[SECURITY] Fedora 9 Update: rgmanager-2.03.09-1.fc9

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-9458
2008-11-07 01:35:31
--------------------------------------------------------------------------------

Name        : rgmanager
Product     : Fedora 9
Version     : 2.03.09
Release     : 1.fc9
URL         : http://sources.redhat.com/cluster/wiki/
Summary     : Open Source HA Resource Group Failover for Red Hat Enterprise Linux
Description :
Red Hat Resource Group Manager provides high availability of critical server
applications in the event of planned or unplanned system downtime.

--------------------------------------------------------------------------------
Update Information:

A major code audit did show several unsecure use of /tmp.    This update
addresses those issues across the whole code.
--------------------------------------------------------------------------------
ChangeLog:

* Fri Oct 31 2008 Fabio M. Di Nitto <fdinitto at redhat.com> - 2.03.09-1
- New upstream release
  Fix rhbz#468966
  Addresses several security issues similar to CVE-2008-4192 and
  CVE-2008-4579 after deep code audit from upstream
- cleanup patches to match 2.6.26 kernel in F-9
* Tue Oct 21 2008 Fabio M. Di Nitto <fdinitto at redhat.com> - 2.03.08-1
- New upstream release
  Fix rhbz#460376 CVE-2008-4192
  Fix rhbz#467386 CVE-2008-4579
- cleanup/update patches to match 2.6.26 kernel in F-9
* Thu Aug 14 2008 Fabio M. Di Nitto <fdinitto at redhat.com> - 2.03.07-1
- New upstream release
- Fix rgmanager startup locking issues
- Apply patch to include kernel headers from 2.6.26 required to build
  userland. Userland will run in 2.6.25 compatibility mode
- Apply patch to keep kernel modules at 2.6.25 (upstream is at 2.6.26)
  (this patch is purely cosmetic since we don't build kernel modules
  but keep the source in sync is Good (tm))
- Cleanup packaging for installed docs and file permissions
* Mon Jul 14 2008 Fabio M. Di Nitto <fdinitto at redhat.com> - 2.03.05-1
- New upstream release
- Cleanup installed doc after upstream
* Wed Jun 11 2008 Fabio M. Di Nitto <fdinitto at redhat.com> 2.03.04-1
- New upstream release
- Resolves: #446995 #318271 #447378 #445662
- Update license tags after major upstream cleanup
- Include COPYRIGHT file
* Fri May 30 2008 Fabio M. Di Nitto <fdinitto at redhat.com> - 2.03.03-1
- New upstream release
- Cleanup spec file
- Update Requires to use packages rather than pointing at files
- Update licence tag
- Drop local patches that are now upstream
- Update build section to use standard macros and remove need of kernel heaeders
- Cleanup install target and remove local hacks
- Fix preun section to stop rgmanager
- Cleanup files section to use macros
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #468966 - Possible buffer overflow in cman config loader can lead to memory corruption
        https://bugzilla.redhat.com/show_bug.cgi?id=468966
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update rgmanager' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------