Rebased to version 1.1.3.9

CVE-2015-0236: missing ACL check for the VIR_DOMAIN_XML_SECURE flag in save images and snapshots objects (bz #1185769)
CVE-2014-8136: local denial of service in qemu/qemu_driver.c (bz #1176179)
remotes/origin/f20
Cole Robinson 2015-02-07 21:56:24 -05:00
parent dffbc00050
commit 5754f1817b
2 changed files with 11 additions and 6 deletions

View File

@ -11,7 +11,7 @@
# Default to skipping autoreconf. Distros can change just this one line # Default to skipping autoreconf. Distros can change just this one line
# (or provide a command-line override) if they backport any patches that # (or provide a command-line override) if they backport any patches that
# touch configure.ac or Makefile.am. # touch configure.ac or Makefile.am.
%{!?enable_autotools:%define enable_autotools 1} %{!?enable_autotools:%define enable_autotools 0}
# A client only build will create a libvirt.so only containing # A client only build will create a libvirt.so only containing
# the generic RPC driver, and test driver and no libvirtd # the generic RPC driver, and test driver and no libvirtd
@ -366,7 +366,7 @@
Summary: Library providing a simple virtualization API Summary: Library providing a simple virtualization API
Name: libvirt Name: libvirt
Version: 1.1.3.8 Version: 1.1.3.9
Release: 1%{?dist}%{?extra_release} Release: 1%{?dist}%{?extra_release}
License: LGPLv2+ License: LGPLv2+
Group: Development/Libraries Group: Development/Libraries
@ -1706,7 +1706,7 @@ fi
/sbin/ldconfig /sbin/ldconfig
%if %{with_systemd} %if %{with_systemd}
%if %{with_systemd_macros} %if %{with_systemd_macros}
%systemd_postun_with_restart libvirt-guests.service %systemd_postun libvirt-guests.service
%endif %endif
%triggerun client -- libvirt < 0.9.4 %triggerun client -- libvirt < 0.9.4
%{_bindir}/systemd-sysv-convert --save libvirt-guests >/dev/null 2>&1 ||: %{_bindir}/systemd-sysv-convert --save libvirt-guests >/dev/null 2>&1 ||:
@ -1714,9 +1714,8 @@ fi
# If the package is allowed to autostart: # If the package is allowed to autostart:
/bin/systemctl --no-reload enable libvirt-guests.service >/dev/null 2>&1 ||: /bin/systemctl --no-reload enable libvirt-guests.service >/dev/null 2>&1 ||:
# Run these because the SysV package being removed won't do them # Run this because the SysV package being removed won't do them
/sbin/chkconfig --del libvirt-guests >/dev/null 2>&1 || : /sbin/chkconfig --del libvirt-guests >/dev/null 2>&1 || :
/bin/systemctl try-restart libvirt-guests.service >/dev/null 2>&1 || :
%endif %endif
%if %{with_sanlock} %if %{with_sanlock}
@ -2118,6 +2117,12 @@ fi
%endif %endif
%changelog %changelog
* Sat Feb 07 2015 Cole Robinson <crobinso@redhat.com> - 1.1.3.9-1
- Rebased to version 1.1.3.9
- CVE-2015-0236: missing ACL check for the VIR_DOMAIN_XML_SECURE flag in save
images and snapshots objects (bz #1185769)
- CVE-2014-8136: local denial of service in qemu/qemu_driver.c (bz #1176179)
* Sat Nov 15 2014 Cole Robinson <crobinso@redhat.com> - 1.1.3.8-1 * Sat Nov 15 2014 Cole Robinson <crobinso@redhat.com> - 1.1.3.8-1
- Rebased to version 1.1.3.8 - Rebased to version 1.1.3.8
- CVE-2014-3633: out-of-bounds read in blockiotune (bz #1160823) - CVE-2014-3633: out-of-bounds read in blockiotune (bz #1160823)

View File

@ -1 +1 @@
0f6ac5f7156bafe14641c329ef4dd5ff libvirt-1.1.3.8.tar.gz e345a41ac10324cbb789387381f07564 libvirt-1.1.3.9.tar.gz