fedora-security/audit fc6, 1.286, 1.287 fc7, 1.159, 1.160
by fedora-security-commits@redhat.com
Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv8509/audit
Modified Files:
fc6 fc7
Log Message:
liferea
Index: fc6
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc6,v
retrieving revision 1.286
retrieving revision 1.287
diff -u -r1.286 -r1.287
--- fc6 31 Oct 2007 15:54:32 -0000 1.286
+++ fc6 31 Oct 2007 17:37:03 -0000 1.287
@@ -4,7 +4,7 @@
# *CVE are items that need verification for Fedora Core 6
# (mozilla) = (firefox, seamonkey, thunderbird, yelp, devhelp, galeon, liferea. epiphany)
-# Up to date CVE as of CVE email 20071015
+# Up to date CVE as of CVE email 20071030
# Up to date FC6 as of 20071029
CVE-2007-5461 VULNERABLE (tomcat5) #334521
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.159
retrieving revision 1.160
diff -u -r1.159 -r1.160
--- fc7 31 Oct 2007 15:54:32 -0000 1.159
+++ fc7 31 Oct 2007 17:37:03 -0000 1.160
@@ -5,9 +5,10 @@
# (mozilla) = (firefox, seamonkey, thunderbird, yelp, devhelp, galeon, liferea. epiphany)
# A couple of first F7 updates were marked as FEDORA-2007-0001
-# Up to date CVE as of CVE email 20071015
+# Up to date CVE as of CVE email 20071030
# Up to date FC7 as of 20071029
+CVE-2007-5751 VULNERABLE (liferea, fixed 1.4.6) #360641
CVE-2007-5728 version (phpPgAdmin) seems to be fixed for some time
CVE-2007-5715 backport (denyhosts) fixed long ago
CVE-2007-5712 VULNERABLE (Django, fixed 0.96.1) #357051
16 years, 5 months
fedora-security/audit fc6, 1.285, 1.286 fc7, 1.158, 1.159
by fedora-security-commits@redhat.com
Author: lkundrak
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv21236
Modified Files:
fc6 fc7
Log Message:
Tomcat5
Index: fc6
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc6,v
retrieving revision 1.285
retrieving revision 1.286
diff -u -r1.285 -r1.286
--- fc6 30 Oct 2007 17:10:19 -0000 1.285
+++ fc6 31 Oct 2007 15:54:32 -0000 1.286
@@ -7,6 +7,7 @@
# Up to date CVE as of CVE email 20071015
# Up to date FC6 as of 20071029
+CVE-2007-5461 VULNERABLE (tomcat5) #334521
CVE-2007-5340 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5
CVE-2007-5339 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5
CVE-2007-5338 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.158
retrieving revision 1.159
diff -u -r1.158 -r1.159
--- fc7 31 Oct 2007 14:43:17 -0000 1.158
+++ fc7 31 Oct 2007 15:54:32 -0000 1.159
@@ -24,6 +24,7 @@
CVE-2007-5589 VULNERABLE (phpmyadmin, fixed 2.11.1.2) #333661 PMASA-2007-6
CVE-2007-5585 backport (rss-glx) #336331 [since FEDORA-2007-2652]
CVE-2007-5585 backport (tempest) #336331 [since FEDORA-2007-2652]
+CVE-2007-5461 VULNERABLE (tomcat5) #334511 #334531
CVE-2007-5416 ignore (drupal) Vulnerability in PHP<5.1.3, we're safe
CVE-2007-5386 VULNERABLE (phpmyadmin, fixed 2.11.1.1) #333661 PMASA-2007-5
CVE-2007-5340 version (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 [since FEDORA-2007-2664]
16 years, 5 months
fedora-security/audit fc7,1.157,1.158
by fedora-security-commits@redhat.com
Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv10488/audit
Modified Files:
fc7
Log Message:
some issue from cve mail
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.157
retrieving revision 1.158
diff -u -r1.157 -r1.158
--- fc7 30 Oct 2007 17:10:19 -0000 1.157
+++ fc7 31 Oct 2007 14:43:17 -0000 1.158
@@ -8,7 +8,11 @@
# Up to date CVE as of CVE email 20071015
# Up to date FC7 as of 20071029
-CVE-NOID VULNERABLE (Django) #357051
+CVE-2007-5728 version (phpPgAdmin) seems to be fixed for some time
+CVE-2007-5715 backport (denyhosts) fixed long ago
+CVE-2007-5712 VULNERABLE (Django, fixed 0.96.1) #357051
+CVE-2007-5708 VULNERABLE (openldap, fixed 2.3.39) #360081
+CVE-2007-5707 VULNERABLE (openldap, fixed 2.3.39) #360081
CVE-2007-5626 ignore (bacula) known, documented limitation
CVE-2007-5624 VULNERABLE (nagios, fixed 2.10) #349011
CVE-2007-5623 VULNERABLE (nagios-plugins) #348731
16 years, 5 months
fedora-security/audit fc6, 1.284, 1.285 fc7, 1.156, 1.157
by fedora-security-commits@redhat.com
Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv30603/audit
Modified Files:
fc6 fc7
Log Message:
fedora updates
Index: fc6
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc6,v
retrieving revision 1.284
retrieving revision 1.285
diff -u -r1.284 -r1.285
--- fc6 29 Oct 2007 12:38:04 -0000 1.284
+++ fc6 30 Oct 2007 17:10:19 -0000 1.285
@@ -5,7 +5,7 @@
# (mozilla) = (firefox, seamonkey, thunderbird, yelp, devhelp, galeon, liferea. epiphany)
# Up to date CVE as of CVE email 20071015
-# Up to date FC6 as of 20071025
+# Up to date FC6 as of 20071029
CVE-2007-5340 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5
CVE-2007-5339 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.156
retrieving revision 1.157
diff -u -r1.156 -r1.157
--- fc7 29 Oct 2007 18:17:05 -0000 1.156
+++ fc7 30 Oct 2007 17:10:19 -0000 1.157
@@ -6,7 +6,7 @@
# A couple of first F7 updates were marked as FEDORA-2007-0001
# Up to date CVE as of CVE email 20071015
-# Up to date FC7 as of 20071025
+# Up to date FC7 as of 20071029
CVE-NOID VULNERABLE (Django) #357051
CVE-2007-5626 ignore (bacula) known, documented limitation
@@ -57,7 +57,7 @@
CVE-2007-4993 backport (xen) [since FEDORA-2007-2270]
CVE-2007-4990 VULNERABLE (xorg-x11-xfs, fixed 1.0.5)
CVE-2007-4974 backport (libsndfile) #296221 [since FEDORA-2007-2236]
-CVE-2007-4965 VULNERABLE (python) imageop module heap overflow
+CVE-2007-4965 backport (python) imageop module heap overflow [since FEDORA-2007-2663]
CVE-2007-4924 version (opal, fixed 2.2.10) #297551 [since FEDORA-2007-2245]
CVE-2007-4897 version (opal, fixed 2.2.9)
CVE-2007-4894 version (wordpress, fixed 2.2.3) [since FEDORA-2007-2143]
@@ -100,6 +100,8 @@
CVE-2007-4533 backport (vavoom) #256621 [since FEDORA-2007-1977]
CVE-2007-4532 backport (vavoom) #256621 [since FEDORA-2007-1977]
CVE-2007-4510 version (clamav, fixed 0.91.2) #253780 [since FEDORA-2007-2050]
+CVE-2007-4476 VULNERABLE (cpio)
+CVE-2007-4476 backport (tar) [since FEDORA-2007-2673]
CVE-2007-4465 version (httpd) [since FEDORA-2007-2214]
CVE-2007-4462 version (po4a) #253541 [since FEDORA-2007-1763]
CVE-2007-4460 backport (id3lib) #253553 [since FEDORA-2007-1774]
@@ -278,7 +280,7 @@
*CVE-2007-2452 ** (locate)
CVE-2007-2450 VULNERABLE (tomcat5) #244810
CVE-2007-2449 VULNERABLE (tomcat5) #244810
-CVE-2007-2448 VULNERABLE (subversion, fixed 1.4.4) #243856
+CVE-2007-2448 version (subversion, fixed 1.4.4) #243856 [since FEDORA-2007-2635]
*CVE-2007-2447 ** (samba)
*CVE-2007-2446 ** (samba)
CVE-2007-2445 version (libpng10, fixed 1.0.25) #240398
16 years, 5 months
fedora-security/audit fc7, 1.155, 1.156 fe6, 1.133, 1.134
by fedora-security-commits@redhat.com
Author: scop
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv20115
Modified Files:
fc7 fe6
Log Message:
Django i18n DoS
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.155
retrieving revision 1.156
diff -u -r1.155 -r1.156
--- fc7 29 Oct 2007 12:38:04 -0000 1.155
+++ fc7 29 Oct 2007 18:17:05 -0000 1.156
@@ -8,6 +8,7 @@
# Up to date CVE as of CVE email 20071015
# Up to date FC7 as of 20071025
+CVE-NOID VULNERABLE (Django) #357051
CVE-2007-5626 ignore (bacula) known, documented limitation
CVE-2007-5624 VULNERABLE (nagios, fixed 2.10) #349011
CVE-2007-5623 VULNERABLE (nagios-plugins) #348731
Index: fe6
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fe6,v
retrieving revision 1.133
retrieving revision 1.134
diff -u -r1.133 -r1.134
--- fe6 24 Aug 2007 10:27:37 -0000 1.133
+++ fe6 29 Oct 2007 18:17:05 -0000 1.134
@@ -2,6 +2,7 @@
** are items that need attention
+CVE-NOID VULNERABLE (Django) #357051
CVE-2007-4510 VULNERABLE (clamav, 0.91.2) #253780
CVE-2007-3950 version (lighttpd, fixed 1.4.16) #249162
CVE-2007-3949 version (lighttpd, fixed 1.4.16) #249162
16 years, 5 months
fedora-security/audit fc6, 1.283, 1.284 fc7, 1.154, 1.155
by fedora-security-commits@redhat.com
Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv16700/audit
Modified Files:
fc6 fc7
Log Message:
xen issue
fedora updates
Index: fc6
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc6,v
retrieving revision 1.283
retrieving revision 1.284
diff -u -r1.283 -r1.284
--- fc6 24 Oct 2007 12:25:12 -0000 1.283
+++ fc6 29 Oct 2007 12:38:04 -0000 1.284
@@ -5,7 +5,7 @@
# (mozilla) = (firefox, seamonkey, thunderbird, yelp, devhelp, galeon, liferea. epiphany)
# Up to date CVE as of CVE email 20071015
-# Up to date FC6 as of 20071017
+# Up to date FC6 as of 20071025
CVE-2007-5340 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5
CVE-2007-5339 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5
@@ -72,6 +72,7 @@
CVE-2007-3962 ignore (gftp) multiple buffer overflows in fsplib, not on Linux
CVE-2007-3961 ignore (gftp) off-by-one error in fsplib
CVE-2007-3920 VULNERABLE (gnome-screensaver) #350271
+CVE-2007-3919 VULNERABLE (xen)
CVE-2007-3852 backport (sysstat) #252296 [since FEDORA-2007-675]
CVE-2007-3848 version (kernel) [since FEDORA-2007-679]
CVE-2007-3847 version (httpd) #250756 [since FEDORA-2007-707]
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.154
retrieving revision 1.155
diff -u -r1.154 -r1.155
--- fc7 25 Oct 2007 07:34:05 -0000 1.154
+++ fc7 29 Oct 2007 12:38:04 -0000 1.155
@@ -6,28 +6,29 @@
# A couple of first F7 updates were marked as FEDORA-2007-0001
# Up to date CVE as of CVE email 20071015
-# Up to date FC7 as of 20071017
+# Up to date FC7 as of 20071025
CVE-2007-5626 ignore (bacula) known, documented limitation
CVE-2007-5624 VULNERABLE (nagios, fixed 2.10) #349011
CVE-2007-5623 VULNERABLE (nagios-plugins) #348731
-CVE-2007-5597 VULNERABLE (drupal, fixed 5.3)
-CVE-2007-5596 VULNERABLE (drupal, fixed 5.3)
-CVE-2007-5595 VULNERABLE (drupal, fixed 5.3)
-CVE-2007-5594 VULNERABLE (drupal, fixed 5.3)
-CVE-2007-5593 VULNERABLE (drupal, fixed 5.3)
+CVE-2007-5597 version (drupal, fixed 5.3) [since FEDORA-2007-2649]
+CVE-2007-5596 version (drupal, fixed 5.3) [since FEDORA-2007-2649]
+CVE-2007-5595 version (drupal, fixed 5.3) [since FEDORA-2007-2649]
+CVE-2007-5594 version (drupal, fixed 5.3) [since FEDORA-2007-2649]
+CVE-2007-5593 version (drupal, fixed 5.3) [since FEDORA-2007-2649]
CVE-2007-5589 VULNERABLE (phpmyadmin, fixed 2.11.1.2) #333661 PMASA-2007-6
-CVE-2007-5585 (tempest) #336331
+CVE-2007-5585 backport (rss-glx) #336331 [since FEDORA-2007-2652]
+CVE-2007-5585 backport (tempest) #336331 [since FEDORA-2007-2652]
CVE-2007-5416 ignore (drupal) Vulnerability in PHP<5.1.3, we're safe
CVE-2007-5386 VULNERABLE (phpmyadmin, fixed 2.11.1.1) #333661 PMASA-2007-5
-CVE-2007-5340 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5
-CVE-2007-5339 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5
-CVE-2007-5338 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5
-CVE-2007-5337 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5
-CVE-2007-5335 VULNERABLE (mozilla) ff 2.0.0.8, does not affect ff1.5
-CVE-2007-5334 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5
-CVE-2007-5269 VULNERABLE (libpng10) update pending
-CVE-2007-5269 VULNERABLE (libpng, fixed 1.2.21) #337461
+CVE-2007-5340 version (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 [since FEDORA-2007-2664]
+CVE-2007-5339 version (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 [since FEDORA-2007-2664]
+CVE-2007-5338 version (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 [since FEDORA-2007-2664]
+CVE-2007-5337 version (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 [since FEDORA-2007-2664]
+CVE-2007-5335 version (mozilla) ff 2.0.0.8, does not affect ff1.5 [since FEDORA-2007-2664]
+CVE-2007-5334 version (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 [since FEDORA-2007-2664]
+CVE-2007-5269 version (libpng10) [since FEDORA-2007-2521]
+CVE-2007-5269 version (libpng, fixed 1.2.21) #337461 [since FEDORA-2007-2666]
CVE-2007-5268 ignore (libpng) shipped version too old and not affected
CVE-2007-5267 ignore (libpng) shipped version too old and not affected
CVE-2007-5266 ignore (libpng) shipped version too old and not affected
@@ -140,6 +141,7 @@
CVE-2007-3948 version (lighttpd, fixed 1.4.16) #249162 [since FEDORA-2007-1299]
CVE-2007-3947 version (lighttpd, fixed 1.4.16) #249162 [since FEDORA-2007-1299]
CVE-2007-3946 version (lighttpd, fixed 1.4.16) #249162 [since FEDORA-2007-1299]
+CVE-2007-3919 VULNERABLE (xen)
CVE-2007-3917 version (wesnoth, fixed 1.2.7) #324841 [since FEDORA-2007-2496]
CVE-2007-3848 version (kernel) [since FEDORA-2007-1785]
CVE-2007-3847 version (httpd) #250755 [since FEDORA-2007-2214]
@@ -169,7 +171,7 @@
CVE-2007-3528 version (dar, fixed 2.3.4) #246760 [since FEDORA-2007-0904]
CVE-2007-3544 VULNERABLE (wordpress, NOT fixed 2.2.1) #245211 Incomplete fix for CVE-2007-3543
CVE-2007-3543 version (wordpress, fixed 2.2.1) #245211 [since FEDORA-2007-0894]
-CVE-2007-3511 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5
+CVE-2007-3511 version (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 [since FEDORA-2007-2664]
CVE-2007-3508 ignore (glibc) not an issue
CVE-2007-3506 version (freetype, fixed 2.3.4) #235479 [since FEDORA-2007-0033]
CVE-2007-3507 version (flac123, fixed 0.0.10) #246322 [since FEDORA-2007-1045]
@@ -290,7 +292,7 @@
CVE-2007-2381 ignore (MochiKit) #238616
*CVE-2007-2356 ** (gimp)
*CVE-2007-2353 ** (axis)
-CVE-2007-2292 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5
+CVE-2007-2292 version (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 [since FEDORA-2007-2664]
*CVE-2007-2245 VULNERABLE (phpMyAdmin, fixed 2.10.1) #237882
CVE-2007-2243 ignore (openssh, fixed 4.6) needs S/KEY support which is not shipped.
CVE-2007-2241 backport (bind) [since FEDORA-2007-0300]
@@ -411,7 +413,7 @@
*CVE-2007-1218 backport (tcpdump) 232349 [since FEDORA-2007-347]
CVE-2007-1216 version (krb5, fixed 1.6-3) #231537
*CVE-2007-1103 VULNERABLE (tor) #230927
-CVE-2007-1095 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5
+CVE-2007-1095 version (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 [since FEDORA-2007-2664]
CVE-2007-1092 version (seamonkey, fixed 1.0.8)
CVE-2007-1055 version (mediawiki, fixed 1.8.3)
CVE-2007-1054 version (mediawiki, fixed 1.9.3) [since FEDORA-2007-1442]
@@ -431,7 +433,7 @@
CVE-2007-0996 version (seamonkey, fixed 1.0.8)
CVE-2007-0995 version (seamonkey, fixed 1.0.8)
CVE-2007-0988 version (php, fixed 5.2.1)
-CVE-2007-0981 VULNERABLE (mozilla)
+CVE-2007-0981 version (mozilla)
CVE-2007-0981 version (seamonkey, fixed 1.0.8) #229253
CVE-2007-0957 backport (krb5, fixed 1.6-3) #231528
CVE-2007-0956 backport (krb5, fixed 1.6-3) #229782
16 years, 5 months
fedora-security/tools suidaudit,NONE,1.1
by fedora-security-commits@redhat.com
Author: lkundrak
Update of /cvs/fedora/fedora-security/tools
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv11548
Added Files:
suidaudit
Log Message:
What SetUID and SetGID files do we have in our packages
***** Error reading new file: [Errno 2] No such file or directory: 'suidaudit'
16 years, 5 months
fedora-security/audit fc7,1.153,1.154
by fedora-security-commits@redhat.com
Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv22479/audit
Modified Files:
fc7
Log Message:
pidgin crash - updated packages already built
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.153
retrieving revision 1.154
diff -u -r1.153 -r1.154
--- fc7 24 Oct 2007 12:25:12 -0000 1.153
+++ fc7 25 Oct 2007 07:34:05 -0000 1.154
@@ -49,6 +49,7 @@
CVE-2007-5034 version (elinks) #297981 [since FEDORA-2007-2224]
CVE-2007-5007 VULNERABLE (balsa) #297601
GENERIC-MAP-NOMATCH VULNERABLE (nx) #293031
+CVE-2007-4999 VULNERABLE (pidgin, fixed 2.2.2)
CVE-2007-4996 version (pidgin, fixed 2.2.1) [since FEDORA-2007-2368]
CVE-2007-4995 backport (openssl, fixed 0.9.8f) [since FEDORA-2007-2530]
CVE-2007-4993 backport (xen) [since FEDORA-2007-2270]
16 years, 5 months
fedora-security/audit fc6, 1.282, 1.283 fc7, 1.152, 1.153
by fedora-security-commits@redhat.com
Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv27121/audit
Modified Files:
fc6 fc7
Log Message:
compact mozilla issues
Index: fc6
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc6,v
retrieving revision 1.282
retrieving revision 1.283
diff -u -r1.282 -r1.283
--- fc6 24 Oct 2007 10:51:07 -0000 1.282
+++ fc6 24 Oct 2007 12:25:12 -0000 1.283
@@ -7,21 +7,12 @@
# Up to date CVE as of CVE email 20071015
# Up to date FC6 as of 20071017
-CVE-2007-5340 VULNERABLE (firefox, fixed 2.0.0.8)
-CVE-2007-5340 VULNERABLE (thunderbird, fixed 2.0.0.6)
-CVE-2007-5340 VULNERABLE (seamonkey, fixed 1.1.5)
-CVE-2007-5339 VULNERABLE (firefox, fixed 2.0.0.8)
-CVE-2007-5339 VULNERABLE (thunderbird, fixed 2.0.0.6)
-CVE-2007-5339 VULNERABLE (seamonkey, fixed 1.1.5)
-CVE-2007-5338 VULNERABLE (firefox, fixed 2.0.0.8)
-CVE-2007-5338 VULNERABLE (thunderbird, fixed 2.0.0.6)
-CVE-2007-5338 VULNERABLE (seamonkey, fixed 1.1.5)
-CVE-2007-5337 VULNERABLE (firefox, fixed 2.0.0.8)
-CVE-2007-5337 VULNERABLE (thunderbird, fixed 2.0.0.6)
-CVE-2007-5337 VULNERABLE (seamonkey, fixed 1.1.5)
-CVE-2007-5334 VULNERABLE (firefox, fixed 2.0.0.8)
-CVE-2007-5334 VULNERABLE (thunderbird, fixed 2.0.0.6)
-CVE-2007-5334 VULNERABLE (seamonkey, fixed 1.1.5)
+CVE-2007-5340 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5
+CVE-2007-5339 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5
+CVE-2007-5338 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5
+CVE-2007-5337 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5
+CVE-2007-5335 ignore (mozilla) ff2 only
+CVE-2007-5334 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5
CVE-2007-5269 VULNERABLE (libpng, fixed 1.2.21) #337471
CVE-2007-5268 ignore (libpng) shipped version too old and not affected
CVE-2007-5267 ignore (libpng) shipped version too old and not affected
@@ -95,9 +86,7 @@
CVE-2007-3781 VULNERABLE (mysql, fixed 5.0.44)
CVE-2007-3780 VULNERABLE (mysql, fixed 5.0.44)
CVE-2007-3642 version (kernel, fixed 2.6.22) [since FEDORA-2007-655]
-CVE-2007-3511 VULNERABLE (firefox, fixed 2.0.0.8)
-CVE-2007-3511 VULNERABLE (thunderbird, fixed 2.0.0.6)
-CVE-2007-3511 VULNERABLE (seamonkey, fixed 1.1.5)
+CVE-2007-3511 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5
CVE-2007-3508 ignore (glibc) not an issue
CVE-2007-3506 backport (freetype, fixed 2.3.4) #235479 [since FEDORA-2007-561]
CVE-2007-3478 version (gd, fixed 2.0.35) #277421 [since FEDORA-2007-692]
@@ -148,9 +137,7 @@
CVE-2007-2451 version (kernel, fixed 2.6.21.4) [since FEDORA-2007-600]
CVE-2007-2445 backport (libpng) #239542 [since FEDORA-2007-529]
CVE-2007-2438 version (vim, fixed 7.0.235) #238734 [since FEDORA-2007-492]
-CVE-2007-2292 VULNERABLE (firefox, fixed 2.0.0.8)
-CVE-2007-2292 VULNERABLE (thunderbird, fixed 2.0.0.6)
-CVE-2007-2292 VULNERABLE (seamonkey, fixed 1.1.5)
+CVE-2007-2292 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5
CVE-2007-2242 version (kernel) [since FEDORA-2007-482]
CVE-2007-2138 version (postgresql, fixed 8.1.9) [since FEDORA-2007-565]
CVE-2007-2028 backport (freeradius) [since FEDORA-2007-499]
@@ -185,9 +172,7 @@
CVE-2007-1263 version (gnupg, fixed 1.4.7) [since FEDORA-2007-315]
CVE-2007-1262 version (squirrelmail, fixed 1.4.10a) #239704 [since FEDORA-2007-505]
CVE-2007-1218 backport (tcpdump) 232349 [since FEDORA-2007-347]
-CVE-2007-1095 VULNERABLE (firefox, fixed 2.0.0.8)
-CVE-2007-1095 VULNERABLE (thunderbird, fixed 2.0.0.6)
-CVE-2007-1095 VULNERABLE (seamonkey, fixed 1.1.5)
+CVE-2007-1095 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5
CVE-2007-1006 version (ekiga, fixed 2.0.5) #229259 [since FEDORA-2007-322]
CVE-2007-1004 VULNERABLE (firefox) https://bugzilla.mozilla.org/show_bug.cgi?id=390627
CVE-2007-1003 backport (xorg-x11-server, fixed > X11R7.2) #235263 [since FEDORA-2007-425]
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.152
retrieving revision 1.153
diff -u -r1.152 -r1.153
--- fc7 24 Oct 2007 10:51:07 -0000 1.152
+++ fc7 24 Oct 2007 12:25:12 -0000 1.153
@@ -20,21 +20,12 @@
CVE-2007-5585 (tempest) #336331
CVE-2007-5416 ignore (drupal) Vulnerability in PHP<5.1.3, we're safe
CVE-2007-5386 VULNERABLE (phpmyadmin, fixed 2.11.1.1) #333661 PMASA-2007-5
-CVE-2007-5340 VULNERABLE (firefox, fixed 2.0.0.8)
-CVE-2007-5340 VULNERABLE (thunderbird, fixed 2.0.0.6)
-CVE-2007-5340 VULNERABLE (seamonkey, fixed 1.1.5)
-CVE-2007-5339 VULNERABLE (firefox, fixed 2.0.0.8)
-CVE-2007-5339 VULNERABLE (thunderbird, fixed 2.0.0.6)
-CVE-2007-5339 VULNERABLE (seamonkey, fixed 1.1.5)
-CVE-2007-5338 VULNERABLE (firefox, fixed 2.0.0.8)
-CVE-2007-5338 VULNERABLE (thunderbird, fixed 2.0.0.6)
-CVE-2007-5338 VULNERABLE (seamonkey, fixed 1.1.5)
-CVE-2007-5337 VULNERABLE (firefox, fixed 2.0.0.8)
-CVE-2007-5337 VULNERABLE (thunderbird, fixed 2.0.0.6)
-CVE-2007-5337 VULNERABLE (seamonkey, fixed 1.1.5)
-CVE-2007-5334 VULNERABLE (firefox, fixed 2.0.0.8)
-CVE-2007-5334 VULNERABLE (thunderbird, fixed 2.0.0.6)
-CVE-2007-5334 VULNERABLE (seamonkey, fixed 1.1.5)
+CVE-2007-5340 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5
+CVE-2007-5339 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5
+CVE-2007-5338 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5
+CVE-2007-5337 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5
+CVE-2007-5335 VULNERABLE (mozilla) ff 2.0.0.8, does not affect ff1.5
+CVE-2007-5334 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5
CVE-2007-5269 VULNERABLE (libpng10) update pending
CVE-2007-5269 VULNERABLE (libpng, fixed 1.2.21) #337461
CVE-2007-5268 ignore (libpng) shipped version too old and not affected
@@ -177,9 +168,7 @@
CVE-2007-3528 version (dar, fixed 2.3.4) #246760 [since FEDORA-2007-0904]
CVE-2007-3544 VULNERABLE (wordpress, NOT fixed 2.2.1) #245211 Incomplete fix for CVE-2007-3543
CVE-2007-3543 version (wordpress, fixed 2.2.1) #245211 [since FEDORA-2007-0894]
-CVE-2007-3511 VULNERABLE (firefox, fixed 2.0.0.8)
-CVE-2007-3511 VULNERABLE (thunderbird, fixed 2.0.0.6)
-CVE-2007-3511 VULNERABLE (seamonkey, fixed 1.1.5)
+CVE-2007-3511 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5
CVE-2007-3508 ignore (glibc) not an issue
CVE-2007-3506 version (freetype, fixed 2.3.4) #235479 [since FEDORA-2007-0033]
CVE-2007-3507 version (flac123, fixed 0.0.10) #246322 [since FEDORA-2007-1045]
@@ -300,9 +289,7 @@
CVE-2007-2381 ignore (MochiKit) #238616
*CVE-2007-2356 ** (gimp)
*CVE-2007-2353 ** (axis)
-CVE-2007-2292 VULNERABLE (firefox, fixed 2.0.0.8)
-CVE-2007-2292 VULNERABLE (thunderbird, fixed 2.0.0.6)
-CVE-2007-2292 VULNERABLE (seamonkey, fixed 1.1.5)
+CVE-2007-2292 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5
*CVE-2007-2245 VULNERABLE (phpMyAdmin, fixed 2.10.1) #237882
CVE-2007-2243 ignore (openssh, fixed 4.6) needs S/KEY support which is not shipped.
CVE-2007-2241 backport (bind) [since FEDORA-2007-0300]
@@ -423,9 +410,7 @@
*CVE-2007-1218 backport (tcpdump) 232349 [since FEDORA-2007-347]
CVE-2007-1216 version (krb5, fixed 1.6-3) #231537
*CVE-2007-1103 VULNERABLE (tor) #230927
-CVE-2007-1095 VULNERABLE (firefox, fixed 2.0.0.8)
-CVE-2007-1095 VULNERABLE (thunderbird, fixed 2.0.0.6)
-CVE-2007-1095 VULNERABLE (seamonkey, fixed 1.1.5)
+CVE-2007-1095 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5
CVE-2007-1092 version (seamonkey, fixed 1.0.8)
CVE-2007-1055 version (mediawiki, fixed 1.8.3)
CVE-2007-1054 version (mediawiki, fixed 1.9.3) [since FEDORA-2007-1442]
16 years, 6 months
fedora-security/audit fc6, 1.281, 1.282 fc7, 1.151, 1.152
by fedora-security-commits@redhat.com
Author: lkundrak
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv9603/audit
Modified Files:
fc6 fc7
Log Message:
compiz
Index: fc6
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc6,v
retrieving revision 1.281
retrieving revision 1.282
diff -u -r1.281 -r1.282
--- fc6 23 Oct 2007 14:25:40 -0000 1.281
+++ fc6 24 Oct 2007 10:51:07 -0000 1.282
@@ -80,6 +80,7 @@
CVE-2007-3996 backport (php) [since FEDORA-2007-709]
CVE-2007-3962 ignore (gftp) multiple buffer overflows in fsplib, not on Linux
CVE-2007-3961 ignore (gftp) off-by-one error in fsplib
+CVE-2007-3920 VULNERABLE (gnome-screensaver) #350271
CVE-2007-3852 backport (sysstat) #252296 [since FEDORA-2007-675]
CVE-2007-3848 version (kernel) [since FEDORA-2007-679]
CVE-2007-3847 version (httpd) #250756 [since FEDORA-2007-707]
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.151
retrieving revision 1.152
diff -u -r1.151 -r1.152
--- fc7 24 Oct 2007 09:01:23 -0000 1.151
+++ fc7 24 Oct 2007 10:51:07 -0000 1.152
@@ -141,6 +141,7 @@
CVE-2007-3999 VULNERABLE (libtirpc) #294921
CVE-2007-3962 ignore (gftp) multiple buffer overflows in fsplib, not on Linux
CVE-2007-3961 ignore (gftp) off-by-one error in fsplib
+CVE-2007-3920 VULNERABLE (gnome-screensaver) #350271
CVE-2007-3852 backport (sysstat) #252295 [since FEDORA-2007-1697]
CVE-2007-3950 version (lighttpd, fixed 1.4.16) #249162 [since FEDORA-2007-1299]
CVE-2007-3949 version (lighttpd, fixed 1.4.16) #249162 [since FEDORA-2007-1299]
16 years, 6 months