LWN.net Logo

Fedora alert FEDORA-2008-11433 (libvirt)

From:  updates@fedoraproject.org
To:  fedora-package-announce@redhat.com
Subject:  [SECURITY] Fedora 9 Update: libvirt-0.5.1-2.fc9
Date:  Sun, 21 Dec 2008 08:18:01 +0000
Message-ID:  <20081221081802.04D03208605@bastion.fedora.phx.redhat.com>

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-11433 2008-12-21 00:41:39 -------------------------------------------------------------------------------- Name : libvirt Product : Fedora 9 Version : 0.5.1 Release : 2.fc9 URL : http://libvirt.org/ Summary : Library providing a simple API virtualization Description : Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux (and other OSes). -------------------------------------------------------------------------------- Update Information: fix missing read-only access checks, fixes CVE-2008-5086 - upstream release 0.5.1 - mostly bugfixes e.g #473071 - some driver improvements -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 17 2008 Daniel Veillard <veillard@redhat.com> - 0.5.1-2.fc9 - fix missing read-only access checks, fixes CVE-2008-5086 * Fri Dec 5 2008 Daniel Veillard <veillard@redhat.com> - 0.5.1-1.fc9 - upstream release 0.5.1 - mostly bugfixes e.g #473071 - some driver improvments * Wed Nov 26 2008 Daniel Veillard <veillard@redhat.com> - 0.5.0-1.fc9 - upstream release 0.5.0 - domain lifecycle event support - node device enumeration - KVM/QEmu migration support - improved LXC support - SDL display configuration - User Mode Linux driver * Wed Sep 24 2008 Daniel Veillard <veillard@redhat.com> - 0.4.6-2.fc9 - a subtle bug in python submakefile broke the 0.4.6-1.fc9 build #463733 * Wed Sep 24 2008 Daniel Veillard <veillard@redhat.com> - 0.4.6-1.fc9 - upstream release 0.4.6 - fixes a couple of serious bugs in the previous release * Tue Sep 9 2008 Daniel Veillard <veillard@redhat.com> - 0.4.5-2.fc9 - fix a crash if a QEmu/KVM domain is defined without an emulator path * Mon Sep 8 2008 Daniel Veillard <veillard@redhat.com> - 0.4.5-1.fc9 - upstream release 0.4.5 - a lot of bug fixes - major updates to QEmu/KVM and Linux containers drivers - support for OpenVZ if installed * Tue Jul 8 2008 Daniel P. Berrange <berrange@redhat.com> - 0.4.4-2.fc9 - Fix booting of CDROM images with KVM (rhbz #452355) * Wed Jun 25 2008 Daniel Veillard <veillard@redhat.com> - 0.4.4-1.fc9 - upstream release of 0.4.4 - fixes a few bug in previous release * Thu Jun 12 2008 Daniel Veillard <veillard@redhat.com> - 0.4.3-1.fc9 - upstream release 0.4.3 - many bug fixes - many small improvements - serious xenner fixes * Wed Jun 4 2008 Mark McLoughlin <markmc@redhat.com> - 0.4.2-4.fc9 - Disable lokkit support again (#449996, #447633) - Ensure PolicyKit is enabled (#446616) * Fri May 9 2008 Daniel P. Berrange <berrange@redhat.com> - 0.4.2-3.fc9 - Added directory for initrd/kernel images for SELinux policy * Mon Apr 28 2008 Mark McLoughlin <markmc@redhat.com> - 0.4.2-2.fc9 - Enable lokkit support (#443796) -------------------------------------------------------------------------------- References: [ 1 ] Bug #476560 - CVE-2008-5086 libvirt: missing checks for read-only connection https://bugzilla.redhat.com/show_bug.cgi?id=476560 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update libvirt' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-ann...


(Log in to post comments)

Copyright © 2012, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds