4

HVAC and the 2024 Election

The federal government has become much more involved in the HVAC industry. How will the 2024 election affect this trend?




4

Project Files: Episode 45 — New Jersey Cold Storage Warehouse Overhaul

Lineage Logistics recently funded renovations to the refrigeration system at a New Jersey facility, including replacement of an evaporative condenser.




4

The R-410A Condensing Unit Conundrum

EPA is revisiting a rule that would allow R-410A condensing units to be manufactured indefinitely to service existing equipment.




4

2024 Dealer Design Awards: Refrigeration & Ice Machines

The winner is a kit that is a universal, field-mount refrigeration controller with temperature sensors and pressure transducer kit that can be installed up to 40 feet from an air or electric defrost unit cooler.




4

DOE Announces $11.4M to Advance Efficient Drilling for Geothermal Energy

The awardees will focus on early-stage R&D projects exploring innovative technologies for drilling geothermal wells that show the ability to reduce non-drilling time, improve rates of penetration, and identify methods to accelerate the transfer of geothermal drilling and related technologies from the laboratory to the marketplace. 




4

Last Call For R-410A Equipment? Maybe Not

HVAC manufacturers are prepared for the refrigerant transition to A2Ls but are finding that there is still strong demand for R-410A equipment.




4

2024 Top Women in HVAC: Alana Ward

The most rewarding aspects of working in the HVACR field is being able to solve comfort and efficiency issues for homeowners. I love to look back at a job upon completion and say, “Yeah! We did that!”




4

2024 Top Women in HVAC: Kim Starkey

During my time in this industry, I think we’ve done a really good job of adding more women across different fields. Women don’t always think about HVACR, but it’s an industry that needs good leaders just like any other.




4

2024 Top Women in HVAC: Heather Ripley

Women entering the trades as technicians must overcome the perception that they aren’t strong enough or mechanically inclined enough to be a service tech. Even though women have worked in the skilled trades industry for decades, there is still a stigma about women working as HVAC technicians, plumbers, or electricians.




4

2024 Top Women in HVAC: Kelley Raymond

Like anything you really want to achieve, I think bringing more women into this field needs to be an active and purposeful exercise.




4

2024 Top Women in HVAC: Thomasena Philen

I love fixing things. I always have. But what is super exciting to me is the frontier. This field is changing daily, and new technology is everywhere.




4

2024 Top Women in HVAC: Holly Paeper

We don’t have enough women in this industry. The largest challenge is that I still see so many rooms that don’t have diversity that represents the communities we operate in.




4

2024 Top Women in HVAC: Misty Haynes

I aspire to mentor young female professionals in the HVACR space. Especially the women that desire to advance professionally while carrying the load as single parents.




4

2024 Top Women in HVAC: Mary Jo Hann

This is a great industry. We need to keep spreading the word. Features (like this) with such wide readership are a huge help. I think that mentorship and participation in national organizations also provide a camaraderie that many women don’t find in the day-to-day.




4

2024 Top Women in HVAC: Kelsey Fuller

Don’t be affected my any negative feedback or comments you may receive. If you’re passionate about what you do, you will succeed.




4

2024 Top Women in HVAC: Renee Fiorelli

My advice is simple: Don’t be afraid to pursue this industry if you have a passion for it. The HVACR field is full of opportunities, and your technical skills, creativity, and leadership can make a significant impact.




4

2024 Top Women in HVAC: Beth Dischar

I strongly believe that there should be more bold and in-your-face advertising campaigns directed towards women in the trades. This marketing strategy needs to drive it home, to everyone, that there are massive and inclusive employment opportunities in the trades.




4

2024 Top Women in HVAC: Elena Chrimat

Make sure you have some thick skin and don’t take offense to social biases that you’ll eventually run in to. Women can do anything they set their minds to — just set your mind to it and do it.




4

Infographic: Report - 1 in 4 US Commercial Service Contractors Are Implementing AI

67% of contractors see digital transformation as important to their success.




4

2024 Dealer Design Awards: Contractor Services & Software

The gold winner can service, certify, and ship a combustion analyzer the same day it’s received.




4

Luxaire®, a brand of Johnson Controls: Rooftop Unit Line

These products are designed to serve both the new construction and replacement markets.




4

Replacing R-410A in Rooftop Units

This phasedown has been expected for a while, which is why OEMs have been working diligently to identify alternative refrigerants that are safe and efficient.




4

Project Files: Episode 43 — Bull Valley Golf Club RTU Upgrade

With thousands of people visiting every year, Bull Valley needed to address deficiencies within the HVAC system of the 32-year-old clubhouse: in particular, the rooftop units.




4

AAON Receives $174.5 Million in Orders from Data Center

Under these orders, AAON will provide a custom-designed thermal management system supporting a liquid cooling deployment for the customer's data centers.




4

LeakSmart®: Water Flow Monitoring

This product provides water flow analytics and monitors and controls the home’s water activity — from in-wall to appliance leaks.




4

Project Files: Episode 48 — Custom A/C for the Vatican Museums

The Raphael Rooms in the Vatican are universally known as one of the greatest works of art ever created. During a typical summer, temperatures in Rome can soar as high as 104°F. So the decision to install air conditioning in the Raphael Rooms for the first time ever was an easy one.




4

Commercial Cooling Showcase 2024

Commercial cooling equipment manufacturers are introducing HVAC systems that are energy efficient, as well as service friendly for contractors.




4

Project Files: Episode 49 — Downtown Denver Rooftop Replacement

The cooling towers located on the roof of Granite Tower in Denver were meant to last 20 years. But at nearly 40 years, the cooling towers and fluid coolers were well past their life expectancy.




4

2014 AHR Expo: HVAC Commercial Equipment

The NEWS was very busy at the AHR Expo in New York City, visiting as many booths as possible in search of new products. Below is a comprehensive list of all the HVAC commercial equipment we found on the show floor.




4

Commercial Cooling Showcase 2014: New Equipment Just in Time for Summer

It’s time again for the Commercial Cooling Showcase. The NEWS’ annual issue has traditionally introduced the latest air conditioning units available for the upcoming summer season. The intent is to help contractors prepare for this busy period by doing the research that will help them distinguish between brands.




4

Commercial Heating Showcase 2014: New Products Available on the Commercial Market

HVAC manufacturers share their latest heating products — including photos, specifications, warranty info, and more — in this detailed showcase.




4

BasX Solutions Acquires Seasons 4 Clean Room Product Line

BasX Solutions, a manufacturer of custom engineered products including HVAC solutions, announced that it has completed its acquisition of the clean room product line from Seasons 4.




4

How the Federal Infrastructure Bill Still Affects Electric Utilities in 2024

With more than a trillion dollars designated from the Infrastructure Investment and Jobs Act (IIJA) starting to hit the wider economic field, HVAC contractors and the utility industry should be aware of how to cash in.




4

VRF Market Expected to Hit $24B by 2022

Sales of VRF systems continue to rise unabated, leading many to predict their shipments will increase by double digits annually for the foreseeable future.




4

The Best of Extra Edition: May 14, 2018

The NEWS’ Extra Edition page is home to hundreds of online-exclusive service and maintenance, technical, and business management articles. Here are some of the best.




4

The 3-4-5 Rule for Walk-In Coolers And Freezers

During the installation of a new walk-in cooler or freezer, it is imperative the box remain square and level during the assembly of its panels.




4

Xen Security Advisory 464 v2 (CVE-2024-45819) - libxl leaks data to PVH guests via ACPI tables

Posted by Xen . org security team on Nov 12

Xen Security Advisory CVE-2024-45819 / XSA-464
version 2

libxl leaks data to PVH guests via ACPI tables

UPDATES IN VERSION 2
====================

Public release.

ISSUE DESCRIPTION
=================

PVH guests have their ACPI tables constructed by the toolstack. The
construction involves building the tables in local memory, which are
then copied into guest memory. While actually used...




4

Xen Security Advisory 463 v2 (CVE-2024-45818) - Deadlock in x86 HVM standard VGA handling

Posted by Xen . org security team on Nov 12

Xen Security Advisory CVE-2024-45818 / XSA-463
version 2

Deadlock in x86 HVM standard VGA handling

UPDATES IN VERSION 2
====================

Public release.

ISSUE DESCRIPTION
=================

The hypervisor contains code to accelerate VGA memory accesses for HVM
guests, when the (virtual) VGA is in "standard" mode. Locking involved
there has an unusual discipline, leaving...




4

CVE-2024-50386: Apache CloudStack: Directly downloaded templates can be used to abuse KVM-based infrastructure

Posted by Daniel Augusto Veronezi Salvador on Nov 12

Severity: important

Affected versions:

- Apache CloudStack 4.0.0 through 4.18.2.4
- Apache CloudStack 4.19.0.0 through 4.19.1.2

Description:

Account users in Apache CloudStack by default are allowed to register templates to be downloaded directly to the
primary storage for deploying instances. Due to missing validation checks for KVM-compatible templates in CloudStack
4.0.0 through 4.18.2.4 and 4.19.0.0 through 4.19.1.2, an attacker that...




4

Re: CVE-2024-36905: Linux kernel: Divide-by-zero on shutdown of TCP_SYN_RECV sockets

Posted by Solar Designer on Nov 12

NIST doesn't appear to provide their own CVSS vectors/scores lately.
However, they republish (with attribution) some third-party ones, this
time from CISA-ADP. The CISA-ADP CVSS vector for this vulnerability
specifies that it not only is network-reachable, but also that it has
High impact not only on Availability, but also on Confidentiality and
Integrity. This results in a CVSSv3.1 score of 9.8. Even merely
correcting the vector not to...




4

Re: CVE-2024-36905: Linux kernel: Divide-by-zero on shutdown of TCP_SYN_RECV sockets

Posted by Clemens Lang on Nov 12

Hi,

I think the source for the CISA-ADP data is at [1]. For this specific CVE, the relevant file would be [2]. Their readme
has a section at the bottom, where they encourage feedback:

I’m aware of at last one prior case where a similar case of (IMHO) overblown CVSS scores was discussed in an issue on
this particular GitHub project [3].

Somebody seems to already have opened a ticket for this CVE, too: [4]

[1]:...




4

RE: CVE-2024-36905: Linux kernel: Divide-by-zero on shutdown of TCP_SYN_RECV sockets

Posted by Joel GUITTET on Nov 12

Hello
First thanks to Alexander for reposting because I was not able to do so!
You're right Clemens, I have myself ask the question on this github
(https://github.com/cisagov/vulnrichment/issues/130), but still no information for the moment.
Joel




4

Re: Xen Security Advisory 464 v2 (CVE-2024-45819) - libxl leaks data to PVH guests via ACPI tables

Posted by Andrew Cooper on Nov 12

Data are leaked into the PVShim guest, but it is the shim Xen
(exclusively) which has access to the ACPI tables.

The guest which has been shim'd can't architecturally access the leaked
data.

~Andrew





4

Re: Xen Security Advisory 464 v2 (CVE-2024-45819) - libxl leaks data to PVH guests via ACPI tables

Posted by Demi Marie Obenour on Nov 12

Is this unconditional (perhaps because the relevant data gets zeroed out
by the shim), or does it only apply when the PV guest can't extract data
from the shim's memory? For instance, 32-bit PV guests aren't security
supported anymore, but the PV shim isn't supposed to rely on the
security of the shim itself, only of the rest of the system.




4

CVE-2024-52533: Buffer overflow in socks proxy code in glib < 2.82.1

Posted by Alan Coopersmith on Nov 12

Another CVE was issued by Mitre yesterday for another bug listed on
https://gitlab.gnome.org/Teams/Releng/security/-/wikis/home

https://gitlab.gnome.org/GNOME/glib/-/issues/3461 reports that:
"set_connect_msg() receives a buffer of size SOCKS4_CONN_MSG_LEN but it writes
up to SOCKS4_CONN_MSG_LEN + 1 bytes to it. This is because SOCKS4_CONN_MSG_LEN
doesn't account for the trailing nul character that set_connect_msg() appends...




4

Luxaire® Unitary Products: Package Equipment

This series of residential package equipment features energy-saving performance as well as cost-effective installation and maintenance.




4

Snort Subscriber Rules Update 2024-10-10

Posted by Research via Snort-sigs on Oct 10

Talos Snort Subscriber Rules Update

Synopsis:
This release adds and modifies rules in several categories.

Details:
Talos has added and modified multiple rules in the malware-cnc and
server-webapp rule sets to provide coverage for emerging threats from
these technologies.

For a complete list of new and modified rules please see:

https://www.snort.org/advisories




4

Snort Subscriber Rules Update 2024-10-15

Posted by Research via Snort-sigs on Oct 15

Talos Snort Subscriber Rules Update

Synopsis:
This release adds and modifies rules in several categories.

Details:
Talos has added and modified multiple rules in the file-image,
malware-cnc, malware-other, os-windows and server-mail rule sets to
provide coverage for emerging threats from these technologies.

For a complete list of new and modified rules please see:

https://www.snort.org/advisories




4

Snort Subscriber Rules Update 2024-10-17

Posted by Research via Snort-sigs on Oct 17

Talos Snort Subscriber Rules Update

Synopsis:
This release adds and modifies rules in several categories.

Details:
Talos has added and modified multiple rules in the policy-other and
server-webapp rule sets to provide coverage for emerging threats from
these technologies.

For a complete list of new and modified rules please see:

https://www.snort.org/advisories