Fedora 24 : libvirt (2016-65cc608ebe)

Rebased to version 1.3.3.2 - Fix xen default video device config bz 1336629 - Don't reject duplicate disk serials bz 1349895 - Fix LXC cgroup name mismatch bz 1350139 - Fix managed save/restore with VM USB Keyboard bz 1353222 - Missing dep on systemd-container bz 1355784 - CVE-2016-5008: Setting...

Fedora 22 : qemu-2.3.0-0.3.rc2.fc22 (2015-5541)

Rebased to version 2.3.0-rc2 - Don't install ksm services as executable bz 1192720 - Skip hanging tests on s390 bz 1206057 - CVE-2015-1779 vnc: insufficient resource limiting in VNC websockets decoder bz 1205051, bz 1199572 Note that Tenable Network Security has extracted the preceding...

Fedora 21 : libvirt-1.2.9.2-1.fc21 (2015-1892)

Rebased to version 1.2.9.2 - CVE-2014-8131: deadlock and segfault in qemuConnectGetAllDomainStats bz 1172571 - CVE-2015-0236: missing ACL check for the VIRDOMAINXMLSECURE flag in save images and snapshots objects bz 1185769 - CVE-2014-8136: local denial of service in qemu/qemudriver.c bz 1176179...

Moderate: Red Hat Bug Fix Advisory: glusterfs enhancement update

Updated Glusterfs packages that add one enhancement are now available for Red Hat Storage 3 native client for Red Hat Common. Red Hat Storage is software-only, scale-out storage that provides flexible and affordable unstructured data storage for an enterprise. GlusterFS, a key building block of R...

Fedora 20 : libvirt-1.1.3.8-1.fc20 (2014-15228)

Rebased to version 1.1.3.8 - CVE-2014-3633: out-of-bounds read in blockiotune bz 1160823 - CVE-2014-3657: Potential deadlock in domainconf bz 1160824 - CVE-2014-7823: information leak with migratable flag bz 1160822 Note that Tenable Network Security has extracted the preceding description block...

openSUSE Security Update : MozillaFirefox (openSUSE-SU-2011:1243-1)

MozillaFirefox was updated to version 8 bnc728520 to fix the following security issues : dbg114-MozillaFirefox-5399 MozillaFirefox-5399 newupdateinfo MFSA 2011-47/CVE-2011-3648 bmo690225 Potential XSS against sites using Shift-JIS dbg114-MozillaFirefox-5399 MozillaFirefox-5399 newupdateinfo MFSA...

Fedora 20 : libvirt-1.1.3.3-1.fc20 (2014-1042)

Rebased to version 1.1.3.3 - Fix crash in virDBusAddWatch bz 885445 - Cleanup migration ports when migration is cancelled bz 1018530 - Fix virt-login-shell bz 1054479 - CVE-2013-6458 libvirt: qemu: job usage issue in several APIs leading to libvirtd crash bz 1054206, bz 1048631 - CVE-2013-6436...

Fedora 18 : python-bugzilla-0.9.0-1.fc18 (2013-11419)

Rebased to version 0.9.0 - bugzilla: modify: add --dependson Don Zickus - bugzilla: new: add --groups option Paul Frields - bugzilla: modify: Allow setting nearly every bug parameter - NovellBugzilla implementation removed, can't get it to work - Gracefully handle private bugs bz 963979 - Raise...

Fedora 19 : libvirt-1.0.5.1-1.fc19 (2013-8635)

Rebased to version 1.0.5.1 - Follow updated packaging guidelines for user alloc bz 924501 - CVE-2013-1962 Open files DoS bz 963789, bz 953107 - Fix stream operations like screenshot bz 960879 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

CentOS 6 : evolution-mapi / openchange (CESA-2013:0515)

Updated openchange packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score,...

Fedora 17 : libvirt-0.9.11.9-1.fc17 (2013-1626)

Rebased to version 0.9.11.9 - CVE-2013-0170 libvirt: use-after-free in virNetMessageFree bz 893450, bz 905173 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

MozillaFirefox secuirty update (critical)

MozillaFirefox was updated to version 8 bnc728520 to fix the following security issues: MFSA 2011-47/CVE-2011-3648 bmo690225 Potential XSS against sites using Shift-JIS MFSA 2011-48/CVE-2011-3651/CVE-2011-3652/CVE-2011-3654 Miscellaneous memory safety hazards MFSA 2011-49/CVE-2011-3650 bmo674776...

perl: File:: Path rmtree race condition (CVE-2004-0452) reintroduced after upstream rebase to 5.8.8-1

Race condition in the rmtree function in File::Path 1.08 lib/File/Path.pm in Perl 5.8.8 allows local users to to delete arbitrary files via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a regression error related to CVE-2005-0448. ...

Moderate: aide security update

0.13.1-2.0.4 - Added the correct new config file Related: rhbz252331 0.13.1-2.0.3 - Fixed file permissions to please release criteria Related: rhbz252331 0.13.1-2.0.2 - Removed saved copies of patched scripts Related: rhbz252331 0.13.1-2 - Fixed a typo Related: rhbz252331 0.13.1-1 - Rebased to...