====== Linux Kernel Changelog ====== ===== History ===== Information about the kernel currently booted on a server can be found in ''/proc/version''. The module tree for the booted kernel is automatically installed during the boot, as we copy a tarball containing the correct modules into the server's swap device. A script is started during boot and installs the content of the tarball in the correct directory. A [[iaas/references/server/kernel_modules|process]] exists for installing kernel modules manually. You can download the archive from http://mirrors.gandi.net/kernel/ , decompress it and copy the directory to ''/lib/modules''. ===== 3.12 ===== * 3.12.36-guest-27-c9b6624-x86_64 available since jan 16 2015 for x86_64 architecture. * Based on 3.12.36 kernel tree from kernel.org, * Build info : //#2 SMP Fri Jan 16 15:04:50 UTC 2015//, * Additional aufs3 patch, * This kernel is only available on the new HVM platform. ===== 3.10 ===== * 3.10.62-xenU-25-0e6777a available since dev 16 2014 for both x86_32 and x86_64 architectures. * Based on 3.10.62 kernel tree from kernel.org * Build info : //#2 SMP Dec 15 10:xx:xx UTC 2014// * Same patch as below and fix backported * Use x86_64 kernel for high volume of RAM (more than 17 GB) * The kernel 3.10 has user namespace feature enable and xfs support disable. * A specific version 3.10-xfs is builded for customer which need a xfs support but do not want to use user namespace * 3.10.61-xenU-23-30b6370 available since dev 08 2014 for both x86_32 and x86_64 architectures. * Based on 3.10.61 kernel tree from kernel.org * Build info : //SMP Nov 24 14:xx:xx UTC 2014// * Same patch as below and fix backported * Use x86_64 kernel for high volume of RAM (more than 17 GB) * The kernel 3.10 has user namespace feature enable and xfs support disable. * A specific version 3.10-xfs is builded for customer which need a xfs support but do not want to use user namespace * 3.10.59-xenU-22-fd09134 available since nov 07 2014 for both x86_32 and x86_64 architectures. * Based on 3.10.59 kernel tree from kernel.org * Build info : //#4 SMP Tue Nov 4 10:xx:xx UTC 2014// * Same patch as below and fix backported * Use x86_64 kernel for high volume of RAM (more than 17 GB) * The kernel 3.10 has user namespace feature enable and xfs support disable. * A specific version 3.10-xfs is builded for customer which need a xfs support but do not want to use user namespace * 3.10.42-xenU-12-e888729 available since jun 19 2014 for both x86_32 and x86_64 architectures. * Based on 3.10.42 kernel tree from kernel.org * Build info : //#18 SMP Mon Jun 9 21:22:12 UTC 2014// * Same patch as below and fix backported * Use x86_64 kernel for high volume of RAM (more than 17 GB) * The kernel 3.10 has user namespace feature enable and xfs support disable. * A specific version 3.10-xfs is builded for customer which need a xfs support but do not want to use user namespace * 3.10.38-xenU-10-cc97a6b available since may 06 2014 for both x86_32 and x86_64 architectures. * Based on 3.10.38 kernel tree from kernel.org * Build info : //#10 SMP Mon Apr 28 16:11:28 UTC 2014// * Same patch as below and fix backported * Use x86_64 kernel for high volume of RAM (more than 17 GB) * The kernel 3.10 has user namespace feature enable and xfs support disable. * A specific version 3.10-xfs is builded for customer which need a xfs support but do not want to use user namespace * 3.10.33-xenU-9-f4b9694 available since march 03 2014 for both x86_32 and x86_64 architectures. * Based on 3.10.33 kernel tree from kernel.org * fixing ext4 filesystem issues * Same patch as below and fix backported * Use x86_64 kernel for high volume of RAM (more than 17 GB) * The kernel 3.10 has user namespace feature enable and xfs support disable. * 3.10.32-xenU-8-d31d116 available since march 03 2014 for both x86_32 and x86_64 architectures. * Based on 3.10.32 kernel tree from kernel.org * Build info : //#50 SMP Tue Feb 25 12:06:17 UTC 2014// * Same patch as below and fix backported * Use x86_64 kernel for high volume of RAM (more than 17 GB) * The kernel 3.10 has user namespace feature enable and xfs support disable. * A specific version 3.10-xfs is builded for customer which need a xfs support but do not want to use user namespace * **Available for beta testing.** * 3.10.28-xenU-2-ca0b2ba available since february 01 2014 for both x86_32 and x86_64 architectures. * Based on 3.10.28 kernel tree from kernel.org * Build info : //#14 SMP Fri Jan 31 17:18:53 UTC 2014// * Add fix for CVE-2014-0038 * Same patch as below and fix backported * Use x86_64 kernel for high volume of RAM (more than 17 GB) * Available for beta testing. * 3.10.28-xenU-1-38f6014 available since january 30 2014 for both x86_32 and x86_64 architectures. * Based on 3.10.28 kernel tree from kernel.org * Build info : //#6 SMP Thu Jan 30 12:02:03 UTC 2014// * Enabling features: **aufs** * Same patch as below and fix backported (netfilter, XEN, NFS) * Use x86_64 kernel for high volume of RAM (more than 17 GB) * Available for beta testing. * 3.10.28-xenU-9064 available since january 27 2014 for both x86_32 and x86_64 architectures. * Based on 3.10.28 kernel tree from kernel.org * Build info : //#4 SMP Mon Jan 27 11:31:56 UTC 2014// * Enabling new features: * YAMA security framework, * new crypto ciphers, userland and certificate, * CIFS xattr and POSIX, SquashFS xattr, * F2FS, Ceph, Logfs, * **IPV6 in kernel**, * WAN and HDLC as module, * VXLAN, MACVLAN, PPTP, * DM cache, RAID, thinprovisioning, delay and verify, * Bcache, * x32, * new cgroup options. * Disabling : * IMA integrity checking and EVM, * CONFIG_COMPAT_BRK, * older partition support * Same patch as below and fix backported (netfilter, XEN, NFS) * Use x86_64 kernel for high volume of RAM (more than 17 GB) * Available for beta testing. * 3.10.25-xenU-8879 available since december 23 2013 for both x86_32 and x86_64 architectures. * Based on 3.10.25 kernel tree from kernel.org * Build info : //#6 SMP Fri Dec 20 17:10:00 UTC 2013// * Same patch as below * Use x86_64 kernel for high volume of RAM (more than 17 GB) * Available for beta testing. * Add file System.map and Module.symvers in kernel modules tarball. ===== 3.2 ===== * 3.2.65-xenU-19-0e6777a available since dec 16 2014 for both x86_32 and x86_64 architectures. * Based on 3.2.65 kernel tree from kernel.org * Build info : //#2 SMP Mon Dec 15 10:xx:xx UTC 2014// * Same patch as below * Use x86_64 kernel for high volume of RAM (more than 17 GB) * IPv6 feature is now builtin. * 3.2.58-xenU-11-50785a6 available since may 7 2014 for both x86_32 and x86_64 architectures. * Based on 3.2.58 kernel tree from kernel.org * Build info : //#40 SMP Tue May 6 15:39:12 UTC 2014// * Same patch as below * Use x86_64 kernel for high volume of RAM (more than 17 GB) * IPv6 feature is now builtin. * 3.2.58-xenU-11-50785a6-x86_64-grsec available since may 7 2013 for x86_64 architecture. * Based on 3.2.58 kernel tree from kernel.org * Build info : //#38 SMP Tue May 6 15:31:18 UTC 2014// * Same patch as below * Add grsecurity-3.0-3.2.58-201405051840 patch * IPv6 feature is now builtin. * 3.2.53-xenU-8869 available since december 30 2013 for both x86_32 and x86_64 architectures. * Based on 3.2.53 kernel tree from kernel.org * Build info : //#4 SMP Fri Dec 20 13:50:40 UTC 2013// * Same patch as below * Use x86_64 kernel for high volume of RAM (more than 17 GB) * Add file System.map and Module.symvers in kernel modules tarball. * 3.2.53-xenU-8869-x86_64-grsec available since december 23 2013 for x86_64 architecture. * Based on 3.2.53 kernel tree from kernel.org * Build info : //#4 SMP Fri Dec 20 13:46:47 UTC 2013// * Same patch as below * Add grsecurity-3.0-3.2.53-201312021727 * **/!\ change of version for the userland tool** * 3.2.52-xenU-8686 available since november 07 2013 for both x86_32 and x86_64 architectures. * Based on 3.2.52 kernel tree from kernel.org * Build info : //#4 SMP Mon Nov 4 17:01:45 UTC 2013// * Same patch as below * Use x86_64 kernel for high volume of RAM (more than 17 GB) * 3.2.52-xenU-8686-x86_64-grsec available since november 07 2013 for x86_64 architecture. * Based on 3.2.52 kernel tree from kernel.org * Build info : //#4 SMP Mon Nov 4 17:43:59 UTC 2013// * Same patch as below * Add grsecurity-2.9.1-3.2.52-201311021628 * 3.2.50-xenU-8149 available since august 06 2013 for both x86_32 and x86_64 architectures. * Based on 3.2.50 kernel tree from kernel.org * Build info : //#8 SMP Tue Aug 6 08:44:53 UTC 2013// * Same patch as below * Use x86_64 kernel for high volume of RAM (more than 17 GB) * 3.2.50-xenU-8149-x86_64-grsec available since aout 06 2013 for x86_64 architecture. * Based on 3.2.47 kernel tree from kernel.org * Build info : //#4 SMP Tue Aug 6 08:49:09 UTC 2013// * Same patch as below * Add grsecurity-2.9.1-3.2.50-201308052151 * 3.2.47-xenU-7980-i386/3.2.47-xenU-7977-x86_64 available since juin 20 2013 for both x86_32 and x86_64 architectures. * Based on 3.2.47 kernel tree from kernel.org * Build info : //#8 SMP Wed Jun 19 12:21:44 UTC 2013// * Same patch as below * Use x86_64 kernel for high volume of RAM (more than 17 GB) * 3.2.47-xenU-7984-x86_64-grsec available since juin 21 2013 for x86_64 architecture. * Based on 3.2.47 kernel tree from kernel.org * Build info : //#2 SMP Thu Jun 20 15:36:20 UTC 2013// * Same patch as below * Add grsecurity-2.9.1-3.2.47-201306191807 * 3.2.45-xenU-7899 available since may 23 2013 for both x86_32 and x86_64 architectures. * Based on 3.2.45 kernel tree from kernel.org * Build info : //#6 SMP Tue May 21 12:42:37 UTC 2013// * Same patch as below * Use x86_64 kernel for high volume of RAM (more than 17 GB) * 3.2.45-xenU-7899-x86_64-grsec available since may 23 2013 for x86_64 architecture. * Based on 3.2.45 kernel tree from kernel.org * Build info : //#12 SMP Tue May 21 12:34:55 UTC 2013// * Same patch as below * Add grsecurity-2.9.1-3.2.45-201305142033.patch * 3.2.44-xenU-7872 available since may 13 2013 for both x86_32 and x86_64 architectures. * Based on 3.2.44 kernel tree from kernel.org * Build info : //#8 SMP Tue May 7 13:52:09 UTC 2013// * Same patch as below * Use x86_64 kernel for high volume of RAM (more than 17 GB) * 3.2.44-xenU-7872-x86_64-grsec available since may 13 2013 for x86_64 architecture. * Based on 3.2.44 kernel tree from kernel.org * Build info : //#2 SMP Tue May 7 14:28:28 UTC 2013// * Same patch as below * Add grsecurity-2.9.1-3.2.44-201304292055.patch * 3.2.39-xenU-7726 available since mars 7 2013 for both x86_32 and x86_64 architectures. * Based on 3.2.39 kernel tree from kernel.org * Build info : //#6 SMP Tue Mar 5 16:03:37 UTC 2013// * Same patch as below * Use x86_64 kernel for high volume of RAM (more than 17 GB) * 3.2.39-xenU-7726-x86_64-grsec available since mars 7 2013 for x86_64 architecture. * Based on 3.2.39 kernel tree from kernel.org * Build info : //#4 SMP Tue Mar 5 16:10:21 UTC 2013// * Same patch as below * Add grsecurity-2.9.1-3.2.39-201303012254.patch * 3.2.38-xenU-7648 available since february 13 2013 for both x86_32 and x86_64 architectures. * Based on 3.2.38 kernel tree from kernel.org * Build info : //#2 SMP Sun Feb 10 19:03:30 UTC 2013// * Same patch as below * Use x86_64 kernel for high volume of RAM (more than 17 GB) * 3.2.38-xenU-7648-grsec available since february 12 2013 for x86_64 architecture. * Based on 3.2.38 kernel tree from kernel.org * Build info : //#2 SMP Sun Feb 10 19:03:30 UTC 2013// * Same patch as below * Add grsecurity-2.9.1-3.2.38-201302092140.patch * 3.2.34-xenU-7428 available since november 27 2012 for both x86_32 and x86_64 architectures. * Based on 3.2.34 kernel tree from kernel.org * Build info : //#2 SMP Mon Nov 19 10:11:03 UTC 2012// * Same patch as below * Use x86_64 kernel for high volume of RAM (more than 17 GB) * 3.2.30-xenU-7157 available since october 03 2012 for both x86_32 and x86_64 architectures. * Based on 3.2.30 kernel tree from kernel.org * Build info : //#8 SMP Tue Oct 2 12:01:45 UTC 2012// * Same patch as below * Use x86_64 kernel for high volume of RAM (more than 17 GB) * Fix for XFS volume * 3.2.26-xenU-6909 available since august 08 2012 for both x86_32 and x86_64 architectures. * Based on 3.2.26 kernel tree from kernel.org * Build info : //#4 SMP Tue Aug 7 09:18:16 UTC 2012// * Same patch as below * Use x86_64 kernel for high volume of RAM (more than 17 GB) * (x86_32) Debug is temporary activated * 3.2.24-xenU-6887 available since august 03 2012 for both x86_32 and x86_64 architectures. * Based on 3.2.24 kernel tree from kernel.org * Build info : //#2 SMP Tue Jul 31 08:39:55 UTC 2012// * Same patch as below * Fix for CVE-2012-3430 * Use x86_64 kernel for high volume of RAM (more than 17 GB) * (x86_32) Debug is temporary activated * 3.2.23-xenU-6825 available since july 17 2012 for both x86_32 and x86_64 architectures. * Based on 3.2.23 kernel tree from kernel.org. * Build info : //#2 SMP Mon Jul 16 16:23:39 UTC 2012// * Same patch as below. * Fix for CVE-2012-3375 * Fix on CPU hotplug (should fix the previous race condition) * 3.2.21-xenU-6764 available since june 26 2012 for both x86_32 and x86_64 architectures. * Based on a 3.2.21 kernel tree from kernel.org * Build info : //#16 SMP Tue Jun 26 14:54:22 UTC 2012// * Same patch as below. * Another fix on virtual network interface detach. A race condition can be experienced on the VM boot process, during the initialization of the virtual CPUs. A fix and a kernel update will be provided soon. * 3.2.21-xenU-6756 available since june 25 2012 for both x86_32 and x86_64 architectures. * Based on a 3.2.21 kernel tree on kernel.org * ame patch as below. * A lot of fix from upstream to fix boot and migration bug on virtual servers. * 3.2.21-xenU-6749 available since june 25 2012 for both x86_32 and x86_64 architectures. * Based on a 3.2.21 kernel tree on kernel.org * Same patch as below. * 3.2.19-xenU-6666 available since june 06 2012 for both x86_32 and x86_64 architectures. * Based on a 3.2.19 kernel tree on kernel.org * Build info : //#24 SMP Wed Jun 6 16:10:50 UTC 2012// * Fix on disk detach. ---- ===== 2.6.36 ===== Theses kernels are now considered as **OBSOLETE** and **out of date**. * 2.6.36-xenU-6339 available since january 23 2012. * Based on a 2.6.36.4 upstream source tree from kernel.org * 2.6.36-xenU-4814-i386 available since March 2011, the 1st. * Build info : //#2 SMP Tue Mar 1 15:47:57 UTC 2011// * //same as x86_64// * 2.6.36-xenU-4814-x86_64 available since March 2011, the 1st. * Build info : //#2 SMP Tue Mar 1 15:29:19 UTC 2011// * Based on a 2.6.36.4 upstream source tree. * Increase max memory to 16 GB. * AppArmor is now available as a security framework. * (obsolete) 2.6.36-xenU-4478-x86_64 * (obsolete) 2.6.36-xenU-4458-i386 available since January 2011, the 14th. * Build info : //#2 SMP Tue Jan 11 17:11:45 UTC 2011// * Based on a 2.6.36.3 upstream source tree. * Improve memory managment with D. Kipper patch * From this version, online disk resize is integrated upstream (feature not yet enabled in our backend) * **Bug** on umounting partition in filesystem reiserfs, reiserfs4, xfs, jfs ---- ===== 2.6.32 ===== * 2.6.32-xenU-7970 available since june 20 2013 for both x86_32 and x86_64 architectures * Based on a 2.6.32.61 upstream source tree * Build info : //#2 SMP Tue Jun 18 14:14:13 UTC 2013// * Same patch as below (the aufs2 patch is still present) * Use x86_64 kernel for high volume of RAM (more than 17 GB) * 2.6.32-xenU-7971-x86_64-grsec available since june 21 2013 for x86_64 architecture * Based on a 2.6.32.61 upstream source tree * Build info : //#2 SMP Tue Jun 18 14:48:12 UTC 2013// * Same patch as below (except for the aufs2 patch). * Add grsecurity-2.9.1-2.6.32.61-201306102216 patch. * Use x86_64 kernel for high volume of RAM (more than 17 GB) * 2.6.32-xenU-7428 available since november 27 2012 for both x86_32 and x86_64 architectures * Based on a 2.6.32.60 upstream source tree * Build info : //#4 SMP Mon Nov 19 10:17:25 UTC 2012// * Same patch as below * Use x86_64 kernel for high volume of RAM (more than 17 GB) * 2.6.32-xenU-6887 available since august 03 2012 for both x86_32 and x86_64 architectures * Based on a 2.6.32.59 upstream source tree * Build info : //#2 SMP Tue Jul 31 08:02:33 UTC 2012// * Same patch as below * Fix CVE-2012-3430 * Use x86_64 kernel for high volume of RAM (more than 17 GB) * 2.6.32-xenU-6707 available since june 20 2012 for both x86_32 and x86_64 architectures. * Same patch as below. * Based on a 2.6.32.59 upstream source tree. * 2.6.32-xenU-6436-x86_64-grsec since March, the 21th. Available in x86_64. * Build info : //#4 SMP Mon Mar 19 09:54:18 UTC 2012// * Based on a 2.6.32.59 upstream source tree. * Same patch as below. * Add //aufs2.1// module. * Add grsecurity-2.9-2.6.32.59-201203181400.patch * 2.6.32-xenU-6434 since March, the 20th. Available in x86_32, x86_64. * Build info : //#6 SMP Mon Mar 19 09:00:28 UTC 2012// * Based on a 2.6.32.59 upstream source tree. * Same patch as below. * Add //aufs2.1// module. * 2.6.32-xenU-6259-grsec since January, 13th. Available in x86_64. * Build info : //#12 SMP Sun Jan 8 19:24:28 UTC 2012// * Based on a 2.6.32.53 upstream source tree. * Same patch as below. * Add grsecurity-2.2.2-2.6.32.53-201201062206 * 2.6.32-xenU-6259 available since January, 9th. Available in x86_32, x86_64. * Build info : //#12 SMP Sun Jan 8 19:24:28 UTC 2012// * Based on a 2.6.32.53 upstream source tree. * Same patch as below. * 2.6.32-xenU-6254 available since January, 6th. Available in x86_32, x86_64. * Build info : //#10 SMP Fri Jan 6 13:02:34 UTC 2012// * Based on a 2.6.32.52 upstream source tree. * Same patch as below. * Add fix for XFS * 2.6.32-xenU-6217 available since December, 14th. Available in x86_32, x86_64. * Based on a 2.6.32.51 upstream source tree. * Same patch as below. * 2.6.32-xenU-4436-grsec available since January, 17th. Available only in x86_64 architecture. * Build info : //#6 SMP Wed Jan 5 15:59:15 UTC 2011// * Based on a 2.6.32.24 upstream source tree. * Same patch as below. * Add grsecurity-2.1.14-201005151340 * 2.6.32-gandi-3831 available since October 2010, the 14th. Available in both x86_32 and x86_64 architectures. * Build info ://#12 SMP Tue Oct 12 18:07:01 CEST 2010// * Based on a 2.6.32.24 upstream source tree. * Improve memory managment by partially integrating D. Kipper patch. * Add support for DRBD 8.3.8. * Add HDLC line discipline support in module. * Add eCryptfs suppport. * Activate tickless HIGH_RES_TIMER. * Activate CONFIG_SCHED_HRTICK, CONFIG_TASKSTATS, CONFIG_TASK_DELAY_ACCT, CONFIG_TASK_XACCT, CONFIG_TASK_IO_ACCOUNTING. * //(obsolete)// 2.6.32-gandi-2962 * //(obsolete)// 2.6.32-gandi-2839 * //(obsolete)// 2.6.32-gandi-2805 ---- ===== 2.6.27 ===== Theses kernels are now considered as **OBSOLETE** and **out of date**. * Linux 2.6.27-xenU-4265-i386 #2 SMP Thu Dec 9 09:23:05 UTC 2010 i686 GNU/Linux * //available in the Baltimore, USA datacenter// * Integrate fix to be able to resize disk online (feature not yet enable in our backend) * Linux 2.6.27-gandi-2777 #14 SMP Sun Jan 17 19:09:24 CET 2010 i686 GNU/Linux * Based on XenSource [[http://xenbits.xen.org/git-http/xenclient/linux-2.6.27.git|2.6.27]] git tree. * Integrate fix for CVE-2008-5029, CVE-2009-1337, CVE-2009-1895, CVE-2009-2848, CVE-2009-3002, CVE-2009-3547. * Add support for DRBD 8.2.7. * //(obsolete)// 2.6.27-gandi-2754 ---- ===== 2.6.18 ===== Theses kernels are now considered as **OBSOLETE** and **out of date**. * Linux version 2.6.18-xenU #1 SMP Tue Nov 24 18:35:42 CET 2009 Activation of CONFIG_IP_ROUTE_FWMARK. Fix for [[http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3002|CVE-2009-3002]], [[http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2848|CVE-2009-2848]], [[http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1895|CVE-2009-1895]], [[http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1337|CVE-2009-1337]] * Linux version 2.6.18-xenU #3 SMP Tue Sep 8 15:57:00 CEST 2009 Fix for blkfront. In some case, detaching a disk from a server was failing. * Linux version 2.6.18-xenU #1 SMP Wed Sep 2 12:30:29 CEST 2009 Fix for [[http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2698|CVE-2009-2698]] : udp_sendmsg() vulnerability * Linux version 2.6.18-xenU #2 SMP Wed Aug 19 19:50:00 CEST 2009 Fix for [[http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2692|CVE-2009-2692]] : Linux NULL pointer dereference due to incorrect proto_ops initializations