glisse <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.1-26
- radeon fix shared ddc handling (#593429)
* Thu Jul 22 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.1-25
- kvm-mmu-fix-conflict-access-permissions-in-direct-sp.patch:
Fix crash in guest Python programs (#610911)
* Wed Jul 21 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.1-24
- Drop crypto-aesni-kill-module_alias.patch; bug #571577 should
not be present in 2.6.34.
* Wed Jul 21 2010 Dave Airlie <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.1-23
- drm-intel-945gm-stability-fixes.patch: fix 945GM stability issues
* Wed Jul 21 2010 Dave Airlie <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.1-22
- double drop: its a revert on top of a revert.
* Tue Jul 20 2010 Dave Airlie <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.1-21
- drop drm revert, that can't possible cause the bug, but is causing another
one.
* Mon Jul 19 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.1-20
- pci-fall-back-to-original-bios-bar-addresses.patch:
Fix 2.6.34 problems with assigning PCI addresses (KORG#16263)
* Mon Jul 19 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.1-19
- drm-i915-add-reclaimable-to-page-allocations.patch:
Additional fix for hibernation memory corruption bugs.
* Sun Jul 18 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.1-18
- drm-i915-make-G4X-style-PLL-search-more-permissive.patch (#572799)
* Sun Jul 18 2010 Hans de Goede <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.1-17
- Fix inotify-fix-inotify-oneshot-support.patch so that it compiles
- Various small updates / fixes to the uvcvideo driver:
- Support dynamic menu controls (#576023)
- Fix the apple iSight camera not working (#600998)
* Fri Jul 16 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.1-16
- inotify-fix-inotify-oneshot-support.patch,
inotify-send-IN_UNMOUNT-events.patch:
Fix broken oneshot support and missing umount events. (#607327)
* Fri Jul 16 2010 Ben Skeggs <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.1-15
- nouveau: fix lvds regression (#601002)
- nouveau: bring back acpi edid support, with fixes (#613284)
- nouveau: remove dcb1.5 quirk that breaks things (#595645)
* Wed Jul 14 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.1-14
- Truncate the obsolete git bluetooth and firewire patches, use
ApplyOptionalPatch for bluetooth, cpufreq and firewire patches.
* Wed Jul 14 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.1-12
- pci-pm-do-not-use-native-pcie-pme-by-default.patch:
fix PCIe hotplug interrupts firing continuously. (#613412)
- Update pci-acpi-disable-aspm-if-no-osc.patch so it works
with the above patch.
- Drop linux-2.6-defaults-pciehp.patch: pciehp_passive mode
does not exist anymore.
* Tue Jul 13 2010 Ben Skeggs <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.1-11
- nouveau: bring back patches lost from 2.6.34 update + add some more to
fix at least rhbz#532711 and rhbz#593046
- remove patches relating to nouveau that are now unused
* Mon Jul 12 2010 Dave Jones <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Remove a bunch of x86 options from config files that get set
automatically, and can't be overridden.
* Fri Jul 9 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.1-9
- crypto-aesni-kill-module_alias.patch: kill MODULE_ALIAS to prevent
aesni-intel from autoloading.
* Fri Jul 9 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.1-8
- iwlwifi: cancel scan watchdog in iwl_bg_abort_scan (#590436)
* Fri Jul 9 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.1-7
- Restore PowerPC VIO modalias patch; use the upstream version.
- Drop Mac G5 thermal shutdown patch, now upstream.
* Fri Jul 9 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.1-6
- Fix modpost segfault when building kernels. (#595915)
* Fri Jul 9 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.1-5
- pci-change-error-messages-to-kern-info.patch:
Use new upstream patch to silence more useless messages.
* Fri Jul 9 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.1-4
- sched-fix-over-scheduling-bug.patch: fix scheduler bug with CGROUPS
* Fri Jul 9 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.1-3
- ethtool-fix-buffer-overflow.patch (CVE-2010-2478)
* Fri Jul 9 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.1-2
- Copy fix for BZ#609548 from F-13 2.6.33 kernel.
* Fri Jul 9 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 2.6.34.1-1
- Initial commit of 2.6.34 for F-13
- Previous history is in the branch private-f14-2_6_34
* Wed Jul 7 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- pci-acpi-disable-aspm-if-no-osc.patch, pci-aspm-dont-enable-too-early.patch
PCI layer fixes for problems with hardware that doesn't support ASPM.
* Wed Jul 7 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- attempt to fix hibernate on Intel GPUs (kernel.org #13811) (RHBZ#537494)
* Wed Jul 7 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Let ata_generic handle SATA interface on new MacBook Pro (#608034)
* Tue Jul 6 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Re-enable options: DYNAMIC_FTRACE, FUNCTION_TRACER and STACK_TRACER
* Tue Jul 6 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Linux 2.6.34.1
* Thu Jul 1 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Linux 2.6.34.1-rc1
- Drop patches merged upstream:
btrfs-should-add-permission-check-for-setfacl.patch (CVE-2010-2071)
iwlwifi-recalculate-average-tpt-if-not-current.patch
iwlwifi-fix-internal-scan-race.patch
- Revert DRM patches we already have:
drm-i915-rebind-bo-if-currently-bound-with-incorrect-alignment.patch
drm-radeon-fix-the-r100-r200-ums-block-0-page-fix.patch
drm-radeon-r100-r200-ums-block-ability-for-userspace-app-to-trash-0-page-and-beyond.patch
drm-radeon-kms-atom-fix-typo-in-lvds-panel-info-parsing.patch
drm-radeon-kms-reset-ddc_bus-in-object-header-parsing.patch
drm-edid-fix-1024x768-85hz.patch
drm-i915-reject-bind_to_gtt-early-if-object-aperture.patch
drm-i915-fix-82854-pci-id-and-treat-it-like-other-85x.patch
- Revert broken -stable patch:
perf-fix-endianness-argument-compatibility-with-opt_boolean-and-introduce-opt_incr.patch
* Wed Jun 30 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Disable MRST on x86 here as well.
* Tue Jun 29 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- i915-fix-crt-hotplug-regression.patch: copy from rawhide.
* Mon Jun 28 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- ppc64: enable active memory sharing and DLPAR memory remove (#607175)
* Mon Jun 28 2010 Chuck Ebbert <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Copy fix for BZ#220892 from F-13.
* Fri Jun 25 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- drm-i915-fix-edp-panels.patch: copy from rawhide.
* Mon Jun 21 2010 Dave Jones <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Disable workaround for obscure SMP pentium pro errata.
I miss the 1990s too, but it's time to move on.
If anyone actually needs this it would be better done using
the apply_alternatives infrastructure.
* Mon Jun 21 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- drm-revert-drm-fbdev-rework-output-polling-to-be-back-in-core.patch
Revert eb1f8e4f, bisected by Nicolas Kaiser. Thanks! (rhbz#599190)
(If this works, will try to root-cause.)
- rebase previous patch on top of above reversion
* Mon Jun 21 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- revert-drm-kms-toggle-poll-around-switcheroo.patch (rhbz#599190)
* Thu Jun 17 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Suck in patch from Dave Miller in 2.6.35 to add async hash testing,
hopefully fixes error from previous commit. (But making it modular
is still a good idea.)
* Thu Jun 17 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- make ghash-clmulni modular to get rid of early boot noise (rhbz#586954)
(not a /fix/ but it should at least quiet boot down a bit if you have
the cpu support)
* Wed Jun 16 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Snag some more DRM commits into drm-next.patch that I missed the first
time.
- Fix up radeon_pm toggle to work with the upstream code.
* Tue Jun 15 2010 Prarit Bhargava <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Turn off CONFIG_I2O on x86.
It is broken on 64-bit address spaces (i686/PAE, x86_64), and frankly, I'm
having trouble finding anyone who actually uses it.
* Tue Jun 15 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Fix build by nuking superfluous "%{expand" which was missing a
trailing '}'. You may now reward me with an array of alcoholic
beverages, I so richly deserve for spending roughly a full
day staring at the diff of the spec.
* Mon Jun 14 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- btrfs ACL fixes from CVE-2010-2071.
* Sun Jun 13 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- remunge and reapply hdpvr-ir-enable
* Sun Jun 13 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- mac80211/iwlwifi fix connections to some APs (rhbz#558002)
patches from sgruszka@.
* Sun Jun 13 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Provide a knob to enable radeon_pm to allow users to test
that functionality. Add radeon.pm=1 to your kernel cmdline
in order to enable it. (It still defaults to off though.)
* Sun Jun 13 2010 Kyle McMartin <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Update drm-next to include fixes since 2.6.35-rc1.
* Fri Jun 11 2010 Justin M. Forbes <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Disable xsave for so that kernel will boot on ancient EC2 hosts.
* Wed Jun 9 2010 John W. Linville <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Disable rt20xx and rt35xx chipset support in rt2800 drivers (#570869)
* Wed Jun 9 2010 David Woodhouse <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- Include PHY modules in modules.networking (#602155)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #652508 - CVE-2010-4165 kernel: possible kernel oops from user MSS
https://bugzilla.redhat.com/show_bug.cgi?id=652508
[ 2 ] Bug #672398 - CVE-2011-0521 kernel: av7110 negative array offset
https://bugzilla.redhat.com/show_bug.cgi?id=672398
[ 3 ] Bug #662189 - CVE-2010-4346 kernel: install_special_mapping skips
security_file_mmap check
https://bugzilla.redhat.com/show_bug.cgi?id=662189
[ 4 ] Bug #667916 - CVE-2010-4649 CVE-2011-1044 kernel: IB/uverbs: Handle
large number of entries in poll CQ
https://bugzilla.redhat.com/show_bug.cgi?id=667916
[ 5 ] Bug #667912 - CVE-2011-0006 kernel: ima: fix add LSM rule bug
https://bugzilla.redhat.com/show_bug.cgi?id=667912
[ 6 ] Bug #667907 - CVE-2010-4648 kernel: orinoco: fix TKIP countermeasure
behaviour
https://bugzilla.redhat.com/show_bug.cgi?id=667907
[ 7 ] Bug #667892 - CVE-2010-4650 kernel: fuse: verify ioctl retries
https://bugzilla.redhat.com/show_bug.cgi?id=667892
[ 8 ] Bug #652957 - CVE-2010-4163 CVE-2010-4668 kernel: panic when submitting
certain 0-length I/O requests
https://bugzilla.redhat.com/show_bug.cgi?id=652957
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update kernel' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
https://admin.fedoraproject.org/mailman/listinfo/package-announce
Posljednje sigurnosne preporuke