Fedora 20 Update: freecad-0.13-10.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-7733
2014-06-26 00:51:44
--------------------------------------------------------------------------------
Name : freecad
Product : Fedora 20
Version : 0.13
Release : 10.fc20
URL : http://sourceforge.net/apps/mediawiki/free-cad/
Summary : A general purpose 3D CAD modeler
Description :
FreeCAD is a general purpose Open Source 3D CAD/MCAD/CAx/CAE/PLM modeler, aimed
directly at mechanical engineering and product design but also fits a wider
range of uses in engineering, such as architecture or other engineering
specialties. It is a feature-based parametric modeler with a modular software
architecture which makes it easy to provide additional functionality without
modifying the core system.
--------------------------------------------------------------------------------
Update Information:
Add `Depends: qt-assistant` to fix local help browsing, as reported by Przemek Klosowski.
Properly obsolete old docs subpackage.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1112045 - freecad needs qt-assistant
https://bugzilla.redhat.com/show_bug.cgi?id=1112045
[ 2 ] Bug #1110015 - bad dependency blocks upgrading freecad docs
https://bugzilla.redhat.com/show_bug.cgi?id=1110015
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update freecad' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 11 months
Fedora 20 Update: shared-mime-info-1.2-7.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-8002
2014-07-03 02:48:30
--------------------------------------------------------------------------------
Name : shared-mime-info
Product : Fedora 20
Version : 1.2
Release : 7.fc20
URL : http://freedesktop.org/Software/shared-mime-info
Summary : Shared MIME information database
Description :
This is the freedesktop.org shared MIME info database.
Many programs and desktops use the MIME system to represent the types of
files. Frequently, it is necessary to work out the correct MIME type for
a file. This is generally done by examining the file's name or contents,
and looking up the correct MIME type in a database.
--------------------------------------------------------------------------------
Update Information:
* Support PKGSYSTEM_ENABLE_FSYNC environment variable, allows to opt-out of safe (but slow) fdatasync writes.
* Allow (but ignore) new -n option supported by newer versions.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 2 2014 Rex Dieter <rdieter(a)fedoraproject.org> 1.2-7
- PKGSYSTEM_ENABLE_FSYNC default on, adapt to new style scriptlet
* Fri Jun 27 2014 Rex Dieter <rdieter(a)fedoraproject.org> 1.2-6
- allow (but ignore) new -n option
* Thu Jun 26 2014 Rex Dieter <rdieter(a)fedoraproject.org> 1.2-5
- adapt PKGSYSTEM_ENABLE_FSYNC patch to be closer to upstream implementation, except default off (#1052173)
* Wed May 21 2014 Rex Dieter <rdieter(a)fedoraproject.org> 1.2-4
- support PKGSYSTEM_ENABLE_FSYNC (#1052173, #fdo70366)
* Wed May 21 2014 Rex Dieter <rdieter(a)fedoraproject.org> 1.2-3
- %configure --disable-silent-rules
* Thu Nov 7 2013 Bastien Nocera <bnocera(a)redhat.com> 1.2-2
- Update totem mime-type list
- Handle legacy Real Media files by default now that RealPlayer
doesn't exist any more
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1052173 - fdatasync() in update-mime-database, results in large performance degradation
https://bugzilla.redhat.com/show_bug.cgi?id=1052173
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update shared-mime-info' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 11 months
[SECURITY] Fedora 20 Update: xen-4.3.2-6.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-7722
2014-06-26 00:51:21
--------------------------------------------------------------------------------
Name : xen
Product : Fedora 20
Version : 4.3.2
Release : 6.fc20
URL : http://xen.org/
Summary : Xen is a virtual machine monitor
Description :
This package contains the XenD daemon and xm command line
tools, needed to manage virtual machines running under the
Xen hypervisor
--------------------------------------------------------------------------------
Update Information:
Hypervisor heap contents leaked to guest,
with extra patch to avoid regression
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 20 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.2-6
- Hypervisor heap contents leaked to guest [XSA-100, CVE-2014-4021]
(#1110316) with extra patch to avoid regression
* Sun Jun 15 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.2-5
- Fix %if line typo in the spec file
- Vulnerabilities in HVM MSI injection [XSA-96, CVE-2014-3967,CVE-2014-3968]
(#1104583)
* Sun May 11 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.2-4
- add systemd preset support (#1094938)
* Thu May 1 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.2-3
- HVMOP_set_mem_type allows invalid P2M entries to be created
[XSA-92, CVE-2014-3124] (#1093315)
* Wed Mar 26 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.2-2
- HVMOP_set_mem_access is not preemptible [XSA-89, CVE-2014-2599] (#1080425)
* Tue Feb 18 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.2-1
- update to xen-4.3.2
includes fix for "Excessive time to disable caching with HVM guests with
PCI passthrough" [XSA-60, CVE-2013-2212] (#987914)
- remove patches that are now included
* Wed Feb 12 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.1-10
- use-after-free in xc_cpupool_getinfo() under memory pressure [XSA-88,
CVE-2014-1950] (#1064491)
* Thu Feb 6 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.1-9
- integer overflow in several XSM/Flask hypercalls [XSA-84, CVE-2014-1891,
CVE-2014-1892, CVE-2014-1893, CVE-2014-1894]
Off-by-one error in FLASK_AVC_CACHESTAT hypercall [XSA-85, CVE-2014-1895]
libvchan failure handling malicious ring indexes [XSA-86, CVE-2014-1896]
(#1062335)
* Fri Jan 24 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.1-8
- PHYSDEVOP_{prepare,release}_msix exposed to unprivileged pv guests
[XSA-87, CVE-2014-1666] (#1058398)
* Thu Jan 23 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.1-7
- Out-of-memory condition yielding memory corruption during IRQ setup
[XSA-83, CVE-2014-1642] (#1057142)
* Wed Dec 11 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.1-6
- Disaggregated domain management security status update [XSA-77]
- IOMMU TLB flushing may be inadvertently suppressed [XSA-80, CVE-2013-6400]
(#1040024)
* Mon Dec 2 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.1-5
- HVM guest triggerable AMD CPU erratum may cause host hang
[XSA-82, CVE-2013-6885]
* Tue Nov 26 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.1-4
- Lock order reversal between page_alloc_lock and mm_rwlock
[XSA-74, CVE-2013-4553] (#1034925)
- Hypercalls exposed to privilege rings 1 and 2 of HVM guests
[XSA-76, CVE-2013-4554] (#1034923)
* Thu Nov 21 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.3.1-3
- Insufficient TLB flushing in VT-d (iommu) code
[XSA-78, CVE-2013-6375] (#1033149)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1103646 - CVE-2014-4021 xen: Hypervisor heap contents leaked to guests (xsa-100)
https://bugzilla.redhat.com/show_bug.cgi?id=1103646
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update xen' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 11 months
Fedora 20 Update: NetworkManager-0.9.9.0-41.git20131003.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-8033
2014-07-03 02:50:58
--------------------------------------------------------------------------------
Name : NetworkManager
Product : Fedora 20
Version : 0.9.9.0
Release : 41.git20131003.fc20
URL : http://www.gnome.org/projects/NetworkManager/
Summary : Network connection manager and user applications
Description :
NetworkManager is a system network service that manages your network devices
and connections, attempting to keep active network connectivity when available.
It manages ethernet, WiFi, mobile broadband (WWAN), and PPPoE devices, and
provides VPN integration with a variety of different VPN services.
--------------------------------------------------------------------------------
Update Information:
Bugfixes:
- core: fix crash passing wrong parameter to AddBlob for wpa_supplicant (rh #1115538)
- core: fix setting MTU from DHCP (rh #1047083)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 2 2014 Thomas Haller <thaller(a)redhat.com> - 0.9.9.0-41.git20131003
- core: fix crash passing wrong parameter to AddBlob for wpa_supplicant (rh #1115538)
- core: fix setting MTU from DHCP (rh #1047083)
* Wed Jun 25 2014 Thomas Haller <thaller(a)redhat.com> - 0.9.9.0-40.git20131003
- core: fix missing dispatcher events on DHCP change (rh #1113122)
- cli: improve escaping special characters and space for bash completion (bgo #709426)
* Thu Jun 12 2014 Jiří Klimeš <jklimes(a)redhat.com> - 0.9.9.0-39.git20131003
- core: fix Wi-Fi activation endless loop on missing secrets (rh #1095378)
- bluetooth: fix NM crash on bluetooth turn-off while connected to a phone (rh #1059494)
- agents: fix crash in nm_secret_agent_cancel_secrets() (rh #922855)
- platform: fix setting preferred time for address (rh #1082041)
* Thu Apr 17 2014 Dan Winship <danw(a)redhat.com> - 0.9.9.0-38.git20131003
- core: update NMManager:devices before emitting notify::devices (bgo #728367)
* Tue Apr 15 2014 Jiří Klimeš <jklimes(a)redhat.com> - 0.9.9.0-37.git20131003
- policy: check device state before changing it for secondaries (rh #1055099)
- team: fix crash in teamdctl (rh #1076469)
* Mon Apr 14 2014 Jiří Klimeš <jklimes(a)redhat.com> - 0.9.9.0-36.git20131003
- mobile: fix crash (only move to NEED_AUTH during activation (rh #1056133) (rh #1058308)
* Thu Apr 10 2014 Jiří Klimeš <jklimes(a)redhat.com> - 0.9.9.0-35.git20131003
- wifi: fix possible crash in Wi-Fi utils (rh #1086132)
* Tue Apr 8 2014 Thomas Haller <thaller(a)redhat.com> - 0.9.9.0-34.git20131003
- fix nm-online returning success wrongly (rh #1054364)
- fix crash in NMSecretAgent dispose (rh #1061911)
- fix adding addresses with extended address flags for older kernels (rh #1063885)
- cli: show maximum bitrate in MBit/s (rh #1080474)
- fix hanging pending action queued-state-lock (rh #1084556)
- core: emit PropertyChanged signal for ActiveConnection when disconnecting
* Fri Mar 21 2014 Jiří Klimeš <jklimes(a)redhat.com> - 0.9.9.0-33.git20131003
- keyfile: fix crash on reloading connections (rh #1046242)
* Mon Mar 17 2014 Thomas Haller <thaller(a)redhat.com> - 0.9.9.0-32.git20131003
- fix adding ipv6 device routes for autoconf prefixes (rh #1068632)
- fix adding gateway routes within the own subnet
- rdisc: set the expiration timer correctly (rh #1073560)
- libnm-glib: fix a double free in NMDeviceVlan
- ifcfg-rh: add missing functionality for reading/writing subject matches
- libnm-util: fix adding values to 'phase2-altsubject-matches'
- libnm-util: fix verify_identity() in '802-1x' setting
- platform: fix converting address flags in nm_platform_ip6_address_to_string()
- policy: fix crash caused by calling functions on connection==NULL
* Mon Feb 24 2014 Thomas Haller <thaller(a)redhat.com> - 0.9.9.0-31.git20131003
- fix timestamps for addresses received from kernel/platform
- improve platform to_string functions to show all address/route paramters
- libnm-util: add dbus properties to help out bindings (bgo #715186)
* Sun Feb 16 2014 Thomas Haller <thaller(a)redhat.com> - 0.9.9.0-30.git20131003
- revert previous snapshot release 0.9.9.0-29.git20140131, instead based on 0.9.9.0-28.git20131003
- support for ipv6 private addresses (rfc4941) (rh #1047139)
- add ipv6 autoconf addresses with /64 prefix (rh #1045118)
- wait for IPv6 LL before starting autoconf
- bugfix caching of libnl objects (caused error with new libnl3 version when activating bridges) (rh #1063290)
- suppress invalid error message about reading sysfs file phys_port_id
- suppress invalid warning message about adding firewalld zone
* Tue Feb 4 2014 Thomas Haller <thaller(a)redhat.com> - 0.9.9.0-29.git20140131
- update to new upstream snapshot
- add nmtui package
- cli: consolidate syntax for 'connection show' with respect to active connections
- support for ipv6 private addresses (rfc4941) (rh #1047139)
- add ipv6 autoconf addresses with /64 prefix (rh #1045118)
- cleanup timestamp handling to use monotonic time
- cli: add option to update connection profiles in memory only
- bluez: detect bluez version at runtime
- wait for IPv6 LL before starting autoconf
- libnm-util: add dbus properties to help out bindings
- configurable logging levels per logging domain
- dbus: kill at_console usage in permissions
- policy: allow inactive (remote/SSH) sessions to perform some actions
- core: various fixes to autoconnect retry handling
* Wed Jan 29 2014 Jiří Klimeš <jklimes(a)redhat.com> - 0.9.9.0-28.git20131003
- platform: ignore errors adding IPv6 point-to-point address
- libnm-glib: fix return value in nm_remote_settings_load_connections()
- core: fix crash when connecting to new Wi-Fi network (bgo #723163)
- systemd: add "Before=network.service" on Fedora/RHEL (rh #1034983)
* Tue Jan 28 2014 Jiří Klimeš <jklimes(a)redhat.com> - 0.9.9.0-27.git20131003
- core: fix reading physical port id for sysfs
- libnm-glib: export get_gateway() and get_searches() functions
- libnm-glib: new functions for bindings to get nameservers
- libnm-glib: chain up the parent constructed() of NMRemoteConnection
- core: exit cleanly if D-Bus cannot be initialized (rh #1057738)
- dhcp: don't add an IPv6 address if one wasn't given (rh #1048046)
- core: Add host route for DHCP4 server if outside assigned subnet (bgo #721767) (rh #983325)
- vpn: handle missing tunnel interface for IP-based VPNs (bgo #721724) (rh #1030068) (rh #865883)
- core: only log about IPv6 Commit the first time (rh #1044757)
* Tue Jan 21 2014 Jiří Klimeš <jklimes(a)redhat.com> - 0.9.9.0-26.git20131003
- core: improve handling of NPAR/SR-IOV devices (rh #804527)
- libnm-glib: add NMDevice:physical-port-id property
- libnm-glib: fix introspection annotations so that <ipv6>.get_address() worked
* Sat Jan 18 2014 Dan Winship <danw(a)redhat.com> - 0.9.9.0-25.git20131003
- core: fix NMManager:primary-connection when a VPN has the default route (rh #1031574)
* Tue Jan 14 2014 Jiří Klimeš <jklimes(a)redhat.com> - 0.9.9.0-24.git20131003
- vpn: fix logging connection states
- core/cli: display proper information for active VPN connections (rh #1036132)
- cli: allow '--fields group.field' syntax
* Mon Jan 6 2014 Dan Winship <danw(a)redhat.com> - 0.9.9.0-23.git20131003
- bluez-manager: fix a crash (rh #1048711)
* Thu Dec 19 2013 Dan Williams <dcbw(a)redhat.com> - 0.9.9.0-22.git20131003
- core: fix IPv6 router solicitation loop (rh #1044757)
* Thu Dec 12 2013 Dan Williams <dcbw(a)redhat.com> - 0.9.9.0-21.git20131003
- core: wait for link before declaring startup complete (rh #1034921)
- core: ignore RA-provided IPv6 default routes (rh #1029213)
- core: set IPv4 broadcast address correctly (rh #1032819)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1115538 - NetworkManager crash passing blob to wpa-supplicant during add-network
https://bugzilla.redhat.com/show_bug.cgi?id=1115538
[ 2 ] Bug #1047083 - FC20 Regression DHCP Client ignores interface-mtu DHCP Option
https://bugzilla.redhat.com/show_bug.cgi?id=1047083
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update NetworkManager' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 11 months
Fedora 20 Update: ming-0.4.5-3.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-7199
2014-06-10 01:54:58
--------------------------------------------------------------------------------
Name : ming
Product : Fedora 20
Version : 0.4.5
Release : 3.fc20
URL : http://www.libming.org/
Summary : A library for generating Macromedia Flash files
Description :
Ming is a library for generating Macromedia Flash files (.swf), written in C,
and includes useful utilities for working with .swf files.
--------------------------------------------------------------------------------
Update Information:
Ming is a library for generating Macromedia Flash files (.swf), written in C, and includes useful utilities for working with .swf files. There are also bindings for Perl, PHP, Python and TCL.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1101043 - Review Request: ming - A library for generating Macromedia Flash files
https://bugzilla.redhat.com/show_bug.cgi?id=1101043
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ming' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 11 months
[SECURITY] Fedora 19 Update: xen-4.2.4-6.fc19
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-7734
2014-06-26 00:51:46
--------------------------------------------------------------------------------
Name : xen
Product : Fedora 19
Version : 4.2.4
Release : 6.fc19
URL : http://xen.org/
Summary : Xen is a virtual machine monitor
Description :
This package contains the XenD daemon and xm command line
tools, needed to manage virtual machines running under the
Xen hypervisor
--------------------------------------------------------------------------------
Update Information:
Hypervisor heap contents leaked to guest,
with extra patch to avoid regression
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 20 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.4-6
- Hypervisor heap contents leaked to guest [XSA-100, CVE-2014-4021]
(#1110316) with extra patch to avoid regression
* Sun Jun 15 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.4-5
- Vulnerabilities in HVM MSI injection [XSA-96, CVE-2014-3967,CVE-2014-3968]
(#1104583)
* Thu May 1 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.4-4
- HVMOP_set_mem_type allows invalid P2M entries to be created
[XSA-92, CVE-2014-3124] (#1093315)
* Wed Mar 26 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.4-3
- HVMOP_set_mem_access is not preemptible [XSA-89, CVE-2014-2599] (#1080425)
* Wed Feb 19 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.4-2
- 32-bit fix for "Guest triggerable AMD CPU erratum may cause host hang"
[XSA-82, CVE-2013-6885]
* Tue Feb 18 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.4-1
- update to xen-4.2.4
includes fix for "Excessive time to disable caching with HVM guests with
PCI passthrough" [XSA-60, CVE-2013-2212] (#987914)
- remove patches that are now included
* Wed Feb 12 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-16
- use-after-free in xc_cpupool_getinfo() under memory pressure [XSA-88,
CVE-2014-1950] (#1064491)
* Thu Feb 6 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-15
- integer overflow in several XSM/Flask hypercalls [XSA-84, CVE-2014-1891,
CVE-2014-1892, CVE-2014-1893, CVE-2014-1894]
Off-by-one error in FLASK_AVC_CACHESTAT hypercall [XSA-85, CVE-2014-1895]
libvchan failure handling malicious ring indexes [XSA-86, CVE-2014-1896]
(#1062335)
* Fri Jan 24 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-14
- PHYSDEVOP_{prepare,release}_msix exposed to unprivileged pv guests
[XSA-87, CVE-2014-1666] (#1058398)
* Thu Jan 23 2014 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-13
- Out-of-memory condition yielding memory corruption during IRQ setup
[XSA-83, CVE-2014-1642] (#1057142)
* Wed Dec 11 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-12
- IOMMU TLB flushing may be inadvertently suppressed [XSA-80, CVE-2013-6400]
(#1040024)
* Mon Dec 2 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-11
- HVM guest triggerable AMD CPU erratum may cause host hang
[XSA-82, CVE-2013-6885]
* Tue Nov 26 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-10
- Lock order reversal between page_alloc_lock and mm_rwlock
[XSA-74, CVE-2013-4553] (#1034925)
- Hypercalls exposed to privilege rings 1 and 2 of HVM guests
[XSA-76, CVE-2013-4554] (#1034923)
* Thu Nov 21 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-9
- Insufficient TLB flushing in VT-d (iommu) code
[XSA-78, CVE-2013-6375] (#1033149)
* Sat Nov 9 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-8
- Host crash due to HVM guest VMX instruction execution
[XSA-75, CVE-2013-4551] (#1029055)
* Fri Nov 1 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-7
- Lock order reversal between page allocation and grant table locks
[XSA-73, CVE-2013-4494] (#1026248)
* Tue Oct 29 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-6
- ocaml xenstored mishandles oversized message replies
[XSA-72, CVE-2013-4416] (#1024450)
* Fri Oct 25 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-5
- systemd changes to allow oxenstored to be used instead of xenstored (#1022640)
* Thu Oct 10 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-4
- security fixes (#1017843)
Information leak through outs instruction emulation in 64-bit PV guests
[XSA-67, CVE-2013-4368]
possible null dereference when parsing vif ratelimiting info
[XSA-68, CVE-2013-4369]
misplaced free in ocaml xc_vcpu_getaffinity stub
[XSA-69, CVE-2013-4370]
use-after-free in libxl_list_cpupool under memory pressure
[XSA-70, CVE-2013-4371]
qemu disk backend (qdisk) resource leak (Fedora doesn't build this qemu)
[XSA-71, CVE-2013-4375]
* Wed Oct 2 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-3
- Set "Domain-0" label in xenstored.service systemd file to match
xencommons init.d script.
- security fixes (#1013748)
Information leaks to HVM guests through I/O instruction emulation
[XSA-63, CVE-2013-4355]
Information leak to HVM guests through fbld instruction emulation
[XSA-66, CVE-2013-4361]
* Wed Sep 25 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-2
- Information leak on AVX and/or LWP capable CPUs [XSA-62, CVE-2013-1442]
(#1012056)
* Mon Sep 9 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.3-1
- update to xen-4.2.3
includes fix for [XSA-61, CVE-2013-4329] libxl partially sets up HVM
passthrough even with disabled iommu
- remove included or unnecessary patches
* Wed Jun 26 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.2-10
- XSA-45/CVE-2013-1918 breaks page reference counting [XSA-58,
CVE-2013-1432] (#978383)
- let pygrub handle set default="${next_entry}" line in F19 (#978036)
- libxl: Set vfb and vkb devid if not done so by the caller (#977987)
* Mon Jun 24 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.2-9
- add upstream patch for PCI passthrough problems after XSA-46 (#977310)
* Fri Jun 21 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.2-8
- xenstore permissions not set correctly by libxl [XSA-57,
CVE-2013-2211] (#976779)
* Fri Jun 14 2013 Michael Young <m.a.young(a)durham.ac.uk> - 4.2.2-7
- Revised fixes for [XSA-55, CVE-2013-2194 CVE-2013-2195
CVE-2013-2196] (#970640)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1103646 - CVE-2014-4021 xen: Hypervisor heap contents leaked to guests (xsa-100)
https://bugzilla.redhat.com/show_bug.cgi?id=1103646
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update xen' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 11 months
Fedora 20 Update: haproxy-1.5.1-1.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-7754
2014-06-26 00:52:37
--------------------------------------------------------------------------------
Name : haproxy
Product : Fedora 20
Version : 1.5.1
Release : 1.fc20
URL : http://haproxy.1wt.eu/
Summary : HAProxy reverse proxy for high availability environments
Description :
HAProxy is a TCP/HTTP reverse proxy which is particularly suited for high
availability environments. Indeed, it can:
- route HTTP requests depending on statically assigned cookies
- spread load among several servers while assuring server persistence
through the use of HTTP cookies
- switch to backup servers in the event a main one fails
- accept connections to special ports dedicated to service monitoring
- stop accepting connections without breaking existing ones
- add, modify, and delete HTTP headers in both directions
- block requests matching particular patterns
- persists clients to the correct application server depending on
application cookies
- report detailed status as HTML pages to authenticated users from a URI
intercepted from the application
--------------------------------------------------------------------------------
Update Information:
Update to upstream stable release 1.5.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 24 2014 Ryan O'Hara <rohara(a)redhat.com> - 1.5.1-1
- Update to 1.5.1
* Thu Jun 19 2014 Ryan O'Hara <rohara(a)redhat.com> - 1.5.0-2
- Build with zlib and openssl support
* Thu Jun 19 2014 Ryan O'Hara <rohara(a)redhat.com> - 1.5.0-1
- Update to 1.5.0
* Thu Mar 27 2014 Ryan O'Hara <rohara(a)redhat.com> - 1.4.25-1
- Update to 1.4.25
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update haproxy' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 11 months
Fedora 20 Update: openstack-neutron-2013.2.3-11.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-7743
2014-06-26 00:52:16
--------------------------------------------------------------------------------
Name : openstack-neutron
Product : Fedora 20
Version : 2013.2.3
Release : 11.fc20
URL : http://launchpad.net/neutron/
Summary : OpenStack Networking Service
Description :
Neutron is a virtual network service for Openstack. Just like
OpenStack Nova provides an API to dynamically request and configure
virtual servers, Neutron provides an API to dynamically request and
configure virtual networks. These networks connect "interfaces" from
other OpenStack services (e.g., virtual NICs from Nova VMs). The
Neutron API supports extensions to provide advanced network
capabilities (e.g., QoS, ACLs, network monitoring, etc.)
--------------------------------------------------------------------------------
Update Information:
Fixed interaction with systemd when using multiple RPC workers
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 24 2014 Ihar Hrachyshka <ihrachys(a)redhat.com> 2013.2.3-11
- Send SIGTERM signal only to parent process when stopping neutron
service, bz#1110642
* Tue Jun 24 2014 Ihar Hrachyshka <ihrachys(a)redhat.com> 2013.2.3-10
- Notify systemd when starting Neutron server, bz#1063427
* Tue Jun 17 2014 Ihar Hrachyshka <ihrachys(a)redhat.com> 2013.2.3-9
- Install SNAT rules for ipv4 only, bz#1110142
* Wed Jun 11 2014 Ihar Hrachyshka <ihrachys(a)redhat.com> 2013.2.3-8
- Ensure routing key is specified in the address for a direct producer, bz#1108025
* Mon May 19 2014 Ihar Hrachyshka <ihrachys(a)redhat.com> 2013.2.3-7
- netaddr<=0.7.10 raises ValueError instead of AddrFormatError, bz#1090137
* Mon May 19 2014 Ihar Hrachyshka <ihrachys(a)redhat.com> 2013.2.3-6
- Validate CIDR given as ip-prefix in security-group-rule-create, bz#1090137
* Thu May 15 2014 Ihar Hrachyshka <ihrachys(a)redhat.com> 2013.2.3-5
- Make neutron-vpn-agent read fwaas_driver.ini, bz#1098121
* Mon Apr 28 2014 Ihar Hrachyshka <ihrachys(a)redhat.com> 2013.2.3-4
- Removed signing_dir from neutron.conf (bz#1050842)
- Sync service and systemd modules from oslo-incubator (bz#1063427)
* Thu Apr 10 2014 Ihar Hrachyshka <ihrachys(a)redhat.com> 2013.2.3-2
- Remove signing_dir from neutron-dist.conf, bz#1050842
* Thu Apr 10 2014 Miguel Angel Ajo <mangelajo(a)redhat.com> 2013.2.3-1
- Update to upstream 2013.2.3
* Wed Feb 19 2014 Pádraig Brady <pbrady(a)redhat.com> - 2013.2.2-2
- Update to havana stable release 2013.2.2
- Sync up Quantum renaming changes from el6 branch
* Fri Jan 24 2014 Terry Wilson <twilson(a)redhat.com> - 2013.2.1-3
- Remove requirements.txt, bz#1057615
* Tue Jan 7 2014 Terry Wilson <twilson(a)redhat.com> - 2013.2.1-1
- Add python-psutil requirement for openvswitch agent, bz#1049235
* Wed Dec 18 2013 Pádraig Brady <pbrady(a)redhat.com> - 2013.2.1-1
- Update to havana stable release 2013.2.1
* Tue Dec 10 2013 Terry Wilson <twilson(a)redhat.com> - 2013.2-6
- Add rootwrap.conf limitation to sudoers.d/neutron, bz#984097
- neutron-server-setup: support mariadb
* Wed Dec 4 2013 Terry Wilson <twilson(a)redhat.com> - 2013.2-5
- Add missing debug and vpnaas rootwrap filters, bz#1034207
* Mon Dec 2 2013 Terry Wilson <twilson(a)redhat.com> - 2013.2-4
- Replace quantum references in neutron-dist.conf
* Wed Nov 13 2013 Terry Wilson <twilson(a)redhat.com> - 2013.2-3
- Add dnsmasq-utils dependency
* Wed Oct 30 2013 Terry Wilson <twilson(a)redaht.com> - 2013.2-2
- Better support for upgrading from grizzly to havana
- Update dependencies on python-{babel,keystoneclient,oslo-config}
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update openstack-neutron' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 11 months
Fedora 20 Update: rebase-helper-0.3.0-0.3.20140624git.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-7727
2014-06-26 00:51:31
--------------------------------------------------------------------------------
Name : rebase-helper
Product : Fedora 20
Version : 0.3.0
Release : 0.3.20140624git.fc20
URL : https://github.com/phracek/rebase-helper
Summary : The tool which helps you with rebase package
Description :
Rebase-Helper is a tool to help package maintainers to update
their packages to the latest upstream version.
It helps you to rebase existing patches on top of the new sources.
It also builds RPMs and performs various tests on them,
comparing to the previous version.
--------------------------------------------------------------------------------
Update Information:
Tool for package maintainers to help them with updating their package to the latest upstream version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1112246 - Review Request: rebase-helper - Tool for package maintainers to help them with updating their package to the latest upstream version.
https://bugzilla.redhat.com/show_bug.cgi?id=1112246
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update rebase-helper' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 11 months
Fedora 20 Update: perl-NetPacket-1.5.0-1.fc20
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-7414
2014-06-16 22:26:55
--------------------------------------------------------------------------------
Name : perl-NetPacket
Product : Fedora 20
Version : 1.5.0
Release : 1.fc20
URL : http://search.cpan.org/dist/NetPacket/
Summary : Assemble/disassemble network packets at the protocol level
Description :
NetPacket provides a base class for a cluster of modules related to
decoding and encoding of network protocols. Each NetPacket descendant
module knows how to encode and decode packets for the network protocol it
implements. Consult the documentation for the module in question for protocol-
specific implementation.
--------------------------------------------------------------------------------
Update Information:
Update to 1.5.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 15 2014 Jose Pedro Oliveira <jose.p.oliveira.oss at gmail.com> - 1.5.0-1
- Update to 1.5.0
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 1.4.4-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Sat Nov 30 2013 Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.4.4-1
- Update to 1.4.4
* Tue Nov 26 2013 Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.4.3-1
- Update to 1.4.3
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update perl-NetPacket' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
9 years, 11 months