Fedora alert FEDORA-2008-4386 (kvm)

From:
    	     
 
updates@fedoraproject.org
To:
    	     
 
fedora-package-announce@redhat.com
Subject:
    	     
 
[SECURITY] Fedora 9 Update: kvm-65-7.fc9
Date:
    	     
 
Thu, 29 May 2008 02:33:45 +0000
Message-ID:
    	     
 
<200805290233.m4T2X0Ff002924@bastion.fedora.phx.redhat.com>
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-4386
2008-05-28 22:34:22
--------------------------------------------------------------------------------

Name        : kvm
Product     : Fedora 9
Version     : 65
Release     : 7.fc9
URL         : http://kvm.sf.net
Summary     : Kernel-based Virtual Machine
Description :
KVM (for Kernel-based Virtual Machine) is a full virtualization solution
for Linux on x86 hardware.

Using KVM, one can run multiple virtual machines running unmodified Linux
or Windows images. Each virtual machine has private virtualized hardware:
a network card, disk, graphics adapter, etc.

--------------------------------------------------------------------------------
ChangeLog:

* Tue May 27 2008 Glauber Costa <gcosta@redhat.com> - 65-7.fc9
- Fix the build
* Tue May 27 2008 Glauber Costa <gcosta@redhat.com> - 65-6.fc9
- Fix Cirrus heap overflow vulnerability (#448525)
* Fri May 23 2008 Daniel P. Berrange <berrange@redhat.com> - 65-5.fc9
- Put PTY in rawmode
* Tue May 20 2008 Mark McLoughlin <markmc@redhat.com> - 65-4.fc9
- Re-enable patch to fix -kernel with virtio/extboot drives (#444578)
* Fri May 16 2008 Glauber Costa <gcosta@redhat.com> - 65-3.fc9
- Fix problem with cirrus device that was breaking vnc connections (rhbz #446830)
* Tue Apr 29 2008 Mark McLoughlin <markmc@redhat.com> - 65-2
- Fix -kernel with virtio/extboot drives (#444578)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #237342 - CVE-2007-1320 xen/qemu Cirrus LGD-54XX "bitblt" Heap Overflow
        https://bugzilla.redhat.com/show_bug.cgi?id=237342
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update kvm' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------

_______________________________________________
Fedora-package-announce mailing list
Fedora-package-announce@redhat.com
http://www.redhat.com/mailman/listinfo/fedora-package-ann...