Bug 966817
| Summary: | CVE-2013-1990 CVE-2013-1999 libXvMC various flaws [fedora-all] | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Huzaifa S. Sidhpurwala <huzaifas> |
| Component: | libXvMC | Assignee: | Søren Sandmann Pedersen <sandmann> |
| Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | 18 | CC: | kem, peter.hutterer, sandmann, thoger |
| Target Milestone: | --- | Keywords: | Reopened, Security, SecurityTracking |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | libXvMC-1.0.8-1.fc19 | Doc Type: | Release Note |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2013-06-03 03:04:26 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 959070, 960347 | ||
|
Description
Huzaifa S. Sidhpurwala
2013-05-24 03:48:53 UTC
Please use the following update submission link to create the Bodhi request for this issue as it contains the top-level parent bug(s) as well as this tracking bug. This will ensure that all associated bugs get updated when new packages are pushed to stable. Please also ensure that the "Close bugs when update is stable" option remains checked. Bodhi update submission link: https://admin.fedoraproject.org/updates/new/?type_=security&bugs=959070,966817 Adding parent bug CVE-2013-1999. Please use this new bodhi update url when correcting these flaws: https://admin.fedoraproject.org/updates/new/?type_=security&bugs=966817,959070,960347 libXvMC-1.0.7-5.20130524gite9415ddef.fc19 has been submitted as an update for Fedora 19. https://admin.fedoraproject.org/updates/libXvMC-1.0.7-5.20130524gite9415ddef.fc19 libXvMC-1.0.7-5.20130524gite9415ddef.fc18 has been submitted as an update for Fedora 18. https://admin.fedoraproject.org/updates/libXvMC-1.0.7-5.20130524gite9415ddef.fc18 libXvMC-1.0.7-6.20130524gite9415ddef.fc18 has been submitted as an update for Fedora 18. https://admin.fedoraproject.org/updates/libXvMC-1.0.7-6.20130524gite9415ddef.fc18 libXvMC-1.0.7-6.20130524gite9415ddef.fc19 has been submitted as an update for Fedora 19. https://admin.fedoraproject.org/updates/libXvMC-1.0.7-6.20130524gite9415ddef.fc19 Package libXvMC-1.0.7-6.20130524gite9415ddef.fc19: * should fix your issue, * was pushed to the Fedora 19 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing libXvMC-1.0.7-6.20130524gite9415ddef.fc19' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2013-9099/libXvMC-1.0.7-6.20130524gite9415ddef.fc19 then log in and leave karma (feedback). libXvMC-1.0.7-6.20130524gite9415ddef.fc19 has been pushed to the Fedora 19 stable repository. If problems still persist, please make note of it in this bug report. Re-opening, as it seems we should pick up the fix for regression introduced in the upstream patch, see bug 960347 comment 5. Tomas: 1.0.7-6 already includes those fixes. libXvMC-1.0.7-6.20130524gite9415ddef.fc18 has been pushed to the Fedora 18 stable repository. If problems still persist, please make note of it in this bug report. (In reply to Peter Hutterer from comment #10) > Tomas: 1.0.7-6 already includes those fixes. Ah, ok, I see the update commit failed to update gitversion in the spec file, which is why NVR still indicates unfixed version (e9415ddef): http://pkgs.fedoraproject.org/cgit/libXvMC.git/commit/?id=7d90d001e21fd2e636c8a93dc707843013f481d3 http://pkgs.fedoraproject.org/cgit/libXvMC.git/commit/?id=3525c4458a1a70c4da7b096b837cccc65537e0e2 libXvMC-1.0.8-1.fc19 has been submitted as an update for Fedora 19. https://admin.fedoraproject.org/updates/libXvMC-1.0.8-1.fc19 libXvMC-1.0.8-1.fc19 has been pushed to the Fedora 19 stable repository. If problems still persist, please make note of it in this bug report. |