Fedora 16 updates-testing report

updates at fedoraproject.org updates at fedoraproject.org
Thu Nov 15 02:49:44 UTC 2012


The following Fedora 16 Security updates need testing:
 Age  URL
  14  https://admin.fedoraproject.org/updates/FEDORA-2012-17376/seamonkey-2.13.2-1.fc16
  54  https://admin.fedoraproject.org/updates/FEDORA-2012-14452/bacula-5.0.3-33.fc16
  27  https://admin.fedoraproject.org/updates/FEDORA-2012-16415/389-ds-base-1.2.10.16-1.fc16
  11  https://admin.fedoraproject.org/updates/FEDORA-2012-17553/libproxy-0.4.10-1.fc16
 132  https://admin.fedoraproject.org/updates/FEDORA-2012-10314/revelation-0.4.14-1.fc16
  52  https://admin.fedoraproject.org/updates/FEDORA-2012-14654/tor-0.2.2.39-1600.fc16
  33  https://admin.fedoraproject.org/updates/FEDORA-2012-16032/cobbler-2.4.0-beta2.fc16
   4  https://admin.fedoraproject.org/updates/FEDORA-2012-18006/weechat-0.3.8-3.fc16
   7  https://admin.fedoraproject.org/updates/FEDORA-2012-17746/libsocialweb-0.25.21-1.fc16
   0  https://admin.fedoraproject.org/updates/FEDORA-2012-18224/bugzilla-4.0.9-1.fc16
   0  https://admin.fedoraproject.org/updates/FEDORA-2012-18249/xen-4.1.3-4.fc16
  14  https://admin.fedoraproject.org/updates/FEDORA-2012-17291/thunderbird-16.0.2-1.fc16
   5  https://admin.fedoraproject.org/updates/FEDORA-2012-17854/cumin-0.1.5522-4.fc16


The following Fedora 16 Critical Path updates have yet to be approved:
 Age URL
   0  https://admin.fedoraproject.org/updates/FEDORA-2012-18243/selinux-policy-3.10.0-96.fc16
   0  https://admin.fedoraproject.org/updates/FEDORA-2012-18217/nss-util-3.13.6-2.fc16,nss-softokn-3.13.6-2.fc16
   4  https://admin.fedoraproject.org/updates/FEDORA-2012-17969/gnome-keyring-3.2.2-2.fc16
   7  https://admin.fedoraproject.org/updates/FEDORA-2012-17746/libsocialweb-0.25.21-1.fc16
   7  https://admin.fedoraproject.org/updates/FEDORA-2012-17755/NetworkManager-0.9.6.4-1.fc16
   7  https://admin.fedoraproject.org/updates/FEDORA-2012-17766/coreutils-8.12-8.fc16
   8  https://admin.fedoraproject.org/updates/FEDORA-2012-17660/gnutls-2.12.14-4.fc16
  11  https://admin.fedoraproject.org/updates/FEDORA-2012-17572/libfm-1.1.0-1.fc16,pcmanfm-1.1.0-1.fc16
  11  https://admin.fedoraproject.org/updates/FEDORA-2012-17553/libproxy-0.4.10-1.fc16
The following builds have been pushed to Fedora 16 updates-testing

    BitchX-1.2-19.fc16
    R-qtl-1.25.15-1.fc16
    bugzilla-4.0.9-1.fc16
    collectl-3.6.5-1.fc16
    glances-1.5-1.fc16
    glances-1.5.1-1.fc16
    nss-softokn-3.13.6-2.fc16
    nss-util-3.13.6-2.fc16
    perl-DateTime-TimeZone-1.54-1.fc16
    perl-HTML-RewriteAttributes-0.05-1.fc16
    perl-No-Worries-0.7-1.fc16
    php-channel-pirum-1.3-1.fc16
    php-channel-symfony2-1.3-1.fc16
    php-channel-twig-1.3-1.fc16
    pyfits-3.0.9-1.fc16
    selinux-policy-3.10.0-96.fc16
    sysstat-10.0.2-3.fc16
    taskjuggler-2.4.3-13.fc16
    wine-1.5.17-1.fc16
    xen-4.1.3-4.fc16
    znc-1.0-1.fc16

Details about builds:


================================================================================
 BitchX-1.2-19.fc16 (FEDORA-2012-18250)
 IrcII chat client
--------------------------------------------------------------------------------
Update Information:

Latest upstream release, remove .git stuff and fix some minor bugs.
updated to latest upstream code
updated to latest upstream code
updated to latest upstream code
updated to latest upstream code
updated to latest upstream code
--------------------------------------------------------------------------------
ChangeLog:

* Tue Nov 13 2012 Dan Mashal <dan.mashal at fedoraproject.org> 1.2-19
- Bugfix release
* Thu Nov  1 2012 Dan Mashal <dan.mashal at fedoraproject.org> 1.2-18
- Update to upstream version 1.2c02 which fixes quit msgs in SSL mode.
--------------------------------------------------------------------------------


================================================================================
 R-qtl-1.25.15-1.fc16 (FEDORA-2012-18227)
 Tools for analyzing QTL experiments
--------------------------------------------------------------------------------
Update Information:

New upstream release.

--------------------------------------------------------------------------------
ChangeLog:

* Tue Nov 13 2012 Mattias Ellert <mattias.ellert at fysast.uu.se> - 1.25.15-1
- New upstream release
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.23.16-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------


================================================================================
 bugzilla-4.0.9-1.fc16 (FEDORA-2012-18224)
 Bug tracking system
--------------------------------------------------------------------------------
Update Information:

These releases fix a number of issues with Bugzilla.


* Confidential product and component names can be disclosed to unauthorized users if they are used to control the visibility of a custom field.

* When calling the 'User.get' WebService method with a 'groups' argument, it is possible to check if the given group names exist or not.

* Due to incorrectly filtered field values in tabular reports, it is possible to inject code which can lead to XSS.

* When trying to mark an attachment in a bug you cannot see as obsolete, the description of the attachment is disclosed in the error message.

* A vulnerability in swfstore.swf from YUI2 can lead to XSS.

Please refer to the security advisory for more details.
--------------------------------------------------------------------------------
ChangeLog:

* Wed Nov 14 2012 Emmanuel Seyman <emmanuel at seyman.fr> - 4.0.9-1
- Update to 4.0.9
--------------------------------------------------------------------------------


================================================================================
 collectl-3.6.5-1.fc16 (FEDORA-2012-18211)
 A utility to collect various Linux performance data
--------------------------------------------------------------------------------
Update Information:

- update to upstream version 3.6.5
- upstream changelog at http://collectl.sourceforge.net/Releases.html


--------------------------------------------------------------------------------
ChangeLog:

* Mon Nov 12 2012 Dan Horák <dan[at]danny.cz> - 3.6.5-1
- upgrade to upstream version 3.6.5
--------------------------------------------------------------------------------


================================================================================
 glances-1.5-1.fc16 (FEDORA-2012-18233)
 CLI curses based monitoring tool
--------------------------------------------------------------------------------
Update Information:

upgrade to version 1.5
add missing dependancies
Upgrade to version 1.4, glances is now using psUtils instead of pystatgrab.
Upgrade to version 1.4, glances is now using psUtils instead of pystatgrab.
Upgrade to version 1.4, glances is now using psUtils instead of pystatgrab.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Nov  8 2012 Edouard Bourguignon <madko at linuxed.net> - 1.5-1
- Upgrade to 1.5
* Sat Sep  1 2012 Edouard Bourguignon <madko at linuxed.net> - 1.4.1.1-1
- Upgrade to 1.4.1.1
* Tue Aug 21 2012 Edouard Bourguignon <madko at linuxed.net> - 1.4-2
- Adding missing dependencies
- Removing shebang in non-executable files
* Tue Aug 21 2012 Edouard Bourguignon <madko at linuxed.net> - 1.4-1
- Upgrade to version 1.4
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.3.7-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Mon Feb 13 2012 Edouard Bourguignon <madko at linuxed.net> - 1.3.7-2
- Add version for python
--------------------------------------------------------------------------------


================================================================================
 glances-1.5.1-1.fc16 (FEDORA-2012-18251)
 CLI curses based monitoring tool
--------------------------------------------------------------------------------
Update Information:

Upgrade to 1.5.1 (fix compute data bug)
--------------------------------------------------------------------------------
ChangeLog:

* Tue Nov 13 2012 Edouard Bourguignon <madko at linuxed.net> - 1.5.1-1
- Upgrade to 1.5.1 (fix compute data on el6)
* Thu Nov  8 2012 Edouard Bourguignon <madko at linuxed.net> - 1.5-1
- Upgrade to 1.5
* Sat Sep  1 2012 Edouard Bourguignon <madko at linuxed.net> - 1.4.1.1-1
- Upgrade to 1.4.1.1
* Tue Aug 21 2012 Edouard Bourguignon <madko at linuxed.net> - 1.4-2
- Adding missing dependencies
- Removing shebang in non-executable files
* Tue Aug 21 2012 Edouard Bourguignon <madko at linuxed.net> - 1.4-1
- Upgrade to version 1.4
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.3.7-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Mon Feb 13 2012 Edouard Bourguignon <madko at linuxed.net> - 1.3.7-2
- Add version for python
--------------------------------------------------------------------------------


================================================================================
 nss-softokn-3.13.6-2.fc16 (FEDORA-2012-18217)
 Network Security Services Softoken Module
--------------------------------------------------------------------------------
Update Information:

This update is to prevent install conflicts when updating to nss-3.14.

With the nss-3.14 set of devel packages there has been a change of ownership, so to speak, of some headers which could result in update conflicts if one tries to update nss-util-devel. One such case is with nss-util-devel which as of 3.14 will provide hasht.h which hd previously had ben installed by nss-softokn-devel on 3.13.6-1 or earlier. This 3.12.6-2 update is able to swap package "ownership" of the header and thus ensure that the anticipated conflicts will not occur.

For best results the whole set should be applied. Likewise, when the time comes to update to 3.14 please update the entire set at once.

--------------------------------------------------------------------------------
ChangeLog:

* Tue Nov 13 2012 Elio Maldonado <emaldona at redhat.com> - 3.13.6-2
- Bootstrapping build prior to upcoming update of nss packages to nss-3.14
- Don't install sechasht.h as nss-util-devel will install when updated to 3.14
- Prevent update conflict between nss-util-devel-3.14 and nss-softokn-devel-3.13.6
--------------------------------------------------------------------------------


================================================================================
 nss-util-3.13.6-2.fc16 (FEDORA-2012-18217)
 Network Security Services Utilities Library
--------------------------------------------------------------------------------
Update Information:

This update is to prevent install conflicts when updating to nss-3.14.

With the nss-3.14 set of devel packages there has been a change of ownership, so to speak, of some headers which could result in update conflicts if one tries to update nss-util-devel. One such case is with nss-util-devel which as of 3.14 will provide hasht.h which hd previously had ben installed by nss-softokn-devel on 3.13.6-1 or earlier. This 3.12.6-2 update is able to swap package "ownership" of the header and thus ensure that the anticipated conflicts will not occur.

For best results the whole set should be applied. Likewise, when the time comes to update to 3.14 please update the entire set at once.

--------------------------------------------------------------------------------
ChangeLog:

* Mon Nov 12 2012 Elio Maldonado <emaldona at redhat.com> - 3.13.6-2
- Part 2 of bootstrapping builds to provide a conflict-free update to 3.14 next
- nss-util-devel will provide sechash.t as nss-softoken-devel won't
- As of nss-softokn-3.13.6-2 nss-softokn-devel stopped installing hasht.t
- providing it to have the full set of installed headers
--------------------------------------------------------------------------------


================================================================================
 perl-DateTime-TimeZone-1.54-1.fc16 (FEDORA-2012-18244)
 Time zone object base class and factory
--------------------------------------------------------------------------------
Update Information:

Olson 2012j version brings updates for Cuba and Libya.
--------------------------------------------------------------------------------
ChangeLog:

* Tue Nov 13 2012 Petr Pisar <ppisar at redhat.com> - 1.54-1
- update to latest upstream version - Olson 2012j
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #872994 - perl-DateTime-TimeZone-1.54 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=872994
--------------------------------------------------------------------------------


================================================================================
 perl-HTML-RewriteAttributes-0.05-1.fc16 (FEDORA-2012-18198)
 Concise attribute rewriting
--------------------------------------------------------------------------------
Update Information:

 
--------------------------------------------------------------------------------
ChangeLog:

* Tue Nov 13 2012 Ralf Corsépius <corsepiu at fedoraproject.org> 0.05-1
- Upstream update.
- Spec file cleanup.
--------------------------------------------------------------------------------


================================================================================
 perl-No-Worries-0.7-1.fc16 (FEDORA-2012-18232)
 Perl coding without worries
--------------------------------------------------------------------------------
Update Information:

updating to latest upstream version 0.7
--------------------------------------------------------------------------------
ChangeLog:

* Wed Nov 14 2012 Massimo Paladin <massimo.paladin at gmail.com> 0.7-1
- Updating to latest upstream version.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #875603 - Upgrade to new upstream version
        https://bugzilla.redhat.com/show_bug.cgi?id=875603
--------------------------------------------------------------------------------


================================================================================
 php-channel-pirum-1.3-1.fc16 (FEDORA-2012-18221)
 Adds pear.pirum-project.org channel to PEAR
--------------------------------------------------------------------------------
Update Information:

Minor RPM-only update

- Updated version to match channel REST version
- Removed version from virtual provide
--------------------------------------------------------------------------------
ChangeLog:

--------------------------------------------------------------------------------


================================================================================
 php-channel-symfony2-1.3-1.fc16 (FEDORA-2012-18221)
 Adds pear.symfony.com channel to PEAR
--------------------------------------------------------------------------------
Update Information:

Minor RPM-only update

- Updated version to match channel REST version
- Removed version from virtual provide
--------------------------------------------------------------------------------
ChangeLog:

* Tue Nov 13 2012 Shawn Iwinski <shawn.iwinski at gmail.com> 1.3-1
- Updated version to match channel REST version
- Removed version from virtual provide
* Fri Jul 20 2012 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------


================================================================================
 php-channel-twig-1.3-1.fc16 (FEDORA-2012-18221)
 Adds pear.twig-project.org channel to PEAR
--------------------------------------------------------------------------------
Update Information:

Minor RPM-only update

- Updated version to match channel REST version
- Removed version from virtual provide
--------------------------------------------------------------------------------
ChangeLog:

* Tue Nov 13 2012 Shawn Iwinski <shawn.iwinski at gmail.com> 1.3-1
- Updated version to match channel REST version
- Removed version from virtual provide
* Fri Jul 20 2012 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
--------------------------------------------------------------------------------


================================================================================
 pyfits-3.0.9-1.fc16 (FEDORA-2012-18222)
 Python interface to FITS
--------------------------------------------------------------------------------
Update Information:

Bugfix release in the 3.0.x series
--------------------------------------------------------------------------------
ChangeLog:

* Mon Nov 12 2012 Sergio Pascual <sergiopr at fedoraproject.org> - 3.0.9-1
- New upstream source (bugfix)
--------------------------------------------------------------------------------


================================================================================
 selinux-policy-3.10.0-96.fc16 (FEDORA-2012-18243)
 SELinux policy configuration
--------------------------------------------------------------------------------
Update Information:

Here is where you give an explanation of your update.
--------------------------------------------------------------------------------
ChangeLog:

* Tue Nov 13 2012 Miroslav Grepl <mgrepl at redhat.com> 3.10.0-96
- httpd needs to send signull to openshift init script
- Allow prelink_cron_system_t to overide user componant when cp -a- 
- Openshift seems to be storing apache logs in /var/lib/openshift/.log/httpd
- Allow setuid/setgid for cupsd-config
- New ypbind pkg wants to search /var/run which is caused by sd_notify
* Thu Nov  1 2012 Miroslav Grepl <mgrepl at redhat.com> 3.10.0-95
- Add support for OpenShift sbin labeling
* Wed Oct 31 2012 Miroslav Grepl <mgrepl at redhat.com> 3.10.0-94
- Add httpd_verify_dns boolean
- Add label for log directory under /var/www/stickshift
- Allow openshift domains to use /dev/shm
- Dontaudit leaked fifo files from openshift to ping
- Allow nsswitch domains to read SAMBA conf files
* Mon Oct 22 2012 Miroslav Grepl <mgrepl at redhat.com> 3.10.0-93
- Add labeling for mcollectived
- Allow openshift domains to read localization
* Fri Oct 12 2012 Miroslav Grepl <mgrepl at redhat.com> 3.10.0-92
- Fix httpd_stickshift boolean
- Backport openshift policy
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #846516 - SELinux is preventing /opt/google/chrome/chrome from 'read' accesses on the file /media/BLACKBERRY2/blackberry/camera/IMG-20120804-00252.jpg.
        https://bugzilla.redhat.com/show_bug.cgi?id=846516
  [ 2 ] Bug #848339 - SELinux is preventing /usr/bin/perl from 'read' accesses on the file /var/lightsquid/20120801/.features.
        https://bugzilla.redhat.com/show_bug.cgi?id=848339
  [ 3 ] Bug #855676 - SELinux is preventing /usr/bin/pkcon from 'execute' accesses on the file /usr/bin/pkcon.
        https://bugzilla.redhat.com/show_bug.cgi?id=855676
  [ 4 ] Bug #855684 - SELinux is preventing /usr/bin/python2.7 from 'search' accesses on the directory /root/.local.
        https://bugzilla.redhat.com/show_bug.cgi?id=855684
  [ 5 ] Bug #855685 - SELinux is preventing /usr/bin/zarafa-dagent from using the 'chown' capabilities.
        https://bugzilla.redhat.com/show_bug.cgi?id=855685
  [ 6 ] Bug #860946 - SELinux is preventing /usr/sbin/tmpwatch from read access on the directory /.
        https://bugzilla.redhat.com/show_bug.cgi?id=860946
  [ 7 ] Bug #861778 - SElinux AVC denial for hp-sendfax
        https://bugzilla.redhat.com/show_bug.cgi?id=861778
  [ 8 ] Bug #868946 - SELinux is preventing rpc.idmapd from 'read' accesses on the file /etc/samba/smb.conf.
        https://bugzilla.redhat.com/show_bug.cgi?id=868946
  [ 9 ] Bug #869335 - cupsd_config_t type needs setgid and setuid capabilities
        https://bugzilla.redhat.com/show_bug.cgi?id=869335
  [ 10 ] Bug #872559 - ypbind-1.36-7.fc16 don't start because SELinux problem (search init_var_run_t denied)
        https://bugzilla.redhat.com/show_bug.cgi?id=872559
  [ 11 ] Bug #839191 - SELinux policy doesn't allow freshclam to update through http proxy
        https://bugzilla.redhat.com/show_bug.cgi?id=839191
  [ 12 ] Bug #844784 - SElinux Policy for Spampd
        https://bugzilla.redhat.com/show_bug.cgi?id=844784
  [ 13 ] Bug #844957 - SElinux Policy for SQLgrey
        https://bugzilla.redhat.com/show_bug.cgi?id=844957
--------------------------------------------------------------------------------


================================================================================
 sysstat-10.0.2-3.fc16 (FEDORA-2012-18213)
 The sar and iostat system monitoring commands
--------------------------------------------------------------------------------
Update Information:

This update fixes invalid xml output from sadf -x command.
--------------------------------------------------------------------------------
ChangeLog:

* Wed Nov 14 2012 Peter Schiffer <pschiffe at redhat.com> - 10.0.2-3
- resolves: #859102
  fixed invalid xml output of sadf -x command
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #859102 - sadf -x produces bad xml
        https://bugzilla.redhat.com/show_bug.cgi?id=859102
--------------------------------------------------------------------------------


================================================================================
 taskjuggler-2.4.3-13.fc16 (FEDORA-2012-18216)
 Project management tool
--------------------------------------------------------------------------------
Update Information:

Fix crash when opening invalid file.
--------------------------------------------------------------------------------
ChangeLog:

* Tue Nov 13 2012 Radek Novacek <rnovacek at redhat.com> 2.4.3-13
- Fix crash in FileInfo destructor
- Resolves: #844730
* Mon Jul 23 2012 Radek Novacek <rnovacek at redhat.com> 2.4.3-12
- Fix reading gzipped XMLs
* Sat Jul 21 2012 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 2.4.3-11
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 2.4.3-10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Tue Dec  6 2011 Adam Jackson <ajax at redhat.com> - 2.4.3-9
- Rebuild for new libpng
* Tue Nov 29 2011 Radek Novacek <rnovacek at redhat.com> 2.4.3-8
- Fix BR condition to include rhel
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #844730 - segv on bbad file
        https://bugzilla.redhat.com/show_bug.cgi?id=844730
--------------------------------------------------------------------------------


================================================================================
 wine-1.5.17-1.fc16 (FEDORA-2012-18246)
 A compatibility layer for windows applications
--------------------------------------------------------------------------------
Update Information:


 * Sub-pixel font anti-aliasing in the DIB engine.
 * Support for automatic installation of ActiveX controls.
 * Automatic fallback to TLS 1.0 for secure connections.
 * Beginnings of the DirectWrite text analyzer.
 * Better handling of font outlines in OpenGL.
 * Various bug fixes.

--------------------------------------------------------------------------------
ChangeLog:

* Mon Nov 12 2012 Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
- 1.5.17-1
- version upgrade
- upgraded winepulse
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #871941 - wine 1.5.16 resets sound to alsa and sound is creaking
        https://bugzilla.redhat.com/show_bug.cgi?id=871941
--------------------------------------------------------------------------------


================================================================================
 xen-4.1.3-4.fc16 (FEDORA-2012-18249)
 Xen is a virtual machine monitor
--------------------------------------------------------------------------------
Update Information:

A guest can block a cpu by setting a bad VCPU deadline [XSA 20,
CVE-2012-4535] (#876198)
HVM guest can use invalid pirq values to crash xen [XSA 21, CVE-2012-4536]
(#876200)
HVM guest can exhaust p2m table crashing xen [XSA 22, CVE-2012-4537] (#876203)
PAE HVM guest can crash hypervisor [XSA-23, CVE-2012-4538] (#876205)
32-bit PV guest on 64-bit hypervisor can cause an hypervisor infinite
loop [XSA-24, CVE-2012-4539] (#876207)
--------------------------------------------------------------------------------
ChangeLog:

* Tue Nov 13 2012 Michael Young <m.a.young at durham.ac.uk> - 4.1.3-4
- 5 security fixes
  A guest can block a cpu by setting a bad VCPU deadline [XSA 20,
    CVE-2012-4535] (#876198)
  HVM guest can use invalid pirq values to crash xen [XSA 21, CVE-2012-4536]
    (#876200)
  HVM guest can exhaust p2m table crashing xen [XSA 22, CVE-2012-4537] (#876203)
  PAE HVM guest can crash hypervisor [XSA-23, CVE-2012-4538] (#876205)
  32-bit PV guest on 64-bit hypervisor can cause an hypervisor infinite
    loop [XSA-24, CVE-2012-4539] (#876207)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #870086 - CVE-2012-4535 kernel: xen: VCPU timer overflow leads to PCPU deadlock and host death-by-watchdog
        https://bugzilla.redhat.com/show_bug.cgi?id=870086
  [ 2 ] Bug #870096 - CVE-2012-4536 kernel: xen: PIRQ unmap missing range check causes hypervisor crash
        https://bugzilla.redhat.com/show_bug.cgi?id=870096
  [ 3 ] Bug #870101 - CVE-2012-4537 kernel: xen: Memory mapping failure can crash Xen
        https://bugzilla.redhat.com/show_bug.cgi?id=870101
  [ 4 ] Bug #870106 - CVE-2012-4538 kernel: xen: Unhooking empty PAE entries can crash Xen
        https://bugzilla.redhat.com/show_bug.cgi?id=870106
  [ 5 ] Bug #870110 - CVE-2012-4539 kernel: xen: Grant Table hypercall infinite loop can crash Xen
        https://bugzilla.redhat.com/show_bug.cgi?id=870110
--------------------------------------------------------------------------------


================================================================================
 znc-1.0-1.fc16 (FEDORA-2012-18215)
 An advanced IRC bouncer
--------------------------------------------------------------------------------
Update Information:

Update to ZNC 1.0
--------------------------------------------------------------------------------
ChangeLog:

* Tue Nov 13 2012 Nick Bebout <nb at fedoraproject.org> - 1.0-1
- Update to 1.0
* Thu Oct 18 2012 Nick Bebout <nb at fedoraproject.org> - 1.0-0.2.beta1
- Update to 1.0-beta1
--------------------------------------------------------------------------------



More information about the test mailing list