[libvirt/f19] Rebased to version 1.0.5.6 Fix blockjobinfo python API (bz #999077) CVE-2013-4311: Insecure polkit u

Cole Robinson crobinso at fedoraproject.org
Fri Sep 20 21:27:39 UTC 2013


commit d6a3b6d110a637bc51912c713f6691231653b7a9
Author: Cole Robinson <crobinso at redhat.com>
Date:   Fri Sep 20 17:27:27 2013 -0400

    Rebased to version 1.0.5.6
    Fix blockjobinfo python API (bz #999077)
    CVE-2013-4311: Insecure polkit usage (bz #1009539, bz #1005332)
    CVE-2013-4296: Invalid free memory stats (bz #1006173, bz #1009667)
    CVE-2013-4291: Supplementary groups handling (bz #1006509, bz #1006511)
    CVE-2013-5651: virBitmapParse out-of-bounds (bz #1006493)
    Fix virsh change-media with block disk type (bz #951192)
    Fix changing VNC listen address (bz #1006697)

 libvirt.spec |   12 +++++++++++-
 sources      |    2 +-
 2 files changed, 12 insertions(+), 2 deletions(-)
---
diff --git a/libvirt.spec b/libvirt.spec
index 85a6ed4..83a7231 100644
--- a/libvirt.spec
+++ b/libvirt.spec
@@ -340,7 +340,7 @@
 
 Summary: Library providing a simple virtualization API
 Name: libvirt
-Version: 1.0.5.5
+Version: 1.0.5.6
 Release: 1%{?dist}%{?extra_release}
 License: LGPLv2+
 Group: Development/Libraries
@@ -2005,6 +2005,16 @@ fi
 %endif
 
 %changelog
+* Fri Sep 20 2013 Cole Robinson <crobinso at redhat.com> - 1.0.5.6-1
+- Rebased to version 1.0.5.6
+- Fix blockjobinfo python API (bz #999077)
+- CVE-2013-4311: Insecure polkit usage (bz #1009539, bz #1005332)
+- CVE-2013-4296: Invalid free memory stats (bz #1006173, bz #1009667)
+- CVE-2013-4291: Supplementary groups handling (bz #1006509, bz #1006511)
+- CVE-2013-5651: virBitmapParse out-of-bounds (bz #1006493)
+- Fix virsh change-media with block disk type (bz #951192)
+- Fix changing VNC listen address (bz #1006697)
+
 * Thu Aug 01 2013 Cole Robinson <crobinso at redhat.com> - 1.0.5.5-1
 - Rebased to version 1.0.5.5
 - Really fix /dev/tty inside a container (bz #982317)
diff --git a/sources b/sources
index 50a77bd..8f1ab66 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-f208b0bc3347f9b3fedcc382a45285fd  libvirt-1.0.5.5.tar.gz
+57187b0edfb22157a74d60e49f1296db  libvirt-1.0.5.6.tar.gz


More information about the scm-commits mailing list