fix missing read-only access checks, fixes CVE-2008-5086

daniel
fixing #460510
2008-12-17 16:59:30 +00:00 · 2008-12-12 07:37:16 +00:00 · 2008-12-05 05:38:54 +00:00 · 2008-11-29 16:48:07 +00:00 · 2008-11-26 09:15:42 +00:00 · 2008-11-26 08:50:10 +00:00
5 changed files with 40 additions and 27 deletions
@@ -0,0 +1,8 @@
+.build*.log
+*.rpm
+i686
+x86_64
+libvirt-*.tar.gz
+libvirt-0.4.6.tar.gz
+libvirt-0.5.0.tar.gz
+libvirt-0.5.1.tar.gz
@@ -1,6 +0,0 @@
-.build*.log
-*.rpm
-i686
-x86_64
-libvirt-*.tar.gz
-libvirt-0.4.2.tar.gz
@@ -4,7 +4,7 @@ NAME := libvirt
 SPECFILE = $(firstword $(wildcard *.spec))

 define find-makefile-common
-for d in common ../common ../../common ; do if [ -f $$d/Makefile.common ] ; then if [ -f $$d/CVS/Root -a -w $$d/Makefile.common ] ; then cd $$d ; cvs -Q update ; fi ; echo "$$d/Makefile.common" ; break ; fi ; done
+for d in common ../common ../../common ; do if [ -f $$d/Makefile.common ] ; then if [ -f $$d/CVS/Root -a -w $$/Makefile.common ] ; then cd $$d ; cvs -Q update ; fi ; echo "$$d/Makefile.common" ; break ; fi ; done
 endef

 MAKEFILE_COMMON := $(shell $(find-makefile-common))
@@ -1 +0,0 @@
-F-9
@@ -405,60 +405,72 @@ fi
 %endif

 %changelog
-* Wed Dec 17 2008 Daniel Veillard <veillard@redhat.com> - 0.5.1-2.fc9
+* Wed Dec 17 2008 Daniel Veillard <veillard@redhat.com> - 0.5.1-2.fc11
 - fix missing read-only access checks, fixes CVE-2008-5086

-* Fri Dec  5 2008 Daniel Veillard <veillard@redhat.com> - 0.5.1-1.fc9
+* Fri Dec  5 2008 Daniel Veillard <veillard@redhat.com> - 0.5.1-1.fc11
 - upstream release 0.5.1
 - mostly bugfixes e.g #473071
 - some driver improvments

-* Wed Nov 26 2008 Daniel Veillard <veillard@redhat.com> - 0.5.0-1.fc9
+* Sat Nov 29 2008 Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com> - 0.5.0-2
+- Rebuild for Python 2.6
+
+* Wed Nov 26 2008 Daniel Veillard <veillard@redhat.com> - 0.5.0-1.fc11
 - upstream release 0.5.0
 - domain lifecycle event support
 - node device enumeration
 - KVM/QEmu migration support
 - improved LXC support
 - SDL display configuration
- User Mode Linux driver
+- User Mode Linux driver (Daniel Berrange)

-* Wed Sep 24 2008 Daniel Veillard <veillard@redhat.com> - 0.4.6-2.fc9
- a subtle bug in python submakefile broke the 0.4.6-1.fc9 build #463733
+* Wed Sep 24 2008 Daniel Veillard <veillard@redhat.com> - 0.4.6-3.fc10
+- apply the python makefile patch for #463733

-* Wed Sep 24 2008 Daniel Veillard <veillard@redhat.com> - 0.4.6-1.fc9
+* Wed Sep 24 2008 Daniel Veillard <veillard@redhat.com> - 0.4.6-2.fc10
 - upstream release 0.4.6
- fixes a couple of serious bugs in the previous release
+- fixes some problems with 0.4.5

-* Tue Sep  9 2008 Daniel Veillard <veillard@redhat.com> - 0.4.5-2.fc9
+* Tue Sep  9 2008 Daniel Veillard <veillard@redhat.com> - 0.4.5-2.fc10
 - fix a crash if a QEmu/KVM domain is defined without an emulator path

-* Mon Sep  8 2008 Daniel Veillard <veillard@redhat.com> - 0.4.5-1.fc9
+* Mon Sep  8 2008 Daniel Veillard <veillard@redhat.com> - 0.4.5-1.fc10
 - upstream release 0.4.5
 - a lot of bug fixes
 - major updates to QEmu/KVM and Linux containers drivers
 - support for OpenVZ if installed

-* Tue Jul  8 2008 Daniel P. Berrange <berrange@redhat.com> - 0.4.4-2.fc9
+* Thu Aug  7 2008 Tom "spot" Callaway <tcallawa@redhat.com> - 0.4.4-3.fc10
+- fix license tag
+
+* Tue Jul  8 2008 Daniel P. Berrange <berrange@redhat.com> - 0.4.4-2.fc10
 - Fix booting of CDROM images with KVM (rhbz #452355)

-* Thu Jun 25 2008 Daniel Veillard <veillard@redhat.com> - 0.4.4-1.fc9
- upstream release of 0.4.4
- fixes a few bug in previous release
+* Wed Jun 25 2008 Daniel Veillard <veillard@redhat.com> - 0.4.4-1.fc10
+- upstream release 0.4.4
+- fix a few bugs in previous release

-* Thu Jun 12 2008 Daniel Veillard <veillard@redhat.com> - 0.4.3-1.fc9
+* Thu Jun 12 2008 Daniel Veillard <veillard@redhat.com> - 0.4.3-1.fc10
 - upstream release 0.4.3
 - many bug fixes
 - many small improvements
 - serious xenner fixes

-* Wed Jun  4 2008 Mark McLoughlin <markmc@redhat.com> - 0.4.2-4.fc9
+* Wed Jun  4 2008 Mark McLoughlin <markmc@redhat.com> - 0.4.2-6.fc10
 - Disable lokkit support again (#449996, #447633)
- Ensure PolicyKit is enabled (#446616)
+- Ensure %{fedora} is evaluated correctly

-* Fri May  9 2008 Daniel P. Berrange <berrange@redhat.com> - 0.4.2-3.fc9
+* Thu May 15 2008 Daniel P. Berrange <berrange@redhat.com> - 0.4.2-5.fc10
+- Rebuild with policy enabled (rhbz #446616)
+
+* Fri May  9 2008 Daniel P. Berrange <berrange@redhat.com> - 0.4.2-4.fc10
 - Added directory for initrd/kernel images for SELinux policy

-* Mon Apr 28 2008 Mark McLoughlin <markmc@redhat.com> - 0.4.2-2.fc9
+* Mon Apr 28 2008 Mark McLoughlin <markmc@redhat.com> - 0.4.2-3.fc10
+- Simplify the way arch conditionals are handled
+
+* Mon Apr 28 2008 Mark McLoughlin <markmc@redhat.com> - 0.4.2-2.fc10
 - Enable lokkit support (#443796)

 * Tue Apr  8 2008 Daniel Veillard <veillard@redhat.com> - 0.4.2-1.fc9
Author	SHA1	Message	Date
Daniel Veillard	4a8ca1017f	fix missing read-only access checks, fixes CVE-2008-5086 daniel	2008-12-17 16:59:30 +00:00
Daniel Veillard	1e122ee5dc	fixing #460510	2008-12-12 07:37:16 +00:00
Daniel Veillard	6a6307bcdc	Update to 0.5.1, Daniel	2008-12-05 05:38:54 +00:00
Ignacio Vazquez-Abrams	6e8332946a	Rebuild for Python 2.6	2008-11-29 16:48:07 +00:00
Daniel Veillard	982683e56f	removing old patch now upstream, Daniel	2008-11-26 09:15:42 +00:00
Daniel Veillard	7244d1a339	Upstream release 0.5.0, Daniel	2008-11-26 08:50:10 +00:00
Daniel Veillard	2a3935580c	Fix for #465274 , Daniel	2008-10-02 14:59:55 +00:00
Daniel Veillard	28f7f11450	- apply the python makefile patch for #463733 daniel	2008-09-24 13:34:20 +00:00
Daniel Veillard	ca07bc4597	Try to fix ppc64 build, rev'ing and updating changelog, Daniel	2008-09-24 07:19:01 +00:00
Daniel Veillard	8e23194a2b	Apparently make force-tag doesn't exist anymore, so rev'ing, Daniel	2008-09-24 07:16:32 +00:00
Daniel Veillard	fe09090e2d	Fix a build failure in ppc64 for unpackaged file since without_qemu Daniel	2008-09-24 07:10:11 +00:00
Daniel Veillard	b5868cf8cf	More cleanups, Daniel	2008-09-23 21:27:13 +00:00
Daniel Veillard	f294b40ba5	Upstream release 0.4.6	2008-09-23 21:25:17 +00:00
Daniel Veillard	c0c1a7bb79	Avoid a segfault if missing an emulator, Daniel	2008-09-09 15:02:19 +00:00
Daniel Veillard	1b864048bd	removing old patch, daniel	2008-09-08 16:56:21 +00:00
Daniel Veillard	072c9c45ab	New upstream version, daniel	2008-09-08 16:55:43 +00:00
Tom Callaway	af111679c3	fix license tag	2008-08-07 17:24:05 +00:00
Daniel P. Berrange	dd9f21eaa2	Fix CDROM boot for KVM guests (rhbz #452355 )	2008-07-08 13:10:54 +00:00
Daniel Veillard	f0e356df98	Upstream release 0.4.4	2008-06-25 09:06:35 +00:00
Daniel Veillard	140bcf9ffc	upstream release 0.4.3	2008-06-12 16:27:33 +00:00
Daniel Veillard	af69660412	Upstream release 0.4.3	2008-06-12 16:23:19 +00:00
Mark McLoughlin	6dc94c6252	Ensure %{fedora} is evaluated correctly	2008-06-04 17:49:02 +00:00
Mark McLoughlin	eb34165670	* Wed Jun 4 2008 Mark McLoughlin <markmc@redhat.com> - 0.4.2-6.fc10 - Disable lokkit support again (#449996, #447633)	2008-06-04 17:34:26 +00:00
Daniel P. Berrange	7ce08f2148	Rebuild to fix policykit enablement (rhbz #446616 )	2008-05-15 21:34:28 +00:00
Daniel P. Berrange	049a8c79d9	Added /var/lib/libvirt/boot for kernel/initrd images under SElinux policy	2008-05-09 16:58:53 +00:00
Mark McLoughlin	f7a6d90012	s/--without_qemu/--without-qemu/	2008-04-28 15:58:33 +00:00
Mark McLoughlin	67a2f29a89	* Mon Apr 28 2008 Mark McLoughlin <markmc@redhat.com> - 0.4.2-3.fc10 - Simplify the way arch conditionals are handled	2008-04-28 15:28:24 +00:00
Mark McLoughlin	82422fa1ff	Only include proxy in %files on arches where xen is built	2008-04-28 10:24:38 +00:00
Mark McLoughlin	a73cf1d010	* Mon Apr 28 2008 Mark McLoughlin <markmc@redhat.com> - 0.4.2-2.fc10 - Enable lokkit support (#443796)	2008-04-28 09:20:33 +00:00