- x86, fpu: fix fix fpu register state corruption on 32bit code on a 64bit kernel [882392]
- x86, fpu: backport interesting fixes from mrg-2.3 [882392]
- audit: do not print error when SELinux is disabled [956392]

- Added bz717261_460217-tcp-make-ato-min-and-delack-min-tunable.patch
- Added bz738787-bonding-fix-WARN_ON-when-writing-to-bond_master-sysf.patch
- Added bz738787-net-Fix-memory-leak-corruption-on-VLAN-GRO_DROP.patch
- Added bz738787-gro-reset-dev-pointer-and-skb_iif-on-reuse.patch
- Altered configs to turn off unsupported virtualization

- specfile patch from Luis Claudio to fix firmware package problem for
  debug / trace kernels

- disabled bz667030_CVE-2010-4526-sctp-Fix-a-race-between-ICMP-protocol-unreachable.patch until we have a full solution

- Added bz648685-CVE-2010-4072-ipc-shm-fix-information-leak-to-userland.patch
- Added bz648691-CVE-2010-4073-ipc-initialize-structure-memory-to-zero-for-compat-functions.patch
- Added bz648696-CVE-2010-4074-USB-serialmos-prevent-reading-uninitialized-stack-memory.patch
- Added bz648699-CVE-2010-4075-tty-Make-tiocgicount-a-handler.patch
- Added bz648704-CVE-2010-4077-tty-icount-changeover-for-other-main-devices.patch
- Added bz648831-CVE-2010-4079-V4LDVB-ivtvfb-prevent-reading-uninitialized-stack-memory.patch
- Added bz648707-CVE-2010-4080-ALSA-soundpcirme9652-prevent-reading-uninitialized-stack-memory.patch
- Added bz648717-CVE-2010-4082-driversvideoviaioctl.c-prevent-reading-uninitialized-stack-memory.patch
- Added bz648720-CVE-2010-4083-sys_semctl-fix-kernel-stack-leakage.patch
- Added bz651172-CVE-2010-4157-SCSI-gdth-integer-overflow-in-ioctl.patch
- Added bz637689-CVE-2010-2962-drmi915-Sanity-check-preadpwrite.patch
- Added bz642469-CVE-2010-2963-v4l1-fix-32-bit-compat-microcode-loading-translation.patch
- Added bz651674-CVE-2010-4169-perf_events-Fix-perf_counter_mmap-hook-in-mprotect.patch
- Added bz637680-CVE-2010-3432-sctp-Do-not-reset-the-packet-during-sctp_packet_config..patch
- Added bz640460-CVE-2010-3705-sctp-Fix-out-of-bounds-reading-in-sctp_asoc_get_hmac.patch
- Added bz645223-CVE-2010-3858-setup_arg_pages-diagnose-excessive-argument-size.patch
- Added bz646726-CVE-2010-3861-net-clear-heap-allocation-for-ETHTOOL_GRXCLSRLALL.patch
- Added bz651845-CVE-2010-3874-can-bcm-fix-minor-heap-overflow.patch
- Added bz649894-CVE-2010-3876-net-packet-fix-information-leak-to-userland.patch
- Added bz651265-CVE-2010-3880-inet_diag-Make-sure-we-actually-run-the-same-bytecode-we-audited..patch
- Added bz651699-CVE-2010-4158-filter-make-sure-filters-dont-read-uninitialized-memory.patch

- Added bz607854-mm-keep-a-guard-page-below-a-grow-down-stack-segment.patch
- Added bz607854-mm-fix-missing-page-table-unmap-for-stack-guard-page.patch
- Added bz607854-x86-don-t-send-SIGBUS-for-kernel-page-faults.patch
- Added bz607854-mm-fix-page-table-unmap-for-stack-guard-page-properl.patch
- Added bz607854-mm-fix-up-some-user-visible-effects-of-the-stack-gua.patch
- Added bz607854-mm-make-the-mlock-stack-guard-page-checks-stricter.patch
- Added bz607854-mm-make-stack-guard-page-logic-use-vm_prev-pointer.patch
- Added bz607854-mm-make-the-vma-list-be-doubly-linked.patch

- removed require for kernel-rt-firmware package

- [core] avoid silent stack overflow over the heap [607853] {CVE-2010-2240}

- [fs] nfsd: additional fix to prune iget() usage [561275]
- [mm] untangle mmap and do_mremap [556705] {CVE-2010-0291}

- [fs] fuse: prevent fuse_put_request on invalid pointer [538735] {CVE-2009-4021}
- [net] r8169: straighten out overlength frame detection (enhanced version) [550916] {CVE-2009-4537}