fedora-security/audit fc7,1.132,1.133
by fedora-security-commits@redhat.com
Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv19345/audit
Modified Files:
fc7
Log Message:
add few missing issues
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.132
retrieving revision 1.133
diff -u -r1.132 -r1.133
--- fc7 8 Oct 2007 10:29:17 -0000 1.132
+++ fc7 8 Oct 2007 13:41:26 -0000 1.133
@@ -16,6 +16,7 @@
CVE-2007-5159 backport (ntfs-3g) #298651 [since FEDORA-2007-2295]
CVE-2007-5106 ignore (wordpress) affects old 2.0.x versions
CVE-2007-5105 ignore (wordpress) affects old 2.0.x versions
+CVE-2007-5079 VULNERABLE (gdm) #239820
CVE-2007-5038 version (bugzilla, fixed 3.0.2, 3.1.2) #299981 [since FEDORA-2007-2299]
CVE-2007-5037 VULNERABLE (inotify-tools) #299771
CVE-2007-5034 version (elinks) #297981 [since FEDORA-2007-2224]
@@ -23,6 +24,7 @@
GENERIC-MAP-NOMATCH VULNERABLE (nx) #293031
CVE-2007-4996 version (pidgin, fixed 2.2.1) [since FEDORA-2007-2368]
CVE-2007-4993 backport (xen) [since FEDORA-2007-2270]
+CVE-2007-4990 VULNERABLE (xorg-x11-xfs, fixed 1.0.5)
CVE-2007-4974 backport (libsndfile) #296221 [since FEDORA-2007-2236]
CVE-2007-4965 VULNERABLE (python) imageop module heap overflow
CVE-2007-4924 VULNERABLE (opal, fixed 2.2.10) #297551
@@ -52,6 +54,7 @@
CVE-2007-4573 version (kernel) [since FEDORA-2007-2298]
CVE-2007-4571 version (kernel) [since FEDORA-2007-2349]
CVE-2007-4569 backport (kdebase) #299731 [since FEDORA-2007-2361]
+CVE-2007-4568 VULNERABLE (xorg-x11-xfs, fixed 1.0.5)
CVE-2007-4565 backport (fetchmail) #260861 [since FEDORA-2007-1983]
CVE-2007-4560 version (clamav) #260583 [since FEDORA-2007-2050]
CVE-2007-4559 VULNERABLE (python) tarfile module - directory traversal #315291
16 years, 6 months
fedora-security/audit fc7,1.131,1.132
by fedora-security-commits@redhat.com
Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv27730/audit
Modified Files:
fc7
Log Message:
add dircproxy
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.131
retrieving revision 1.132
diff -u -r1.131 -r1.132
--- fc7 5 Oct 2007 13:59:28 -0000 1.131
+++ fc7 8 Oct 2007 10:29:17 -0000 1.132
@@ -8,6 +8,7 @@
# Up to date CVE as of CVE email 20071004
# Up to date FC7 as of 20071003
+CVE-2007-5226 VULNERABLE (dircproxy) #319301
CVE-2007-5201 VULNERABLE (duplicity) #293081
CVE-2007-5198 VULNERABLE (nagios-plugins, fixed 1.4.10) #315101
CVE-2007-5191 VULNERABLE (util-linux) #320131
16 years, 6 months
fedora-security/audit fc6, 1.271, 1.272 fc7, 1.130, 1.131
by fedora-security-commits@redhat.com
Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv4642/audit
Modified Files:
fc6 fc7
Log Message:
util-linux mount/umount unsafe set[ug]id
Index: fc6
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc6,v
retrieving revision 1.271
retrieving revision 1.272
diff -u -r1.271 -r1.272
--- fc6 5 Oct 2007 13:00:32 -0000 1.271
+++ fc6 5 Oct 2007 13:59:28 -0000 1.272
@@ -7,6 +7,7 @@
# Up to date CVE as of CVE email 20071004
# Up to date FC6 as of 20071003
+CVE-2007-5191 VULNERABLE (util-linux) #320141
CVE-2007-5162 VULNERABLE (ruby) #313801
CVE-2007-5034 version (elinks) #297611 [since ???]
CVE-2007-4965 VULNERABLE (python) imageop module heap overflow
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.130
retrieving revision 1.131
diff -u -r1.130 -r1.131
--- fc7 5 Oct 2007 13:00:33 -0000 1.130
+++ fc7 5 Oct 2007 13:59:28 -0000 1.131
@@ -10,6 +10,7 @@
CVE-2007-5201 VULNERABLE (duplicity) #293081
CVE-2007-5198 VULNERABLE (nagios-plugins, fixed 1.4.10) #315101
+CVE-2007-5191 VULNERABLE (util-linux) #320131
CVE-2007-5162 VULNERABLE (ruby) #313791
CVE-2007-5159 backport (ntfs-3g) #298651 [since FEDORA-2007-2295]
CVE-2007-5106 ignore (wordpress) affects old 2.0.x versions
16 years, 7 months
fedora-security/audit fc6, 1.270, 1.271 fc7, 1.129, 1.130
by fedora-security-commits@redhat.com
Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv29225/audit
Modified Files:
fc6 fc7
Log Message:
Fedora updates.
Index: fc6
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc6,v
retrieving revision 1.270
retrieving revision 1.271
diff -u -r1.270 -r1.271
--- fc6 2 Oct 2007 15:00:30 -0000 1.270
+++ fc6 5 Oct 2007 13:00:32 -0000 1.271
@@ -4,8 +4,8 @@
# *CVE are items that need verification for Fedora Core 6
# (mozilla) = (firefox, seamonkey, thunderbird, yelp, devhelp, galeon, liferea. epiphany)
-# Up to date CVE as of CVE email 20071002
-# Up to date FC6 as of 20071002
+# Up to date CVE as of CVE email 20071004
+# Up to date FC6 as of 20071003
CVE-2007-5162 VULNERABLE (ruby) #313801
CVE-2007-5034 version (elinks) #297611 [since ???]
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.129
retrieving revision 1.130
diff -u -r1.129 -r1.130
--- fc7 5 Oct 2007 07:39:58 -0000 1.129
+++ fc7 5 Oct 2007 13:00:33 -0000 1.130
@@ -5,8 +5,8 @@
# (mozilla) = (firefox, seamonkey, thunderbird, yelp, devhelp, galeon, liferea. epiphany)
# A couple of first F7 updates were marked as FEDORA-2007-0001
-# Up to date CVE as of CVE email 20071002
-# Up to date FC7 as of 20071002
+# Up to date CVE as of CVE email 20071004
+# Up to date FC7 as of 20071003
CVE-2007-5201 VULNERABLE (duplicity) #293081
CVE-2007-5198 VULNERABLE (nagios-plugins, fixed 1.4.10) #315101
@@ -19,6 +19,8 @@
CVE-2007-5034 version (elinks) #297981 [since FEDORA-2007-2224]
CVE-2007-5007 VULNERABLE (balsa) #297601
GENERIC-MAP-NOMATCH VULNERABLE (nx) #293031
+CVE-2007-4996 version (pidgin, fixed 2.2.1) [since FEDORA-2007-2368]
+CVE-2007-4993 backport (xen) [since FEDORA-2007-2270]
CVE-2007-4974 backport (libsndfile) #296221 [since FEDORA-2007-2236]
CVE-2007-4965 VULNERABLE (python) imageop module heap overflow
CVE-2007-4924 VULNERABLE (opal, fixed 2.2.10) #297551
@@ -47,7 +49,7 @@
CVE-2007-4631 version (qgit) #268381 [since FEDORA-2007-2108]
CVE-2007-4573 version (kernel) [since FEDORA-2007-2298]
CVE-2007-4571 version (kernel) [since FEDORA-2007-2349]
-CVE-2007-4569 VULNERABLE (kdebase) #299731
+CVE-2007-4569 backport (kdebase) #299731 [since FEDORA-2007-2361]
CVE-2007-4565 backport (fetchmail) #260861 [since FEDORA-2007-1983]
CVE-2007-4560 version (clamav) #260583 [since FEDORA-2007-2050]
CVE-2007-4559 VULNERABLE (python) tarfile module - directory traversal #315291
@@ -207,7 +209,7 @@
CVE-2007-2865 version (phpPgAdmin, fixed 4.1.2) #241489 [since FEDORA-2007-0469]
CVE-2007-2844 ignore (php) #241641
CVE-2007-2843 ignore (konqueror) safari specific
-CVE-2007-2834 VULNERABLE (openoffice.org, fixed 2.3) #293361
+CVE-2007-2834 backport (openoffice.org, fixed 2.3) #293361 [since FEDORA-2007-2372]
CVE-2007-2821 version (wordpress, fixed 2.2) #245211 [since FEDORA-2007-0894]
CVE-2007-2799 version (file, fixed 4.21) #241034 [since FEDORA-2007-0836]
CVE-2007-2798 version (krb5, 1.6.1) [since FEDORA-2007-0740]
@@ -350,6 +352,7 @@
CVE-2007-1325 version (phpMyAdmin, fixed 2.10.0.2)
*CVE-2007-1322 ** (qemu) #238723
*CVE-2007-1321 ** (qemu) #238723
+CVE-2007-1321 backport (xen) [since FEDORA-2007-2270]
*CVE-2007-1320 ** (qemu) #238723
CVE-2007-1308 version (kdelibs)
CVE-2007-1287 ignore (php) See NVD
16 years, 7 months
fedora-security/audit fc7,1.128,1.129
by fedora-security-commits@redhat.com
Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv15703/audit
Modified Files:
fc7
Log Message:
note two CVE names
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.128
retrieving revision 1.129
diff -u -r1.128 -r1.129
--- fc7 2 Oct 2007 15:00:30 -0000 1.128
+++ fc7 5 Oct 2007 07:39:58 -0000 1.129
@@ -8,7 +8,8 @@
# Up to date CVE as of CVE email 20071002
# Up to date FC7 as of 20071002
-GENERIC-MAP-NOMATCH VULNERABLE (nagios-plugins, fixed 1.4.10) #315101
+CVE-2007-5201 VULNERABLE (duplicity) #293081
+CVE-2007-5198 VULNERABLE (nagios-plugins, fixed 1.4.10) #315101
CVE-2007-5162 VULNERABLE (ruby) #313791
CVE-2007-5159 backport (ntfs-3g) #298651 [since FEDORA-2007-2295]
CVE-2007-5106 ignore (wordpress) affects old 2.0.x versions
@@ -17,7 +18,6 @@
CVE-2007-5037 VULNERABLE (inotify-tools) #299771
CVE-2007-5034 version (elinks) #297981 [since FEDORA-2007-2224]
CVE-2007-5007 VULNERABLE (balsa) #297601
-GENERIC-MAP-NOMATCH VULNERABLE (duplicity) #293081
GENERIC-MAP-NOMATCH VULNERABLE (nx) #293031
CVE-2007-4974 backport (libsndfile) #296221 [since FEDORA-2007-2236]
CVE-2007-4965 VULNERABLE (python) imageop module heap overflow
16 years, 7 months
fedora-security/audit epel4, 1.2, 1.3 epel5, 1.4, 1.5
by fedora-security-commits@redhat.com
Author: kevin
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv21079
Modified Files:
epel4 epel5
Log Message:
Catch up EPEL
Index: epel4
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/epel4,v
retrieving revision 1.2
retrieving revision 1.3
diff -u -r1.2 -r1.3
--- epel4 22 Sep 2007 04:07:57 -0000 1.2
+++ epel4 5 Oct 2007 02:02:04 -0000 1.3
@@ -3,9 +3,12 @@
# *CVE are items that need verification for EPEL-4
# (mozilla) = (firefox, seamonkey, thunderbird, yelp, devhelp, galeon, liferea. epiphany)
-# Up to date CVE as of CVE email 20070914
-# Up to date EPEL4 as of 20070916
+# Up to date CVE as of CVE email 20071004
+# Up to date EPEL4 as of 20071004
#
+GENERIC-MAP-NOMATCH VULNERABLE (nagios-plugins, fixed 1.4.10) #315101
+*CVE-2007-5159 backport (ntfs-3g) #298651
+CVE-2007-5038 version (bugzilla, fixed 3.0.2, 3.1.2) #299981
GENERIC-MAP-NOMATCH VULNERABLE (duplicity) #293081
*CVE-2007-4828 (mediawiki, fixed 1.11.0, 1.10.2, 1.9.4) #287881
CVE-2007-4727 version (lighttpd, fixed 1.4.18) #284511
Index: epel5
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/epel5,v
retrieving revision 1.4
retrieving revision 1.5
diff -u -r1.4 -r1.5
--- epel5 22 Sep 2007 03:41:31 -0000 1.4
+++ epel5 5 Oct 2007 02:02:04 -0000 1.5
@@ -3,9 +3,12 @@
# *CVE are items that need verification for EPEL-5
# (mozilla) = (firefox, seamonkey, thunderbird, yelp, devhelp, galeon, liferea. epiphany)
-# Up to date CVE as of CVE email 20070914
-# Up to date EPEL5 as of 20070916
+# Up to date CVE as of CVE email 20071004
+# Up to date EPEL5 as of 20071004
#
+GENERIC-MAP-NOMATCH VULNERABLE (nagios-plugins, fixed 1.4.10) #315101
+*CVE-2007-5159 backport (ntfs-3g) #298651
+CVE-2007-5038 version (bugzilla, fixed 3.0.2, 3.1.2) #299981
GENERIC-MAP-NOMATCH VULNERABLE (duplicity) #293081
*CVE-2007-4829 VULNERABLE (perl-Archive-Tar)
*CVE-2007-4828 (mediawiki, fixed 1.11.0, 1.10.2, 1.9.4) #287881
16 years, 7 months
fedora-security/audit fc6, 1.269, 1.270 fc7, 1.127, 1.128
by fedora-security-commits@redhat.com
Author: lkundrak
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv30876
Modified Files:
fc6 fc7
Log Message:
Up to date as of today
Index: fc6
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc6,v
retrieving revision 1.269
retrieving revision 1.270
diff -u -r1.269 -r1.270
--- fc6 1 Oct 2007 13:55:03 -0000 1.269
+++ fc6 2 Oct 2007 15:00:30 -0000 1.270
@@ -4,31 +4,31 @@
# *CVE are items that need verification for Fedora Core 6
# (mozilla) = (firefox, seamonkey, thunderbird, yelp, devhelp, galeon, liferea. epiphany)
-# Up to date CVE as of CVE email 20070914
-# Up to date FC6 as of 20070926
+# Up to date CVE as of CVE email 20071002
+# Up to date FC6 as of 20071002
CVE-2007-5162 VULNERABLE (ruby) #313801
-CVE-2007-5034 VULNERABLE (elinks) #297611
+CVE-2007-5034 version (elinks) #297611 [since ???]
CVE-2007-4965 VULNERABLE (python) imageop module heap overflow
-CVE-2007-4924 VULNERABLE (ekiga, version 2.0.10) really opal 2.2.10 #297561
-CVE-2007-4897 VULNERABLE (ekiga, version 2.0.9) really opal 2.2.8 #297561
-CVE-2007-4829 VULNERABLE (perl-Archive-Tar)
-CVE-2007-4826 VULNERABLE (quagga, fixed 0.99.9)
+CVE-2007-4924 VULNERABLE (opal, fixed 2.2.10) #297561
+CVE-2007-4897 VULNERABLE (opal, fixed 2.2.8) #297561
+CVE-2007-4829 VULNERABLE (perl-Archive-Tar) #315331
+CVE-2007-4826 VULNERABLE (quagga, fixed 0.99.9) #315301
CVE-2007-4752 VULNERABLE (openssh) #280471
CVE-2007-4743 backport (krb5) incomplete CVE-2007-3999 fix [since FEDORA-2007-694]
-CVE-2007-4730 VULNERABLE (xorg-x11) #286061
+CVE-2007-4730 ignore (xorg-x11) #286061 ajax says FC6 is not vulnerable
CVE-2007-4721 version (wireshark, fixed 0.99.6) [since FEDORA-2007-628]
CVE-2007-4670 backport (php) [since FEDORA-2007-709]
CVE-2007-4663 ignore (php, fixed 5.2.4) #277991 safe_mode
CVE-2007-4662 ignore (php, fixed 5.2.4) #278101 triggerable only by modification to openssl.conf
CVE-2007-4661 ignore (php, fixed 5.2.4) 5.2.3, incomplete CVE-2007-2872 fix
-CVE-2007-4660 VULNERABLE (php, fixed 5.2.4)
+CVE-2007-4660 ignore (php, fixed 5.2.4) CVE-2007-4661 duplicate, jorton mailed Mitre
CVE-2007-4659 ignore (php, fixed 5.2.4) #276531 (FC7/php-5.2 only)
CVE-2007-4658 backport (php, fixed 5.2.4) #278011 [since FEDORA-2007-709]
-CVE-2007-4657 VULNERABLE (php, fixed 5.2.4)
+CVE-2007-4657 ingore (php, fixed 5.2.4) arbitrary read not remotly triggerable
CVE-2007-4569 VULNERABLE (kdebase) #299741
CVE-2007-4565 backport (fetchmail) #260881 [since FEDORA-2007-689]
-CVE-2007-4559 VULNERABLE (python) tarfile module - directory traversal
+CVE-2007-4559 VULNERABLE (python) tarfile module - directory traversal #315291
CVE-2007-4558 ignore (star, fixed 1.5a84) duplicate of CVE-2007-4134
CVE-2007-4465 version (httpd) [since FEDORA-2007-707]
CVE-2007-4357 ignore (firefox) status bar can be overwrittten
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.127
retrieving revision 1.128
diff -u -r1.127 -r1.128
--- fc7 2 Oct 2007 08:25:51 -0000 1.127
+++ fc7 2 Oct 2007 15:00:30 -0000 1.128
@@ -5,8 +5,8 @@
# (mozilla) = (firefox, seamonkey, thunderbird, yelp, devhelp, galeon, liferea. epiphany)
# A couple of first F7 updates were marked as FEDORA-2007-0001
-# Up to date CVE as of CVE email 20070914
-# Up to date FC7 as of 20070930
+# Up to date CVE as of CVE email 20071002
+# Up to date FC7 as of 20071002
GENERIC-MAP-NOMATCH VULNERABLE (nagios-plugins, fixed 1.4.10) #315101
CVE-2007-5162 VULNERABLE (ruby) #313791
@@ -21,35 +21,36 @@
GENERIC-MAP-NOMATCH VULNERABLE (nx) #293031
CVE-2007-4974 backport (libsndfile) #296221 [since FEDORA-2007-2236]
CVE-2007-4965 VULNERABLE (python) imageop module heap overflow
-CVE-2007-4924 VULNERABLE (ekiga, version 2.0.10) really opal 2.2.10 #297551
+CVE-2007-4924 VULNERABLE (opal, fixed 2.2.10) #297551
CVE-2007-4897 version (ekiga, version 2.0.9) really opal 2.2.8
CVE-2007-4894 version (wordpress, fixed 2.2.3) [since FEDORA-2007-2143]
CVE-2007-4893 version (wordpress, fixed 2.2.3) [since FEDORA-2007-2143]
CVE-2007-4841 ignore (mozilla suite) Windows only
CVE-2007-4840 ignore (php)
-CVE-2007-4829 VULNERABLE (perl-Archive-Tar)
+CVE-2007-4829 VULNERABLE (perl-Archive-Tar) #315321
CVE-2007-4828 version (mediawiki, fixed 1.11.0, 1.10.2, 1.9.4) #287881 [since FEDORA-2007-2189]
CVE-2007-4826 version (quagga, fixed 0.99.9) [since FEDORA-2007-2196]
CVE-2007-4752 VULNERABLE (openssh) #280461
CVE-2007-4743 backport (krb5) incomplete CVE-2007-3999 fix [since FEDORA-2007-2066]
-CVE-2007-4730 VULNERABLE (xorg-x11) #286051
+CVE-2007-4730 ignore (xorg-x11) #286051 ajax says F7 is not vulnerable
CVE-2007-4727 version (lighttpd) #284511 [since FEDORA-2007-2132]
CVE-2007-4721 version (wireshark, fixed 0.99.6) [since FEDORA-2007-0982]
CVE-2007-4663 ignore (php, fixed 5.2.4) #277991 safe_mode
CVE-2007-4662 ignore (php, fixed 5.2.4) #278101 triggerable only by modification to openssl.conf
CVE-2007-4661 ignore (php, fixed 5.2.4) 5.2.3, incomplete CVE-2007-2872 fix
-CVE-2007-4660 VULNERABLE (php, fixed 5.2.4)
-CVE-2007-4659 VULNERABLE (php, fixed 5.2.4) #276531 Tracking bug!
-CVE-2007-4658 VULNERABLE (php, fixed 5.2.4) #278011
-CVE-2007-4657 VULNERABLE (php, fixed 5.2.4)
+CVE-2007-4660 version (php, fixed 5.2.4) [since FEDORA-2007-2215]
+CVE-2007-4659 version (php, fixed 5.2.4) #276531 [since FEDORA-2007-2215]
+CVE-2007-4658 version (php, fixed 5.2.4) #278011 [since FEDORA-2007-2215]
+CVE-2007-4657 version (php, fixed 5.2.4) [since FEDORA-2007-2215]
CVE-2007-4650 version (gallery2) #267421 [since FEDORA-2007-2020]
CVE-2007-4629 version (mapserver, fixed 4.10.3) #272081 [since FEDORA-2007-2018]
CVE-2007-4631 version (qgit) #268381 [since FEDORA-2007-2108]
CVE-2007-4573 version (kernel) [since FEDORA-2007-2298]
+CVE-2007-4571 version (kernel) [since FEDORA-2007-2349]
CVE-2007-4569 VULNERABLE (kdebase) #299731
CVE-2007-4565 backport (fetchmail) #260861 [since FEDORA-2007-1983]
CVE-2007-4560 version (clamav) #260583 [since FEDORA-2007-2050]
-CVE-2007-4559 VULNERABLE (python) tarfile module - directory traversal
+CVE-2007-4559 VULNERABLE (python) tarfile module - directory traversal #315291
CVE-2007-4558 ignore (star, fixed 1.5a84) duplicate of CVE-2007-4134
CVE-2007-4543 version (bugzilla, fixed 3.0.1) #256021 [since FEDORA-2007-1853]
CVE-2007-4542 version (mapserver, fixed 4.10.3) #256561 [since FEDORA-2007-2018]
16 years, 7 months
fedora-security/audit fc7,1.126,1.127
by fedora-security-commits@redhat.com
Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv7839/audit
Modified Files:
fc7
Log Message:
add nagios-plugins
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.126
retrieving revision 1.127
diff -u -r1.126 -r1.127
--- fc7 1 Oct 2007 13:55:03 -0000 1.126
+++ fc7 2 Oct 2007 08:25:51 -0000 1.127
@@ -8,6 +8,7 @@
# Up to date CVE as of CVE email 20070914
# Up to date FC7 as of 20070930
+GENERIC-MAP-NOMATCH VULNERABLE (nagios-plugins, fixed 1.4.10) #315101
CVE-2007-5162 VULNERABLE (ruby) #313791
CVE-2007-5159 backport (ntfs-3g) #298651 [since FEDORA-2007-2295]
CVE-2007-5106 ignore (wordpress) affects old 2.0.x versions
16 years, 7 months
fedora-security/audit fc6, 1.268, 1.269 fc7, 1.125, 1.126
by fedora-security-commits@redhat.com
Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv13780/audit
Modified Files:
fc6 fc7
Log Message:
ruby Net::HTTP(S) issue
Index: fc6
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc6,v
retrieving revision 1.268
retrieving revision 1.269
diff -u -r1.268 -r1.269
--- fc6 27 Sep 2007 12:55:40 -0000 1.268
+++ fc6 1 Oct 2007 13:55:03 -0000 1.269
@@ -7,6 +7,7 @@
# Up to date CVE as of CVE email 20070914
# Up to date FC6 as of 20070926
+CVE-2007-5162 VULNERABLE (ruby) #313801
CVE-2007-5034 VULNERABLE (elinks) #297611
CVE-2007-4965 VULNERABLE (python) imageop module heap overflow
CVE-2007-4924 VULNERABLE (ekiga, version 2.0.10) really opal 2.2.10 #297561
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.125
retrieving revision 1.126
diff -u -r1.125 -r1.126
--- fc7 1 Oct 2007 09:03:51 -0000 1.125
+++ fc7 1 Oct 2007 13:55:03 -0000 1.126
@@ -8,6 +8,7 @@
# Up to date CVE as of CVE email 20070914
# Up to date FC7 as of 20070930
+CVE-2007-5162 VULNERABLE (ruby) #313791
CVE-2007-5159 backport (ntfs-3g) #298651 [since FEDORA-2007-2295]
CVE-2007-5106 ignore (wordpress) affects old 2.0.x versions
CVE-2007-5105 ignore (wordpress) affects old 2.0.x versions
16 years, 7 months
fedora-security/audit fc7,1.124,1.125
by fedora-security-commits@redhat.com
Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv8894/audit
Modified Files:
fc7
Log Message:
note ntfs-3g CVE id
one fedora update
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.124
retrieving revision 1.125
diff -u -r1.124 -r1.125
--- fc7 27 Sep 2007 16:55:28 -0000 1.124
+++ fc7 1 Oct 2007 09:03:51 -0000 1.125
@@ -6,8 +6,9 @@
# A couple of first F7 updates were marked as FEDORA-2007-0001
# Up to date CVE as of CVE email 20070914
-# Up to date FC7 as of 20070926
+# Up to date FC7 as of 20070930
+CVE-2007-5159 backport (ntfs-3g) #298651 [since FEDORA-2007-2295]
CVE-2007-5106 ignore (wordpress) affects old 2.0.x versions
CVE-2007-5105 ignore (wordpress) affects old 2.0.x versions
CVE-2007-5038 version (bugzilla, fixed 3.0.2, 3.1.2) #299981 [since FEDORA-2007-2299]
@@ -83,7 +84,7 @@
CVE-2007-4131 backport (tar) #253684 [since FEDORA-2007-1890]
CVE-2007-4066 backport (libvorbis) #245991 [since FEDORA-2007-1765]
CVE-2007-4065 backport (libvorbis) #245991 [since FEDORA-2007-1765]
-CVE-2007-4033 VULNERABLE (t1lib) #303021
+CVE-2007-4033 backport (t1lib) #303021 [since FEDORA-2007-2343]
CVE-2007-4029 backport (libvorbis) #245991 [since FEDORA-2007-1765]
CVE-2007-4000 backport (krb5) [since FEDORA-2007-2017]
CVE-2007-3999 backport (krb5) [since FEDORA-2007-2017]
16 years, 7 months