[SECURITY] Fedora 9 Update: cman-2.03.08-1.fc9
updates at fedoraproject.org
updates at fedoraproject.org
Thu Oct 23 16:36:13 UTC 2008
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-9042
2008-10-23 16:01:35
--------------------------------------------------------------------------------
Name : cman
Product : Fedora 9
Version : 2.03.08
Release : 1.fc9
URL : http://sources.redhat.com/cluster/wiki/
Summary : CMAN - The Cluster Manager
Description :
CMAN - The Cluster Manager
--------------------------------------------------------------------------------
Update Information:
This update includes security fixes for: CVE-2008-4192 CVE-2008-4579
among many other upstream bug fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 21 2008 Fabio M. Di Nitto <fdinitto at redhat.com> - 2.03.08-1
- New upstream release
Fix rhbz#460376 CVE-2008-4192
Fix rhbz#467386 CVE-2008-4579
- cleanup/update patches to match 2.6.26 kernel in F-9
- add /var/log/cluster to the package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #460476 - CVE-2008-4192 cman/fence: insecure temporary file usage in the egenera fence agent
https://bugzilla.redhat.com/show_bug.cgi?id=460476
[ 2 ] Bug #467386 - CVE-2008-4579 cman/fence: insecure temporary file usage in the apc fence agents
https://bugzilla.redhat.com/show_bug.cgi?id=467386
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update cman' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
More information about the Fedora-package-announce
mailing list