huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2010-1166: Xorg: X server Render extension memory corruption
Component: Xorg
Severity: Important
CWE: CWE-787 (Out-of-bounds Write)
Public date: 2010-04-27T00:00:00+00:00

The fbComposite function in fbpict.c in the Render extension in the X server in X.Org X11R7.1 allows remote authenticated users to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted request, related to an incorrect macro definition.


Affected upstream versions: n/a
Fixed upstream versions: xorg-server-1.3.99.0
Upstream repository: https://cgit.freedesktop.org/xorg/xserver
Upstream fix commit: d2f813f7db
CVE-2010-1172: dbus-glib: property access not validated
Component: dbus-glib
Severity: Moderate
Public date: 2010-08-10T00:00:00+00:00

DBus-GLib 0.73 disregards the access flag of exported GObject properties, which allows local users to bypass intended access restrictions and possibly cause a denial of service by modifying properties, as demonstrated by properties of the (1) DeviceKit-Power, (2) NetworkManager, and (3) ModemManager services.


Affected upstream versions: n/a
Upstream repository: https://cgit.freedesktop.org/dbus/dbus-glib
Upstream fix commit: 9a6bce9b615abca6068348c1606ba8eaf13d9ae0
CVE-2010-1173: kernel: sctp: crash due to malformed SCTPChunkInit packet
Component: kernel
Severity: Important
CWE: CWE-190 (Integer Overflow or Wraparound)
Public date: 2010-04-29T00:00:00+00:00

The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is enabled, allows remote attackers to cause a denial of service (system crash) via an SCTPChunkInit packet containing multiple invalid parameters that require a large amount of error data.

Statement: Red Hat is aware of this issue and is tracking it via the following bug:
https://bugzilla.redhat.com/CVE-2010-1173.

This issue did not affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 3 as it did not include support for SCTP. Future kernel updates in Red Hat Enterprise Linux 4, 5 and Red Hat Enterprise MRG may address this flaw.

For more information, please see http://kbase.redhat.com/faq/docs/DOC-31052.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.34
Upstream repository: https://git.kernel.org/linux/kernel/git/davem/net-2.6.git
Upstream fix commit: 5fa782c2f5ef6c2e4f04d3e228412c9b4a4c8809
CVE-2010-1187: kernel: tipc: Fix oops on send prior to entering networked mode
Component: kernel
Severity: Important
Public date: 2010-02-19T00:00:00+00:00

The Transparent Inter-Process Communication (TIPC) functionality in Linux kernel 2.6.16-rc1 through 2.6.33, and possibly other versions, allows local users to cause a denial of service (kernel OOPS) by sending datagrams through AF_TIPC before entering network mode, which triggers a NULL pointer dereference.

Statement: Red Hat is aware of this issue and is tracking it via the following bug:
https://bugzilla.redhat.com/CVE-2010-1187.

This issue did not affect the version of Linux kernel as shipped with Red Hat
Enterprise Linux 3, 4 and Red Hat Enterprise MRG as they did not include support for Transparent Inter-Process Communication Protocol (TIPC). A future kernel update in Red Hat Enterprise Linux 5 may address this flaw.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.34
Upstream repository: https://git.kernel.org/linux/kernel/git/davem/net-2.6.git
Upstream fix commit: d0021b252eaf65ca07ed14f0d66425dd9ccab9a6
CVE-2010-1205: libpng: out-of-bounds memory write
Component: libpng
Severity: Critical
Public date: 2010-06-25T00:00:00+00:00

Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.


Affected upstream versions: n/a
Upstream repository: https://libpng.git.sourceforge.net/git/libpng/libpng
Upstream fix commit: 188eb6b42602bf7d7ae708a21897923b6a83fe7c
CVE-2010-1206: Firefox: Spoofing attacks via vectors involving 'No Content' status code or via a windows.stop call
Component: Firefox
Severity: Low
Public date: 2010-04-02T00:00:00+00:00

The startDocumentLoad function in browser/base/content/browser.js in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, does not properly implement the Same Origin Policy in certain circumstances related to the about:blank document and a document that is currently loading, which allows (1) remote web servers to conduct spoofing attacks via vectors involving a 204 (aka No Content) status code, and allows (2) remote attackers to conduct spoofing attacks via vectors involving a window.stop call.

Statement: The Red Hat Security Response Team has rated this issue as having low
security impact, a future update may address this flaw.

Affected upstream versions: n/a
Upstream repository: https://hg.mozilla.org/mozilla-central
Upstream fix commit: cadddabb1178
CVE-2010-1641: kernel: GFS2: The setflags ioctl() doesn't check file ownership
Component: kernel
Severity: Low
Public date: 2010-05-24T00:00:00+00:00

The do_gfs2_set_flags function in fs/gfs2/file.c in the Linux kernel before 2.6.34-git10 does not verify the ownership of a file, which allows local users to bypass intended access restrictions via a SETFLAGS ioctl request.

Statement: Red Hat is aware of this issue and is tracking it via the following bug:
https://bugzilla.redhat.com/CVE-2010-1641.

This issue did not affect the version of Linux kernel as shipped with Red Hat
Enterprise Linux 3, 4 and Red Hat Enterprise MRG as they did not include
support for the GFS2 file system.

A future kernel update in Red Hat Enterprise Linux 5 will address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.35
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 7df0e0397b9a18358573274db9fdab991941062f
CVE-2010-1643: kernel: nfsd: fix vm overcommit crash
Component: kernel
Severity: Important
Public date: 2008-10-30T00:00:00+00:00

mm/shmem.c in the Linux kernel before 2.6.28-rc3, when strict overcommit is enabled, does not properly handle the export of shmemfs objects by knfsd, which allows attackers to cause a denial of service (NULL pointer dereference and knfsd crash) or possibly have unspecified other impact via unknown vectors.

Statement: This issue did not affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4 and 5 as they did not include nfs-export support for tmpfs. A future kernel update in Red Hat Enterprise MRG will address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.28
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 731572d39fcd3498702eda4600db4c43d51e0b26
CVE-2010-1646: sudo: insufficient environment sanitization issue
Component: sudo
Severity: Moderate
Public date: 2010-05-28T00:00:00+00:00

The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable.


Affected upstream versions: n/a
Upstream repository: https://www.sudo.ws/repos/sudo
Upstream fix commit: 3057fde43cf0
CVE-2010-1797: FreeType: Multiple stack overflows by processing CFF opcodes
Component: FreeType
Severity: Important
Public date: 2010-08-05T00:00:00+00:00

Multiple stack-based buffer overflows in the cff_decoder_parse_charstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload.c in FreeType before 2.4.2, as used in Apple iOS before 4.0.2 on the iPhone and iPod touch and before 3.2.2 on the iPad, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted CFF opcodes in embedded fonts in a PDF document, as demonstrated by JailbreakMe. NOTE: some of these details are obtained from third party information.


Affected upstream versions: n/a
Upstream repository: https://git.savannah.gnu.org/cgit/freetype/freetype2.git
Upstream fix commit: 018f5c27813dd7eef4648fe254632ecea0c85a50
CVE-2010-2059: rpm: fails to drop SUID/SGID bits on package upgrade
Component: rpm
Severity: Moderate
Public date: 2010-06-01T00:00:00+00:00

lib/fsm.c in RPM 4.8.0 and unspecified 4.7.x and 4.6.x versions, and RPM before 4.4.3, does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade, which might allow local users to gain privileges by creating a hard link to a vulnerable (1) setuid or (2) setgid file.


Affected upstream versions: n/a
Upstream repository: https://rpm.org/rpm.git
Upstream fix commit: ca2d6b2b484f1501eafdde02e1688409340d2383
CVE-2010-2066: kernel: ext4: Make sure the MOVE_EXT ioctl can't overwrite append-only files
Component: kernel
Severity: Low
Public date: 2010-06-02T00:00:00+00:00

The mext_check_arguments function in fs/ext4/move_extent.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a MOVE_EXT ioctl call that specifies this file as a donor.

Statement: This issue did not affect the version of Linux kernel as shipped with Red Hat
Enterprise Linux 3, 4 and Red Hat Enterprise MRG as they did not include support for the Ext4 filesystem. A future kernel update in Red Hat Enterprise Linux 5 will address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.35
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 1f5a81e41f8b1a782c68d3843e9ec1bfaadf7d72
CVE-2010-2226: kernel: xfs swapext ioctl minor security issue
Component: kernel
Severity: Moderate
Public date: 2010-06-17T00:00:00+00:00

The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write access and obtain read access by swapping one file into another file.

Statement: This issue did not affect the version of Linux kernel as shipped with Red Hat
Enterprise Linux 3, 4 and Red Hat Enterprise MRG as they did not include
support for the XFS filesystem. A future kernel update in Red Hat Enterprise
Linux 5 will address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.35
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 1817176a86352f65210139d4c794ad2d19fc6b63
CVE-2010-2240: kernel: mm: keep a guard page below a grow-down stack segment
Component: kernel
Severity: Important
CWE: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
Public date: 2010-08-13T00:00:00+00:00

The do_anonymous_page function in mm/memory.c in the Linux kernel before 2.6.27.52, 2.6.32.x before 2.6.32.19, 2.6.34.x before 2.6.34.4, and 2.6.35.x before 2.6.35.2 does not properly separate the stack and the heap, which allows context-dependent attackers to execute arbitrary code by writing to the bottom page of a shared memory segment, as demonstrated by a memory-exhaustion attack against the X.Org X server.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.36
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 320b2b8de12698082609ebbc1a17165727f4c893
CVE-2010-2248: kernel: cifs: Fix a kernel BUG with remote OS/2 server
Component: kernel
Severity: Important
CWE: CWE-617 (Reachable Assertion)
Public date: 2010-03-31T00:00:00+00:00

fs/cifs/cifssmb.c in the CIFS implementation in the Linux kernel before 2.6.34-rc4 allows remote attackers to cause a denial of service (panic) via an SMB response packet with an invalid CountHigh value, as demonstrated by a response from an OS/2 server, related to the CIFSSMBWrite and CIFSSMBWrite2 functions.

Statement: This issue did not affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 3 as it did not have support for CIFS. Future updates in Red Hat Enterprise Linux 4, 5, and Red Hat Enterprise MRG may address this flaw.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.34
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 6513a81e9325d712f1bfb9a1d7b750134e49ff18
CVE-2010-2249: libpng: Memory leak when processing Physical Scale (sCAL) images
Component: libpng
Severity: Low
CWE: CWE-401 (Missing Release of Memory after Effective Lifetime)
Public date: 2010-06-25T00:00:00+00:00

Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a PNG image containing malformed Physical Scale (aka sCAL) chunks.


Affected upstream versions: n/a
Upstream repository: https://libpng.git.sourceforge.net/git/libpng/libpng
Upstream fix commit: 90cfcecc09febb8d6c8c1d37ea7bb7cf0f4b00f3
CVE-2010-2492: kernel: ecryptfs_uid_hash() buffer overflow
Component: kernel
Severity: Important
CWE: CWE-131 (Incorrect Calculation of Buffer Size)
Public date: 2010-07-13T00:00:00+00:00

Buffer overflow in the ecryptfs_uid_hash macro in fs/ecryptfs/messaging.c in the eCryptfs subsystem in the Linux kernel before 2.6.35 might allow local users to gain privileges or cause a denial of service (system crash) via unspecified vectors.

Statement: The Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and Red Hat
Enterprise MRG did not include support for eCryptfs, and therefore are not
affected by this issue. A future update in Red Hat Enterprise Linux 6 may
address this flaw.  This was addressed in Red Hat Enterprise Linux 5 via https://rhn.redhat.com/errata/RHSA-2010-0723.html.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.35
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: a6f80fb7b5986fda663d94079d3bba0937a6b6ff
CVE-2010-2498: freetype: invalid free vulnerability with possible heap corruption
Component: freetype
Severity: Important
Public date: 2010-06-09T00:00:00+00:00

The psh_glyph_find_strong_points function in pshinter/pshalgo.c in FreeType before 2.4.0 does not properly implement hinting masks, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a crafted font file that triggers an invalid free operation.


Affected upstream versions: n/a
Upstream repository: https://git.savannah.gnu.org/cgit/freetype/freetype2.git
Upstream fix commit: 8d22746c9e5af80ff4304aef440986403a5072e2
CVE-2010-2499: freetype: buffer overflow vulnerability
Component: freetype
Severity: Important
Public date: 2010-06-09T00:00:00+00:00

Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted LaserWriter PS font file with an embedded PFB fragment.


Affected upstream versions: n/a
Upstream repository: https://git.savannah.gnu.org/cgit/freetype/freetype2.git
Upstream fix commit: c69891a1345640096fbf396e8dd567fe879ce233
CVE-2010-2500: freetype: integer overflow vulnerability in smooth/ftgrays.c
Component: freetype
Severity: Important
CWE: CWE-190 (Integer Overflow or Wraparound)
Public date: 2010-06-09T00:00:00+00:00

Integer overflow in the gray_render_span function in smooth/ftgrays.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.


Affected upstream versions: n/a
Upstream repository: https://git.savannah.gnu.org/cgit/freetype/freetype2.git
Upstream fix commit: 6305b869d86ff415a33576df6d43729673c66eee
CVE-2010-2519: freetype: heap buffer overflow vulnerability when processing certain font files
Component: freetype
Severity: Important
CWE: CWE-122 (Heap-based Buffer Overflow)
Public date: 2010-06-09T00:00:00+00:00

Heap-based buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted length value in a POST fragment header in a font file.


Affected upstream versions: n/a
Upstream repository: https://git.savannah.gnu.org/cgit/freetype/freetype2.git
Upstream fix commit: b2ea64bcc6c385a8e8318f9c759450a07df58b6d
CVE-2010-2521: kernel: nfsd4: bug in read_buf
Component: kernel
Severity: Important
CWE: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
Public date: 2010-04-20T00:00:00+00:00

Multiple buffer overflows in fs/nfsd/nfs4xdr.c in the XDR implementation in the NFS server in the Linux kernel before 2.6.34-rc6 allow remote attackers to cause a denial of service (panic) or possibly execute arbitrary code via a crafted NFSv4 compound WRITE request, related to the read_buf and nfsd4_decode_compound functions.

Statement: This issue did not affect the versions of the Linux kernel as shipped with Red
Hat Enterprise Linux 3 as it did not include support for Network File System (NFS) version 4. Future updates in Red Hat Enterprise 4, 5, and Red Hat Enterprise MRG may address this flaw.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.34
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 2bc3c1179c781b359d4f2f3439cb3df72afc17fc
CVE-2010-2524: kernel: dns_resolver upcall security issue
Component: kernel
Severity: Moderate
Public date: 2010-07-22T00:00:00+00:00

The DNS resolution functionality in the CIFS implementation in the Linux kernel before 2.6.35, when CONFIG_CIFS_DFS_UPCALL is enabled, relies on a user's keyring for the dns_resolver upcall in the cifs.upcall userspace helper, which allows local users to spoof the results of DNS queries and perform arbitrary CIFS mounts via vectors involving an add_key call, related to a "cache stuffing" issue and MS-DFS referrals.

Statement: This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and Red Hat Enterprise MRG as they did not include support for the upcall mechanism for the Common Internet File System (CIFS). This issue was addressed in Red Hat Enterprise Linux 5 via https://rhn.redhat.com/errata/RHSA-2010-0723.html.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.35
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 4c0c03ca54f72fdd5912516ad0a23ec5cf01bda7
CVE-2010-2527: Freetype demos multiple buffer overflows
Component: Freetype demos multiple buffer overflows
Severity: Low
Public date: 2010-06-09T00:00:00+00:00

Multiple buffer overflows in demo programs in FreeType before 2.4.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.


Affected upstream versions: n/a
Upstream repository: https://git.savannah.gnu.org/cgit/freetype/freetype2-demos.git
Upstream fix commit: b995299b73ba4cd259f221f500d4e63095508bec
CVE-2010-2640: evince: Array index errror in DVI file PK font parser
Component: evince
Severity: Moderate
Public date: 2011-01-05T00:00:00+00:00

Array index error in the PK font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.

Statement: This issue did not affect the versions of evince as shipped with Red Hat
Enterprise Linux 5.

Affected upstream versions: n/a
Fixed upstream versions: EVINCE_2_91_5
Upstream repository: https://git.gnome.org/browse/evince
Upstream fix commit: d4139205b010ed06310d14284e63114e88ec6de2
CVE-2010-2641: evince: Array index errror in DVI file VF font parser
Component: evince
Severity: Moderate
Public date: 2011-01-05T00:00:00+00:00

Array index error in the VF font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.

Statement: This issue did not affect the versions of evince as shipped with Red Hat
Enterprise Linux 5.

Affected upstream versions: n/a
Fixed upstream versions: EVINCE_2_91_5
Upstream repository: https://git.gnome.org/browse/evince
Upstream fix commit: d4139205b010ed06310d14284e63114e88ec6de2
CVE-2010-2642: t1lib: Heap based buffer overflow in DVI file AFM font parser
Component: t1lib
Severity: Moderate
CWE: CWE-122 (Heap-based Buffer Overflow)
Public date: 2011-01-05T00:00:00+00:00

Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.

Statement: This issue did not affect the versions of evince as shipped with Red Hat Enterprise Linux 5.

Affected upstream versions: n/a
Fixed upstream versions: EVINCE_2_91_5
Upstream repository: https://git.gnome.org/browse/evince
Upstream fix commit: d4139205b010ed06310d14284e63114e88ec6de2
CVE-2010-2643: evince: Integer overflow in DVI file TFM font parser
Component: evince
Severity: Moderate
CWE: CWE-190 (Integer Overflow or Wraparound)
Public date: 2011-01-05T00:00:00+00:00

Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.

Statement: This issue did not affect the versions of evince as shipped with Red Hat
Enterprise Linux 5.

Affected upstream versions: n/a
Fixed upstream versions: EVINCE_2_91_5
Upstream repository: https://git.gnome.org/browse/evince
Upstream fix commit: d4139205b010ed06310d14284e63114e88ec6de2
CVE-2010-2761: perl-CGI-Simple: - hardcoded MIME boundary value for multipart content, CVE-2010-4410 - CRLF injection allowing HTTP response splitting
Component: perl-CGI-Simple
Severity: Moderate
Public date: 2010-11-10T00:00:00+00:00

The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier uses a hardcoded value of the MIME boundary string in multipart/x-mixed-replace content, which allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input that contains this value, a different vulnerability than CVE-2010-3172.


Affected upstream versions: n/a
Upstream repository: https://github.com/AndyA/CGI--Simple
Upstream fix commit: e4942b871a26c1317a175a91ebb7262eea59b380
CVE-2010-2798: kernel: gfs2: rename causes kernel panic
Component: kernel
Severity: Important
CWE: CWE-476 (NULL Pointer Dereference)
Public date: 2010-06-08T00:00:00+00:00

The gfs2_dirent_find_space function in fs/gfs2/dir.c in the Linux kernel before 2.6.35 uses an incorrect size value in calculations associated with sentinel directory entries, which allows local users to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact by renaming a file in a GFS2 filesystem, related to the gfs2_rename function in fs/gfs2/ops_inode.c.

Statement: This issue did not affect the version of Linux kernel as shipped with Red Hat
Enterprise Linux 3, 4 and Red Hat Enterprise MRG as they did not include
support for the GFS2 file system.

A future kernel update in Red Hat Enterprise Linux 5 will address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.35
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 728a756b8fcd22d80e2dbba8117a8a3aafd3f203