The following Fedora 13 Security updates need testing:
https://admin.fedoraproject.org/updates/php-ZendFramework-1.11.6-1.fc13
https://admin.fedoraproject.org/updates/gimp-2.6.11-14.fc13
https://admin.fedoraproject.org/updates/tor-0.2.1.29-1300.fc13
https://admin.fedoraproject.org/updates/rssh-2.3.3-1.fc13
https://admin.fedoraproject.org/updates/viewvc-1.1.11-1.fc13
https://admin.fedoraproject.org/updates/libmodplug-0.8.7-3.fc13
https://admin.fedoraproject.org/updates/openldap-2.4.21-12.fc13
https://admin.fedoraproject.org/updates/libcgroup-0.35.1-5.fc13
https://admin.fedoraproject.org/updates/polkit-0.96-2.fc13
https://admin.fedoraproject.org/updates/xorg-x11-server-utils-7.4-17.fc13
https://admin.fedoraproject.org/updates/kernel-2.6.34.9-69.fc13
https://admin.fedoraproject.org/updates/cyrus-imapd-2.3.16-5.fc13
https://admin.fedoraproject.org/updates/xen-3.4.3-3.fc13
https://admin.fedoraproject.org/updates/libtiff-3.9.5-1.fc13
https://admin.fedoraproject.org/updates/systemtap-1.4-6.fc13
https://admin.fedoraproject.org/updates/apr-1.4.5-1.fc13
The following Fedora 13 Critical Path updates have yet to be approved:
https://admin.fedoraproject.org/updates/kernel-2.6.34.9-69.fc13
https://admin.fedoraproject.org/updates/polkit-0.96-2.fc13
https://admin.fedoraproject.org/updates/python-ethtool-0.7-2.fc13
https://admin.fedoraproject.org/updates/libtiff-3.9.5-1.fc13
https://admin.fedoraproject.org/updates/pygtk2-2.17.0-9.fc13
https://admin.fedoraproject.org/updates/dosfstools-3.0.9-5.fc13
https://admin.fedoraproject.org/updates/libimobiledevice-1.0.6-1.fc13
https://admin.fedoraproject.org/updates/usbmuxd-1.0.7-1.fc13
https://admin.fedoraproject.org/updates/fuse-2.8.5-5.fc13
https://admin.fedoraproject.org/updates/libcgroup-0.35.1-5.fc13
https://admin.fedoraproject.org/updates/openldap-2.4.21-12.fc13
https://admin.fedoraproject.org/updates/livecd-tools-13.2-1.fc13
https://admin.fedoraproject.org/updates/lua-5.1.4-7.fc13
https://admin.fedoraproject.org/updates/xorg-x11-drv-openchrome-0.2.904-7.fc13
https://admin.fedoraproject.org/updates/lldpad-0.9.26-2.fc13
The following builds have been pushed to Fedora 13 updates-testing
3Depict-0.0.6-1.fc13
apr-1.4.5-1.fc13
apr-util-1.3.12-1.fc13
bluetile-0.5.3-7.fc13
dcraw-9.08-1.fc13
dojo-1.6.0-1.fc13
ghc-dlist-0.5-3.fc13
gimp-2.6.11-14.fc13
git-cola-1.4.3.4-1.fc13
gnome-chemistry-utils-0.12.8-2.fc13
gnumeric-1.10.15-1.fc13
goffice-0.8.15-1.fc13
liveusb-creator-3.11.1-1.fc13
lyx-1.6.10-1.fc13
mod_flvx-0-0.1.20100525git.fc13
php-ZendFramework-1.11.6-1.fc13
qt-mobility-1.1.3-2.fc13
rear-1.11.0-1.fc13
recoll-1.15.8-2.fc13
spyder-2.0.11-1.fc13
vidalia-0.2.12-1.fc13
votca-tools-1.1-1.fc13
xen-3.4.3-3.fc13
Details about builds:
================================================================================
3Depict-0.0.6-1.fc13 (FEDORA-2011-7444)
Valued 3D point cloud visualization and analysis
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 20 2011 D Haley <mycae(a!t)yahoo.com> - 0.0.6-1
- Update to 0.0.6
--------------------------------------------------------------------------------
================================================================================
apr-1.4.5-1.fc13 (FEDORA-2011-7340)
Apache Portable Runtime library
--------------------------------------------------------------------------------
Update Information:
Move to 1.4.x branch.
Various bug fixes since 1.4.2.
Security: CVE-2011-0419 Reimplement apr_fnmatch() from scratch using a non-recursive algorithm; now has improved compliance with the fnmatch() spec.
Note: 1.4.3 was never officially released.
Fix CVE-2011-1928 introduced in 1.4.4.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 20 2011 Bojan Smojver <bojan@xxxxxxxxxxxxx> - 1.4.5-1
- bump up to 1.4.5
* Tue May 10 2011 Bojan Smojver <bojan@xxxxxxxxxxxxx> - 1.4.4-2
- fix top_builddir in apr_rules.mk
* Mon May 9 2011 Bojan Smojver <bojan@xxxxxxxxxxxxx> - 1.4.4-1
- bump up to 1.4.4
- CVE-2011-0419
* Wed Mar 2 2011 Joe Orton <jorton@xxxxxxxxxx> - 1.4.2-3
- work around alising issue in ring macros (upstream PR 50190)
- fix buildconf with newer libtool (#670621)
* Mon Feb 7 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.4.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Sat Dec 4 2010 Joe Orton <jorton@xxxxxxxxxx> - 1.4.2-1
- update to 1.4.2
- always enable SCTP support (#659815)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #703390 - CVE-2011-0419 apr: unconstrained recursion in apr_fnmatch
https://bugzilla.redhat.com/show_bug.cgi?id=703390
[ 2 ] Bug #706203 - CVE-2011-1928 apr: DoS flaw in apr_fnmatch() due to fix for CVE-2011-0419
https://bugzilla.redhat.com/show_bug.cgi?id=706203
--------------------------------------------------------------------------------
================================================================================
apr-util-1.3.12-1.fc13 (FEDORA-2011-7203)
Apache Portable Runtime Utility library
--------------------------------------------------------------------------------
Update Information:
Support for Berkeley DB 5.1, DBD ODBC and Oracle fixes, LDAP fixes.
Fix crash in apr_ldap_rebind_init().
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 20 2011 Bojan Smojver <bojan@xxxxxxxxxxxxx> - 1.3.12-1
- bump up to 1.3.12
* Wed May 11 2011 Bojan Smojver <bojan@xxxxxxxxxxxxx> - 1.3.11-2
- fix crash in apr_ldap_rebind_init()
* Mon May 9 2011 Bojan Smojver <bojan@xxxxxxxxxxxxx> - 1.3.11-1
- bump up to 1.3.11
* Wed Mar 23 2011 Dan HorÃk <dan@xxxxxxxx> - 1.3.10-7
- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)
* Wed Mar 23 2011 Joe Orton <jorton@xxxxxxxxxx> - 1.3.10-6
- rebuild for MySQL soname bump
* Wed Mar 2 2011 Joe Orton <jorton@xxxxxxxxxx> - 1.3.10-5
- fix build
* Wed Mar 2 2011 Joe Orton <jorton@xxxxxxxxxx> - 1.3.10-4
- rebuild
* Mon Feb 7 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.3.10-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Wed Dec 29 2010 Bojan Smojver <bojan@xxxxxxxxxxxxx> - 1.3.10-2
- rebuild for MySQL 5.5.x
--------------------------------------------------------------------------------
================================================================================
bluetile-0.5.3-7.fc13 (FEDORA-2011-7433)
Tiling window manager for GNOME
--------------------------------------------------------------------------------
Update Information:
Add working gnome-bluetile-session setup.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 23 2011 Jens Petersen <petersen@xxxxxxxxxx> - 0.5.3-7.fc14
- use bluetile for WMName
- make gnome-bluetile-session script hack just run bluetile and gnome-session
* Fri May 13 2011 Jens Petersen <petersen@xxxxxxxxxx> - 0.5.3-6.fc14
- replace gnome-bluetile-session with a script that temporarily overrides
the default gnome-session windowmanager
- patch the WMName to be Bluetile
* Wed Apr 20 2011 Jens Petersen <petersen@xxxxxxxxxx> - 0.5.3-5
- gnome-session uses gconf to find window-manager:
- remove gnome-bluetile-session, since WINDOW_MANAGER doesn't work by default
- add a readme file explaining the gconf and other ways of setting up
--------------------------------------------------------------------------------
================================================================================
dcraw-9.08-1.fc13 (FEDORA-2011-7392)
Tool for decoding raw image data from digital cameras
--------------------------------------------------------------------------------
Update Information:
Version 9.08: Support the Fuji HS20EXR/F550EXR, Kodak Z990, Leaf AFi-II 12, Nikon D5100, and Samsung NX11 and NX100.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 23 2011 Nils Philippsen <nils@xxxxxxxxxx> - 9.08-1
- version 9.08
--------------------------------------------------------------------------------
================================================================================
dojo-1.6.0-1.fc13 (FEDORA-2011-7448)
Modular JavaScript toolkit
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #609817 - Review Request: dojo - Modular JavaScript toolkit
https://bugzilla.redhat.com/show_bug.cgi?id=609817
--------------------------------------------------------------------------------
================================================================================
ghc-dlist-0.5-3.fc13 (FEDORA-2011-7407)
Haskell differences lists
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #664205 - Review Request: ghc-dlist - Haskell package that provides difference lists
https://bugzilla.redhat.com/show_bug.cgi?id=664205
--------------------------------------------------------------------------------
================================================================================
gimp-2.6.11-14.fc13 (FEDORA-2011-7397)
GNU Image Manipulation Program
--------------------------------------------------------------------------------
Update Information:
This update fixes buffer overflows in the PSP (CVE-2010-4543, CVE-2011-1782), sphere-designer (CVE-2010-4541), gfig (CVE-2010-4542) and lighting (CVE-2010-4540) plugins.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 23 2011 Nils Philippsen <nils@xxxxxxxxxx> - 2:2.6.11-14
- fix buffer overflows in sphere-designer (CVE-2010-4541),
gfig (CVE-2010-4542), lighting (CVE-2010-4540) plugins
* Mon May 23 2011 Nils Philippsen <nils@xxxxxxxxxx> - 2:2.6.11-13
- harden PSP plugin against bogus input data (CVE-2010-4543, CVE-2011-1782)
* Sat May 7 2011 Christopher Aillon <caillon@xxxxxxxxxx> - 2:2.6.11-12
- Update desktop database, icon cache scriptlets
* Fri May 6 2011 Nils Philippsen <nils@xxxxxxxxxx> - 2:2.6.11-11
- simplify poppler-0.17 patch to avoid adding to libgimp (#698157)
* Wed May 4 2011 Nils Philippsen <nils@xxxxxxxxxx> - 2:2.6.11-10
- don't use poppler/gdk_pixbuf API removed in poppler >= 0.17 (#698157)
- remove obsolete configure options
* Tue Mar 15 2011 Nils Philippsen <nils@xxxxxxxxxx> - 2:2.6.11-9
- don't use HAL from F-16/RHEL-7 on
- explicitly use GIO/GVFS rather than gnome-vfs
* Sun Mar 13 2011 Marek Kasik <mkasik@xxxxxxxxxx> - 2:2.6.11-8
- Rebuild (poppler-0.16.3)
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 2:2.6.11-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #706939 - CVE-2010-4540 CVE-2010-4541 CVE-2010-4542 CVE-2010-4543 CVE-2011-1782 CVE-2010-4543 gimp various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=706939
--------------------------------------------------------------------------------
================================================================================
git-cola-1.4.3.4-1.fc13 (FEDORA-2011-7408)
A highly caffeinated git gui
--------------------------------------------------------------------------------
Update Information:
An update to the latest upstream bugfix release of git-cola, fixing some more bugs with non-ASCII characters (again) and providing better user feedback for some actions.
http://cola.tuxfamily.org/share/doc/git-cola/html/relnotes.html
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 21 2011 Kevin Kofler <Kevin@xxxxxxxxxxxxxxxx> - 1.4.3.4-1
- Update to 1.4.3.4 (#706588)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #706588 - git-cola-1.4.3.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=706588
--------------------------------------------------------------------------------
================================================================================
gnome-chemistry-utils-0.12.8-2.fc13 (FEDORA-2011-7400)
A set of chemical utilities
--------------------------------------------------------------------------------
Update Information:
This update includes latest bugfix releases of goffice and gnumeric, as well as the required gnome-chemistry-utils rebuild.
* ftp://ftp.gnome.org/pub/GNOME/sources/goffice/0.8/goffice-0.8.15.news
* ftp://ftp.gnome.org/pub/GNOME/sources/gnumeric/1.10/gnumeric-1.10.15.news
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 22 2011 Julian Sikorski <belegdol@xxxxxxxxxxxxxxxxx> - 0.12.8-2
- Rebuilt for goffice-0.8.15 and gnumeric-1.10.15
--------------------------------------------------------------------------------
================================================================================
gnumeric-1.10.15-1.fc13 (FEDORA-2011-7400)
Spreadsheet program for GNOME
--------------------------------------------------------------------------------
Update Information:
This update includes latest bugfix releases of goffice and gnumeric, as well as the required gnome-chemistry-utils rebuild.
* ftp://ftp.gnome.org/pub/GNOME/sources/goffice/0.8/goffice-0.8.15.news
* ftp://ftp.gnome.org/pub/GNOME/sources/gnumeric/1.10/gnumeric-1.10.15.news
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 22 2011 Julian Sikorski <belegdol@xxxxxxxxxxxxxxxxx> - 1:1.10.15-1
- Updated to 1.10.15
- Updated GSettings scriptlets to the latest version
--------------------------------------------------------------------------------
================================================================================
goffice-0.8.15-1.fc13 (FEDORA-2011-7400)
Goffice support libraries
--------------------------------------------------------------------------------
Update Information:
This update includes latest bugfix releases of goffice and gnumeric, as well as the required gnome-chemistry-utils rebuild.
* ftp://ftp.gnome.org/pub/GNOME/sources/goffice/0.8/goffice-0.8.15.news
* ftp://ftp.gnome.org/pub/GNOME/sources/gnumeric/1.10/gnumeric-1.10.15.news
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 22 2011 Julian Sikorski <belegdol@xxxxxxxxx> - 0.8.15-1
- Updated to 0.8.15
--------------------------------------------------------------------------------
================================================================================
liveusb-creator-3.11.1-1.fc13 (FEDORA-2011-7475)
A liveusb creator
--------------------------------------------------------------------------------
Update Information:
Support downloading the latest Fedora 15 release
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 24 2011 Luke Macken <lmacken@xxxxxxxxxx> - 3.11.1-1
- Bump to support downloading Fedora 15
* Mon Apr 25 2011 Luke Macken <lmacken@xxxxxxxxxx> - 3.11.0-1
- Latest upstream release
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 3.9.3-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Mon Jan 10 2011 Luke Macken <lmacken@xxxxxxxxxx> - 3.9.3-1
- Update to 3.9.3
- Require syslinux-extlinux (#664093, #665002)
--------------------------------------------------------------------------------
================================================================================
lyx-1.6.10-1.fc13 (FEDORA-2011-7497)
WYSIWYM (What You See Is What You Mean) document processor
--------------------------------------------------------------------------------
Update Information:
Latest 1.6 bugfix release, and brings compatiblity with 2.0 .lyx files. See also:
http://www.lyx.org/announce/1_6_10.txt
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 23 2011 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> - 1.6.10-1
- lyx-1.6.10
* Mon Feb 7 2011 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> - 1.6.9-1
- lyx-1.6.9
--------------------------------------------------------------------------------
================================================================================
mod_flvx-0-0.1.20100525git.fc13 (FEDORA-2011-7436)
FLV progressive download streaming for the Apache HTTP Server
--------------------------------------------------------------------------------
Update Information:
FLV streaming means it can be sought to any position during video, and browser (Flash player) will buffer only from this position to the end. Thus streaming allows to skip boring parts or see video ending without loading the whole file, which simply saves bandwidth. Even H264 is more efficient, FLV is still a common container format for videos, because H264 is supported by Flash since version 9.115.
For using FLV streaming on the web, a pseudo-streaming compliant Flash player, such as Flowplayer, is needed. Streaming requires that the FLV has embedded key-frame markers (meta-data), that can be injected by any supported tool, e.g. flvtool2.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #688121 - Review Request: mod_flvx - FLV progressive download streaming for the Apache HTTP Server
https://bugzilla.redhat.com/show_bug.cgi?id=688121
--------------------------------------------------------------------------------
================================================================================
php-ZendFramework-1.11.6-1.fc13 (FEDORA-2011-7388)
Leading open-source PHP framework
--------------------------------------------------------------------------------
Update Information:
Fixes ZF2011-02: Potential SQL Injection Vector When Using PDO_MySql
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 23 2011 Felix Kaechele <heffer@xxxxxxxxxxxxxxxxx> - 1.11.6-1
- update to 1.11.6
- fixes ZF2011-02: Potential SQL Injection Vector When Using PDO_MySql
- full changelog http://framework.zend.com/changelog/1.11.6
--------------------------------------------------------------------------------
================================================================================
qt-mobility-1.1.3-2.fc13 (FEDORA-2011-7368)
Qt Mobility Framework
--------------------------------------------------------------------------------
Update Information:
This Qt Mobility version brings a number of new features as well as improvements to existing modules. See also: http://qt.nokia.com/products/qt-addons/mobility/
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 23 2011 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 1.1.3-2
- drop BR: qt4-webkit-devel
- BR: gstreamer-plugins-bad-free-devel gstreamer-plugins-base-devel libXv-devel
- tweaks for qt-4.6 (el6)
* Mon May 9 2011 Jaroslav Reznik <jreznik@xxxxxxxxxx> 1.1.3-1
- 1.1.3
* Tue Apr 19 2011 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 1.1.1-1
- 1.1.1
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.1.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Thu Dec 9 2010 Rex Dieter <rdieter@xxxxxxxxxxxxxxxxx> 1.1.0-1
- 1.1.0
--------------------------------------------------------------------------------
================================================================================
rear-1.11.0-1.fc13 (FEDORA-2011-7454)
Relax and Recover (ReaR) is a Linux Disaster Recovery framework
--------------------------------------------------------------------------------
Update Information:
New release of rear-1.11.0
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 23 2011 Gratien D'haese <gdha at sourceforge.net> - 1.11.0-1
- placeholder for release
--------------------------------------------------------------------------------
================================================================================
recoll-1.15.8-2.fc13 (FEDORA-2011-7437)
Desktop full text search tool with Qt GUI
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release recoll 1.15.8.
Also includes additional fix from upstream to fix a post release issue.
Update to latest upstream release recoll 1.15.8.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 24 2011 Terje Rosten <terje.rosten@xxxxxxx> - 1.15.8-2
- add patch from upstream to fix crash.
* Sun May 8 2011 Terje Rosten <terje.rosten@xxxxxxx> - 1.15.8-1
- 1.15.8
* Wed Feb 9 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.14.4-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #702046 - Update recoll to 1.15.8
https://bugzilla.redhat.com/show_bug.cgi?id=702046
[ 2 ] Bug #704439 - [abrt] recoll-1.15.8-1.fc15: _M_grab: Process /usr/bin/recoll was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=704439
[ 3 ] Bug #703710 - Recoll won't start because of a segmentation fault
https://bugzilla.redhat.com/show_bug.cgi?id=703710
[ 4 ] Bug #700321 - [abrt] recoll-1.14.4-1.fc14: re.py:151:sub:UnicodeDecodeError: 'ascii' codec can't decode byte 0xc9 in position 0: ordinal not in range(128)
https://bugzilla.redhat.com/show_bug.cgi?id=700321
--------------------------------------------------------------------------------
================================================================================
spyder-2.0.11-1.fc13 (FEDORA-2011-7452)
Scientific Python Development Environment
--------------------------------------------------------------------------------
Update Information:
Update to 2.0.11
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 22 2011 Chen Lei <supercyper@xxxxxxx> - 2.0.11-1
- Update to 2.0.11
--------------------------------------------------------------------------------
================================================================================
vidalia-0.2.12-1.fc13 (FEDORA-2011-7413)
GUI controller for the Tor Onion Routing Network
--------------------------------------------------------------------------------
Update Information:
Update to 0.2.12
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 22 2011 Chen Lei <supercyper@xxxxxxx> - 0.2.12-1
- New upstream release
* Mon Feb 7 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 0.2.10-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Wed Sep 29 2010 jkeating - 0.2.10-2
- Rebuilt for gcc bug 634757
--------------------------------------------------------------------------------
================================================================================
votca-tools-1.1-1.fc13 (FEDORA-2011-7345)
VOTCA tools library
--------------------------------------------------------------------------------
Update Information:
Fix votca-csg by pushing correct version of VOTCA libraries.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 20 2011 Jussi Lehtola <jussilehtola@xxxxxxxxxxxxxxxxx> - 1.1-1
- Update to 1.1.
* Mon Feb 7 2011 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.0.1-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Sun Feb 6 2011 Thomas Spura <tomspur@xxxxxxxxxxxxxxxxx> - 1.0.1-4
- rebuild for new boost
* Sun Dec 26 2010 Dan HorÃk <dan[at]danny.cz> - 1.0.1-3
- fix build on non-x86 64-bit architectures (ax_boost_base.m4 is wrong)
--------------------------------------------------------------------------------
================================================================================
xen-3.4.3-3.fc13 (FEDORA-2011-7421)
Xen is a virtual machine monitor
--------------------------------------------------------------------------------
Update Information:
gain privileged access to base domain, or access to xen
configuration info. Lack of error checking could allow DoS
attack from guest. [CVE-2011-1583]
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 21 2011 Michael Young <m.a.young@xxxxxxxxxxxx> - 3.4.3-3
- Overflows in kernel decompression can allow root on xen PV guest to gain
privileged access to base domain, or access to xen configuration info.
Lack of error checking could allow DoS attack from guest [CVE-2011-1583]
--------------------------------------------------------------------------------
--
test mailing list
test@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test
