fedora-security/audit f8, 1.145, 1.146 f9, 1.134, 1.135 fc7, 1.301, 1.302
by fedora-security-commits@redhat.com
Author: lkundrak
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv2808
Modified Files:
f8 f9 fc7
Log Message:
wireshark
Index: f8
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f8,v
retrieving revision 1.145
retrieving revision 1.146
diff -u -r1.145 -r1.146
--- f8 28 Feb 2008 22:42:17 -0000 1.145
+++ f8 29 Feb 2008 17:23:52 -0000 1.146
@@ -11,6 +11,9 @@
GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since FEDORA-2008-1043]
GENERIC-MAP-NOMATCH fixed (wyrd) #433720 [since FEDORA-2008-1963]
GENERIC-MAP-NOMATCH VULNERABLE (viewvc) #435349
+CVE-2008-1072 VULNERABLE (wireshark) #435485
+CVE-2008-1071 VULNERABLE (wireshark) #435485
+CVE-2008-1070 VULNERABLE (wireshark) #435485
**CVE-2008-0983 VULNERABLE (lighttpd)
CVE-2008-0932 fixed (sword) #433724 [since FEDORA-2008-1922] why? diatheke.pl is not shipped...
CVE-2008-0928 fixed (qemu) #433561 [since FEDORA-2008-2001]
Index: f9
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f9,v
retrieving revision 1.134
retrieving revision 1.135
diff -u -r1.134 -r1.135
--- f9 28 Feb 2008 07:54:13 -0000 1.134
+++ f9 29 Feb 2008 17:23:52 -0000 1.135
@@ -11,6 +11,9 @@
GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since xine-lib-1.1.10-2.fc9]
GENERIC-MAP-NOMATCH VULNERABLE (wyrd) #433722
GENERIC-MAP-NOMATCH fixed (inkscape) #432807 [since inkscape-0.45.1+0.46pre1-4.fc9]
+CVE-2008-1072 VULNERABLE (wireshark) #435488
+CVE-2008-1071 VULNERABLE (wireshark) #435488
+CVE-2008-1070 VULNERABLE (wireshark) #435488
**CVE-2008-0983 VULNERABLE (lighttpd)
CVE-2008-0932 backport (sword) #433726 [since sword-1.5.10-3.fc9] why? diatheke.pl is not shipped...
CVE-2008-0928 backport (qemu) #433563 [since qemu-0.9.1-3.fc9]
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.301
retrieving revision 1.302
diff -u -r1.301 -r1.302
--- fc7 28 Feb 2008 22:42:17 -0000 1.301
+++ fc7 29 Feb 2008 17:23:52 -0000 1.302
@@ -12,6 +12,9 @@
GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since FEDORA-2008-1047]
GENERIC-MAP-NOMATCH fixed (wyrd) #433721 [since FEDORA-2008-1986]
GENERIC-MAP-NOMATCH VULNERABLE (viewvc) #435349
+CVE-2008-1072 VULNERABLE (wireshark) #435487
+CVE-2008-1071 VULNERABLE (wireshark) #435487
+CVE-2008-1070 VULNERABLE (wireshark) #435487
**CVE-2008-0983 VULNERABLE (lighttpd)
CVE-2008-0932 fixed (sword) #433725 [since FEDORA-2008-1951] why? diatheke.pl is not shipped...
CVE-2008-0928 fixed (qemu) #433562 [since FEDORA-2008-1995]
16 years, 2 months
fedora-security/audit f8, 1.144, 1.145 fc7, 1.300, 1.301
by fedora-security-commits@redhat.com
Author: lkundrak
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv17916
Modified Files:
f8 fc7
Log Message:
viewvc
Index: f8
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f8,v
retrieving revision 1.144
retrieving revision 1.145
diff -u -r1.144 -r1.145
--- f8 28 Feb 2008 07:54:13 -0000 1.144
+++ f8 28 Feb 2008 22:42:17 -0000 1.145
@@ -10,6 +10,7 @@
GENERIC-MAP-NOMATCH VULNERABLE (comix) multiple issues tracked via #430635
GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since FEDORA-2008-1043]
GENERIC-MAP-NOMATCH fixed (wyrd) #433720 [since FEDORA-2008-1963]
+GENERIC-MAP-NOMATCH VULNERABLE (viewvc) #435349
**CVE-2008-0983 VULNERABLE (lighttpd)
CVE-2008-0932 fixed (sword) #433724 [since FEDORA-2008-1922] why? diatheke.pl is not shipped...
CVE-2008-0928 fixed (qemu) #433561 [since FEDORA-2008-2001]
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.300
retrieving revision 1.301
diff -u -r1.300 -r1.301
--- fc7 28 Feb 2008 07:54:13 -0000 1.300
+++ fc7 28 Feb 2008 22:42:17 -0000 1.301
@@ -11,6 +11,7 @@
GENERIC-MAP-NOMATCH VULNERABLE (comix) multiple issues tracked via #430635
GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since FEDORA-2008-1047]
GENERIC-MAP-NOMATCH fixed (wyrd) #433721 [since FEDORA-2008-1986]
+GENERIC-MAP-NOMATCH VULNERABLE (viewvc) #435349
**CVE-2008-0983 VULNERABLE (lighttpd)
CVE-2008-0932 fixed (sword) #433725 [since FEDORA-2008-1951] why? diatheke.pl is not shipped...
CVE-2008-0928 fixed (qemu) #433562 [since FEDORA-2008-1995]
16 years, 2 months
fedora-security/audit f8, 1.143, 1.144 f9, 1.133, 1.134 fc7, 1.299, 1.300
by fedora-security-commits@redhat.com
Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv32349/audit
Modified Files:
f8 f9 fc7
Log Message:
add dbus, updates already pending push to stable
Index: f8
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f8,v
retrieving revision 1.143
retrieving revision 1.144
diff -u -r1.143 -r1.144
--- f8 27 Feb 2008 17:09:43 -0000 1.143
+++ f8 28 Feb 2008 07:54:13 -0000 1.144
@@ -34,6 +34,7 @@
CVE-2008-0646 fixed (rb_libtorrent) [since FEDORA-2008-1198]
CVE-2008-0597 version (cups) only old CUPS versions affected
CVE-2008-0596 version (cups) only old CUPS versions affected
+CVE-2008-0595 VULNERABLE (dbus, fixed 1.1.20)
CVE-2008-0594 fixed (firefox, fixed 2.0.0.12) #432043 [since FEDORA-2008-1535]
CVE-2008-0593 fixed (firefox, fixed 2.0.0.12) #432043 [since FEDORA-2008-1535]
CVE-2008-0593 fixed (seamonkey, fixed 1.1.8) #432046 [since FEDORA-2008-1459]
Index: f9
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f9,v
retrieving revision 1.133
retrieving revision 1.134
diff -u -r1.133 -r1.134
--- f9 27 Feb 2008 17:09:43 -0000 1.133
+++ f9 28 Feb 2008 07:54:13 -0000 1.134
@@ -33,6 +33,7 @@
CVE-2008-0646 backport (rb_libtorrent) [since rb_libtorrent-0.12-3.fc9]
CVE-2008-0597 version (cups) only old CUPS versions affected
CVE-2008-0596 version (cups) only old CUPS versions affected
+CVE-2008-0595 version (dbus, fixed 1.1.20) [since dbus-1.1.20-1.fc9]
CVE-2008-0594 version (firefox, fixed 2.0.0.12)
CVE-2008-0593 version (firefox, fixed 2.0.0.12)
CVE-2008-0593 version (seamonkey, fixed 1.1.8) [since seamonkey-1.1.8-3.fc9]
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.299
retrieving revision 1.300
diff -u -r1.299 -r1.300
--- fc7 27 Feb 2008 17:09:43 -0000 1.299
+++ fc7 28 Feb 2008 07:54:13 -0000 1.300
@@ -34,6 +34,7 @@
CVE-2008-0646 fixed (rb_libtorrent) [since FEDORA-2008-1245]
CVE-2008-0597 version (cups) only old CUPS versions affected
CVE-2008-0596 version (cups) only old CUPS versions affected
+CVE-2008-0595 VULNERABLE (dbus, fixed 1.1.20)
CVE-2008-0594 fixed (firefox, fixed 2.0.0.12) #432042 [since FEDORA-2008-1435]
CVE-2008-0593 fixed (firefox, fixed 2.0.0.12) #432042 [since FEDORA-2008-1435]
CVE-2008-0593 fixed (seamonkey, fixed 1.1.8) #432045 [since FEDORA-2008-1669]
16 years, 2 months
fedora-security/audit f8, 1.142, 1.143 f9, 1.132, 1.133 fc7, 1.298, 1.299
by fedora-security-commits@redhat.com
Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv7694/audit
Modified Files:
f8 f9 fc7
Log Message:
add ghostscript
Index: f8
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f8,v
retrieving revision 1.142
retrieving revision 1.143
diff -u -r1.142 -r1.143
--- f8 27 Feb 2008 16:43:19 -0000 1.142
+++ f8 27 Feb 2008 17:09:43 -0000 1.143
@@ -73,6 +73,7 @@
CVE-2008-0412 fixed (firefox, fixed 2.0.0.12) #432043 [since FEDORA-2008-1535]
CVE-2008-0412 fixed (seamonkey, fixed 1.1.8) #432046 [since FEDORA-2008-1459]
CVE-2008-0412 VULNERABLE (thunderbird, fixed 2.0.0.12) #432048
+CVE-2008-0411 VULNERABLE (ghostscript) #435146
CVE-2008-0404 fixed (mantis) #429552 [since FEDORA-2008-0796]
CVE-2008-0386 fixed (xdg-utils) #429513 [since FEDORA-2008-1015]
CVE-2008-0364 ignore (bittorrent) Windows only
Index: f9
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f9,v
retrieving revision 1.132
retrieving revision 1.133
diff -u -r1.132 -r1.133
--- f9 27 Feb 2008 16:43:20 -0000 1.132
+++ f9 27 Feb 2008 17:09:43 -0000 1.133
@@ -72,6 +72,7 @@
CVE-2008-0412 version (firefox, fixed 2.0.0.12)
CVE-2008-0412 version (seamonkey, fixed 1.1.8) [since seamonkey-1.1.8-3.fc9]
CVE-2008-0412 version (thuderbird, fixed 2.0.0.12) [since thunderbird-2.0.0.12-1.fc9]
+CVE-2008-0411 VULNERABLE (ghostscript) #435147
CVE-2008-0404 fixed (mantis) #429552 [since mantis-1.1.1-1.fc9]
CVE-2008-0386 fixed (xdg-utils) #429513 [since xdg-utils-1_0_2-4_fc9]
CVE-2008-0364 ignore (bittorrent) Windows only
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.298
retrieving revision 1.299
diff -u -r1.298 -r1.299
--- fc7 27 Feb 2008 16:43:20 -0000 1.298
+++ fc7 27 Feb 2008 17:09:43 -0000 1.299
@@ -73,6 +73,7 @@
CVE-2008-0412 fixed (firefox, fixed 2.0.0.12) #432042 [since FEDORA-2008-1435]
CVE-2008-0412 fixed (seamonkey, fixed 1.1.8) #432045 [since FEDORA-2008-1669]
CVE-2008-0412 VULNERABLE (thunderbird, fixed 2.0.0.12) #432047
+CVE-2008-0411 VULNERABLE (ghostscript) #435145
CVE-2008-0404 fixed (mantis) #429552 [since FEDORA-2008-0796]
CVE-2008-0386 fixed (xdg-utils) #429513 [since FEDORA-2008-1015]
CVE-2008-0364 ignore (bittorrent) Windows only
16 years, 2 months
fedora-security/audit f8, 1.141, 1.142 f9, 1.131, 1.132 fc7, 1.297, 1.298
by fedora-security-commits@redhat.com
Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv29272/audit
Modified Files:
f8 f9 fc7
Log Message:
mozilla update
Index: f8
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f8,v
retrieving revision 1.141
retrieving revision 1.142
diff -u -r1.141 -r1.142
--- f8 27 Feb 2008 09:39:39 -0000 1.141
+++ f8 27 Feb 2008 16:43:19 -0000 1.142
@@ -51,6 +51,9 @@
CVE-2008-0544 fixed (SDL_image) #430694 [since FEDORA-2008-1208] ILBM overflow
CVE-2008-0486 fixed (xine-lib, fixed 1.1.10.1) #431543 [since FEDORA-2008-1543]
CVE-2008-0460 VULNERABLE (mediawiki) #430288
+CVE-2008-0420 version (firefox, fixed 2.0.0.12) [since FEDORA-2008-1535]
+CVE-2008-0420 version (seamonkey, fixed 1.1.8) [since FEDORA-2008-1459]
+CVE-2008-0420 VULNERABLE (thunderbird, fixed 2.0.0.12) #432048
CVE-2008-0419 fixed (firefox, fixed 2.0.0.12) #432043 [since FEDORA-2008-1535]
CVE-2008-0419 fixed (seamonkey, fixed 1.1.8) #432046 [since FEDORA-2008-1459]
CVE-2008-0419 VULNERABLE (thunderbird, fixed 2.0.0.12) #432048
@@ -74,6 +77,8 @@
CVE-2008-0386 fixed (xdg-utils) #429513 [since FEDORA-2008-1015]
CVE-2008-0364 ignore (bittorrent) Windows only
CVE-2008-0318 fixed (clamav, fixed 0.92.1) [since FEDORA-2008-1625]
+CVE-2008-0304 version (seamonkey, fixed 1.1.8) [since FEDORA-2008-1459]
+CVE-2008-0304 VULNERABLE (thunderbird, fixed 2.0.0.12) #432048
CVE-2008-0299 fixed (python-paramiko) #428728 [since FEDORA-2008-0722]
CVE-2008-0285 ignore (ngircd) Not yet in Fedora, review request #234926
CVE-2008-0274 version (drupal, fixed 5.6) DRUPAL-SA-2008-007 [since FEDORA-2008-0485]
Index: f9
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f9,v
retrieving revision 1.131
retrieving revision 1.132
diff -u -r1.131 -r1.132
--- f9 27 Feb 2008 09:39:39 -0000 1.131
+++ f9 27 Feb 2008 16:43:20 -0000 1.132
@@ -33,16 +33,16 @@
CVE-2008-0646 backport (rb_libtorrent) [since rb_libtorrent-0.12-3.fc9]
CVE-2008-0597 version (cups) only old CUPS versions affected
CVE-2008-0596 version (cups) only old CUPS versions affected
-CVE-2008-0594 VULNERABLE (firefox, fixed 2.0.0.12)
-CVE-2008-0593 VULNERABLE (firefox, fixed 2.0.0.12)
+CVE-2008-0594 version (firefox, fixed 2.0.0.12)
+CVE-2008-0593 version (firefox, fixed 2.0.0.12)
CVE-2008-0593 version (seamonkey, fixed 1.1.8) [since seamonkey-1.1.8-3.fc9]
-CVE-2008-0593 VULNERABLE (thunderbird, fixed 2.0.0.12)
-CVE-2008-0592 VULNERABLE (firefox, fixed 2.0.0.12)
+CVE-2008-0593 version (thuderbird, fixed 2.0.0.12) [since thunderbird-2.0.0.12-1.fc9]
+CVE-2008-0592 version (firefox, fixed 2.0.0.12)
CVE-2008-0592 version (seamonkey, fixed 1.1.8) [since seamonkey-1.1.8-3.fc9]
-CVE-2008-0592 VULNERABLE (thunderbird, fixed 2.0.0.12)
-CVE-2008-0591 VULNERABLE (firefox, fixed 2.0.0.12)
+CVE-2008-0592 version (thuderbird, fixed 2.0.0.12) [since thunderbird-2.0.0.12-1.fc9]
+CVE-2008-0591 version (firefox, fixed 2.0.0.12)
CVE-2008-0591 version (seamonkey, fixed 1.1.8) [since seamonkey-1.1.8-3.fc9]
-CVE-2008-0591 VULNERABLE (thunderbird, fixed 2.0.0.12)
+CVE-2008-0591 version (thuderbird, fixed 2.0.0.12) [since thunderbird-2.0.0.12-1.fc9]
CVE-2008-0564 backport (mailman, fixed 2.1.10b1) [since mailman-2.1.9-10.fc9]
CVE-2008-0554 version (netpbm, fixed 10.27)
CVE-2008-0553 backport (perl-Tk) #431529 [since perl-Tk-804.028-3.fc9]
@@ -50,29 +50,34 @@
CVE-2008-0544 backport (SDL_image) #430696 ILBM overflow [since SDL_image-1.2.6-5.fc9]
CVE-2008-0486 version (xine-lib, fixed 1.1.10.1) #431544 [since xine-lib-1.1.10.1-1.fc9]
CVE-2008-0460 VULNERABLE (mediawiki) #430289
-CVE-2008-0419 VULNERABLE (firefox, fixed 2.0.0.12)
+CVE-2008-0420 version (firefox, fixed 2.0.0.12)
+CVE-2008-0420 version (seamonkey, fixed 1.1.8) [since seamonkey-1.1.8-3.fc9]
+CVE-2008-0420 version (thuderbird, fixed 2.0.0.12) [since thunderbird-2.0.0.12-1.fc9]
+CVE-2008-0419 version (firefox, fixed 2.0.0.12)
CVE-2008-0419 version (seamonkey, fixed 1.1.8) [since seamonkey-1.1.8-3.fc9]
-CVE-2008-0419 VULNERABLE (thunderbird, fixed 2.0.0.12)
-CVE-2008-0418 VULNERABLE (firefox, fixed 2.0.0.12)
+CVE-2008-0419 version (thuderbird, fixed 2.0.0.12) [since thunderbird-2.0.0.12-1.fc9]
+CVE-2008-0418 version (firefox, fixed 2.0.0.12)
CVE-2008-0418 version (seamonkey, fixed 1.1.8) [since seamonkey-1.1.8-3.fc9]
-CVE-2008-0418 VULNERABLE (thunderbird, fixed 2.0.0.12)
-CVE-2008-0417 VULNERABLE (firefox, fixed 2.0.0.12)
+CVE-2008-0418 version (thuderbird, fixed 2.0.0.12) [since thunderbird-2.0.0.12-1.fc9]
+CVE-2008-0417 version (firefox, fixed 2.0.0.12)
CVE-2008-0417 version (seamonkey, fixed 1.1.8) [since seamonkey-1.1.8-3.fc9]
-CVE-2008-0415 VULNERABLE (firefox, fixed 2.0.0.12)
+CVE-2008-0415 version (firefox, fixed 2.0.0.12)
CVE-2008-0415 version (seamonkey, fixed 1.1.8) [since seamonkey-1.1.8-3.fc9]
-CVE-2008-0415 VULNERABLE (thunderbird, fixed 2.0.0.12)
-CVE-2008-0414 VULNERABLE (firefox, fixed 2.0.0.12)
+CVE-2008-0415 version (thuderbird, fixed 2.0.0.12) [since thunderbird-2.0.0.12-1.fc9]
+CVE-2008-0414 version (firefox, fixed 2.0.0.12)
CVE-2008-0414 version (seamonkey, fixed 1.1.8) [since seamonkey-1.1.8-3.fc9]
-CVE-2008-0413 VULNERABLE (firefox, fixed 2.0.0.12)
+CVE-2008-0413 version (firefox, fixed 2.0.0.12)
CVE-2008-0413 version (seamonkey, fixed 1.1.8) [since seamonkey-1.1.8-3.fc9]
-CVE-2008-0413 VULNERABLE (thunderbird, fixed 2.0.0.12)
-CVE-2008-0412 VULNERABLE (firefox, fixed 2.0.0.12)
+CVE-2008-0413 version (thuderbird, fixed 2.0.0.12) [since thunderbird-2.0.0.12-1.fc9]
+CVE-2008-0412 version (firefox, fixed 2.0.0.12)
CVE-2008-0412 version (seamonkey, fixed 1.1.8) [since seamonkey-1.1.8-3.fc9]
-CVE-2008-0412 VULNERABLE (thunderbird, fixed 2.0.0.12)
+CVE-2008-0412 version (thuderbird, fixed 2.0.0.12) [since thunderbird-2.0.0.12-1.fc9]
CVE-2008-0404 fixed (mantis) #429552 [since mantis-1.1.1-1.fc9]
CVE-2008-0386 fixed (xdg-utils) #429513 [since xdg-utils-1_0_2-4_fc9]
CVE-2008-0364 ignore (bittorrent) Windows only
CVE-2008-0318 fixed (clamav, fixed 0.92.1)
+CVE-2008-0304 version (seamonkey, fixed 1.1.8) [since seamonkey-1.1.8-3.fc9]
+CVE-2008-0304 version (thuderbird, fixed 2.0.0.12) [since thunderbird-2.0.0.12-1.fc9]
CVE-2008-0299 fixed (python-paramiko) #428730 [since python-paramiko-1.7.1-3.fc9]
CVE-2008-0274 version (drupal, fixed 5.6) [since drupal-5.6-1.fc9] DRUPAL-SA-2008-007
CVE-2008-0273 version (drupal, fixed 5.6) [since drupal-5.6-1.fc9] DRUPAL-SA-2008-006
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.297
retrieving revision 1.298
diff -u -r1.297 -r1.298
--- fc7 27 Feb 2008 09:39:39 -0000 1.297
+++ fc7 27 Feb 2008 16:43:20 -0000 1.298
@@ -51,6 +51,9 @@
CVE-2008-0544 fixed (SDL_image) #430695 [since FEDORA-2008-1208] ILBM overflow
CVE-2008-0486 fixed (xine-lib, fixed 1.1.10.1) #431542 [since FEDORA-2008-1581]
CVE-2008-0460 VULNERABLE (mediawiki) #430287
+CVE-2008-0420 version (firefox, fixed 2.0.0.12) [since FEDORA-2008-1435]
+CVE-2008-0420 version (seamonkey, fixed 1.1.8) [since FEDORA-2008-1669]
+CVE-2008-0420 VULNERABLE (thunderbird, fixed 2.0.0.12) #432047
CVE-2008-0419 fixed (firefox, fixed 2.0.0.12) #432042 [since FEDORA-2008-1435]
CVE-2008-0419 fixed (seamonkey, fixed 1.1.8) #432045 [since FEDORA-2008-1669]
CVE-2008-0419 VULNERABLE (thunderbird, fixed 2.0.0.12) #432047
@@ -74,6 +77,8 @@
CVE-2008-0386 fixed (xdg-utils) #429513 [since FEDORA-2008-1015]
CVE-2008-0364 ignore (bittorrent) Windows only
CVE-2008-0318 fixed (clamav, fixed 0.92.1) [since FEDORA-2008-1608]
+CVE-2008-0304 version (seamonkey, fixed 1.1.8) [since FEDORA-2008-1669]
+CVE-2008-0304 VULNERABLE (thunderbird, fixed 2.0.0.12) #432047
CVE-2008-0299 fixed (python-paramiko) #428729 [since FEDORA-2008-0644]
CVE-2008-0274 version (drupal, fixed 5.6) DRUPAL-SA-2008-007 [since FEDORA-2008-0469]
CVE-2008-0273 version (drupal, fixed 5.6) DRUPAL-SA-2008-006 [since FEDORA-2008-0469]
16 years, 2 months
fedora-security/audit f8, 1.140, 1.141 f9, 1.130, 1.131 fc7, 1.296, 1.297
by fedora-security-commits@redhat.com
Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv17781/audit
Modified Files:
f8 f9 fc7
Log Message:
add lighttpd, mysql
Index: f8
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f8,v
retrieving revision 1.140
retrieving revision 1.141
diff -u -r1.140 -r1.141
--- f8 26 Feb 2008 08:33:00 -0000 1.140
+++ f8 27 Feb 2008 09:39:39 -0000 1.141
@@ -10,6 +10,7 @@
GENERIC-MAP-NOMATCH VULNERABLE (comix) multiple issues tracked via #430635
GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since FEDORA-2008-1043]
GENERIC-MAP-NOMATCH fixed (wyrd) #433720 [since FEDORA-2008-1963]
+**CVE-2008-0983 VULNERABLE (lighttpd)
CVE-2008-0932 fixed (sword) #433724 [since FEDORA-2008-1922] why? diatheke.pl is not shipped...
CVE-2008-0928 fixed (qemu) #433561 [since FEDORA-2008-2001]
CVE-2008-0928 fixed (kvm) #433564 [since FEDORA-2008-1973]
@@ -329,6 +330,7 @@
CVE-2007-0537 version (kdebase, fixed 3.5.6) #225420
CVE-2007-0235 version (libgtop2, fixed 2.14.6) #222637 not sure, will triage
CVE-2007-0095 backport (phpMyAdmin) #221694 "Reveals path" [since FEDORA-2007-4334]
+CVE-2006-7232 version (mysql, fixed 5.0.32)
CVE-2006-6698 VULNERABLE (GConf2) #219280
CVE-2006-6128 version (kernel, fixed 2.6.19-1.2911.fc6) #250625 ReiserFS MOKB
CVE-2006-6107 version (dbus, fixed 1.0.2) #219665
Index: f9
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f9,v
retrieving revision 1.130
retrieving revision 1.131
diff -u -r1.130 -r1.131
--- f9 26 Feb 2008 10:13:27 -0000 1.130
+++ f9 27 Feb 2008 09:39:39 -0000 1.131
@@ -11,6 +11,7 @@
GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since xine-lib-1.1.10-2.fc9]
GENERIC-MAP-NOMATCH VULNERABLE (wyrd) #433722
GENERIC-MAP-NOMATCH fixed (inkscape) #432807 [since inkscape-0.45.1+0.46pre1-4.fc9]
+**CVE-2008-0983 VULNERABLE (lighttpd)
CVE-2008-0932 backport (sword) #433726 [since sword-1.5.10-3.fc9] why? diatheke.pl is not shipped...
CVE-2008-0928 backport (qemu) #433563 [since qemu-0.9.1-3.fc9]
CVE-2008-0928 backport (kvm) #433566 [since kvm-61-2.fc9]
@@ -307,6 +308,7 @@
CVE-2007-0537 version (kdebase, fixed 3.5.6) #225420
CVE-2007-0235 version (libgtop2, fixed 2.14.6) #222637 not sure, will triage
CVE-2007-0095 backport (phpMyAdmin) #221694 "Reveals path" [since phpMyAdmin-2.11.3-1.fc9]
+CVE-2006-7232 version (mysql, fixed 5.0.32)
CVE-2006-6698 VULNERABLE (GConf2) #219280
CVE-2006-6128 version (kernel, fixed 2.6.19-1.2911.fc6) #250625 ReiserFS MOKB
CVE-2006-6107 version (dbus, fixed 1.0.2) #219665
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.296
retrieving revision 1.297
diff -u -r1.296 -r1.297
--- fc7 26 Feb 2008 08:33:00 -0000 1.296
+++ fc7 27 Feb 2008 09:39:39 -0000 1.297
@@ -11,6 +11,7 @@
GENERIC-MAP-NOMATCH VULNERABLE (comix) multiple issues tracked via #430635
GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since FEDORA-2008-1047]
GENERIC-MAP-NOMATCH fixed (wyrd) #433721 [since FEDORA-2008-1986]
+**CVE-2008-0983 VULNERABLE (lighttpd)
CVE-2008-0932 fixed (sword) #433725 [since FEDORA-2008-1951] why? diatheke.pl is not shipped...
CVE-2008-0928 fixed (qemu) #433562 [since FEDORA-2008-1995]
CVE-2008-0928 fixed (kvm) #433565 [since FEDORA-2008-1993]
@@ -806,6 +807,7 @@
CVE-2007-0005 version (kernel, fixed 2.6.20) [since FEDORA-2007-335]
CVE-2007-0002 version (libwpd, fixed 0.8.9) #222808 [since FEDORA-2007-351]
CVE-2007-0001 ignore (kernel) rhel4 2.6.9 only known affected
+CVE-2006-7232 version (mysql, fixed 5.0.32)
CVE-2006-7228 version (pcre, fixed 6.7)
CVE-2006-7227 version (pcre, fixed 6.7)
CVE-2006-7221 ignore (gftp) single zero byte overflow in fsplib
16 years, 2 months
fedora-security/audit f9,1.129,1.130
by fedora-security-commits@redhat.com
Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv4319/audit
Modified Files:
f9
Log Message:
update on horde / imp / turba
Index: f9
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f9,v
retrieving revision 1.129
retrieving revision 1.130
diff -u -r1.129 -r1.130
--- f9 26 Feb 2008 08:33:00 -0000 1.129
+++ f9 26 Feb 2008 10:13:27 -0000 1.130
@@ -16,7 +16,7 @@
CVE-2008-0928 backport (kvm) #433566 [since kvm-61-2.fc9]
CVE-2008-0928 backport (xen) [since xen-3.2.0-8.fc9]
CVE-2008-0882 version (cups, fixed 1.3.6) [since cups-1.3.6-1.fc9]
-CVE-2008-0807 VULNERABLE (turba) #433318
+CVE-2008-0807 version (turba, fixed 2.1.7) #433318 [since turba-2.1.7-1.fc9]
CVE-2008-0786 version (cacti, fixed 0.8.7b) #432761 [since cacti-0.8.7b-1.fc9]
CVE-2008-0785 version (cacti, fixed 0.8.7b) #432761 [since cacti-0.8.7b-1.fc9]
CVE-2008-0784 version (cacti, fixed 0.8.7b) #432761 [since cacti-0.8.7b-1.fc9]
@@ -182,8 +182,8 @@
CVE-2007-6067 version (postgresql, fixed 8.2.6) #427774 [since postgresql-8.2.6-1.fc9]
CVE-2007-6061 VULNERABLE (audacity) #393251
CVE-2007-6035 version (cacti, fixed 0.8.7a) #392001 [since cacti-0.8.7a-1.fc9]
-CVE-2007-6018 VULNERABLE (horde) #428630
-CVE-2007-6018 VULNERABLE (imp) #428634
+CVE-2007-6018 version (horde, fixed 3.1.6) #428630 [since horde-3.1.6-1.fc9]
+CVE-2007-6018 version (imp, fixed 4.1.6) #428634 [since imp-4.1.6-1.fc9]
CVE-2007-6015 VULNERABLE (samba, fixed 3.0.28) #433622
CVE-2007-6013 VULNERABLE (wordpress) #426434
CVE-2007-5977 version (phpMyAdmin) #385911 [since phpMyAdmin-2.11.2.2-1.fc9]
16 years, 2 months
fedora-security/audit f8, 1.139, 1.140 f9, 1.128, 1.129 fc7, 1.295, 1.296
by fedora-security-commits@redhat.com
Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv19196/audit
Modified Files:
f8 f9 fc7
Log Message:
sword cve i
Index: f8
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f8,v
retrieving revision 1.139
retrieving revision 1.140
diff -u -r1.139 -r1.140
--- f8 26 Feb 2008 07:45:23 -0000 1.139
+++ f8 26 Feb 2008 08:33:00 -0000 1.140
@@ -10,7 +10,7 @@
GENERIC-MAP-NOMATCH VULNERABLE (comix) multiple issues tracked via #430635
GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since FEDORA-2008-1043]
GENERIC-MAP-NOMATCH fixed (wyrd) #433720 [since FEDORA-2008-1963]
-GENERIC-MAP-NOMATCH fixed (sword) #433724 [since FEDORA-2008-1922]
+CVE-2008-0932 fixed (sword) #433724 [since FEDORA-2008-1922] why? diatheke.pl is not shipped...
CVE-2008-0928 fixed (qemu) #433561 [since FEDORA-2008-2001]
CVE-2008-0928 fixed (kvm) #433564 [since FEDORA-2008-1973]
CVE-2008-0928 VULNERABLE (xen) #434639
Index: f9
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f9,v
retrieving revision 1.128
retrieving revision 1.129
diff -u -r1.128 -r1.129
--- f9 25 Feb 2008 17:25:49 -0000 1.128
+++ f9 26 Feb 2008 08:33:00 -0000 1.129
@@ -10,8 +10,8 @@
GENERIC-MAP-NOMATCH VULNERABLE (comix) multiple issues tracked via #430635
GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since xine-lib-1.1.10-2.fc9]
GENERIC-MAP-NOMATCH VULNERABLE (wyrd) #433722
-GENERIC-MAP-NOMATCH VULNERABLE (sword) #433726
GENERIC-MAP-NOMATCH fixed (inkscape) #432807 [since inkscape-0.45.1+0.46pre1-4.fc9]
+CVE-2008-0932 backport (sword) #433726 [since sword-1.5.10-3.fc9] why? diatheke.pl is not shipped...
CVE-2008-0928 backport (qemu) #433563 [since qemu-0.9.1-3.fc9]
CVE-2008-0928 backport (kvm) #433566 [since kvm-61-2.fc9]
CVE-2008-0928 backport (xen) [since xen-3.2.0-8.fc9]
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.295
retrieving revision 1.296
diff -u -r1.295 -r1.296
--- fc7 26 Feb 2008 07:45:23 -0000 1.295
+++ fc7 26 Feb 2008 08:33:00 -0000 1.296
@@ -11,7 +11,7 @@
GENERIC-MAP-NOMATCH VULNERABLE (comix) multiple issues tracked via #430635
GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since FEDORA-2008-1047]
GENERIC-MAP-NOMATCH fixed (wyrd) #433721 [since FEDORA-2008-1986]
-GENERIC-MAP-NOMATCH fixed (sword) #433725 [since FEDORA-2008-1951]
+CVE-2008-0932 fixed (sword) #433725 [since FEDORA-2008-1951] why? diatheke.pl is not shipped...
CVE-2008-0928 fixed (qemu) #433562 [since FEDORA-2008-1995]
CVE-2008-0928 fixed (kvm) #433565 [since FEDORA-2008-1993]
CVE-2008-0928 VULNERABLE (xen) #434638
16 years, 2 months
fedora-security/audit f8, 1.138, 1.139 fc7, 1.294, 1.295
by fedora-security-commits@redhat.com
Author: lkundrak
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv10809
Modified Files:
f8 fc7
Log Message:
check-updates
Index: f8
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f8,v
retrieving revision 1.138
retrieving revision 1.139
diff -u -r1.138 -r1.139
--- f8 25 Feb 2008 17:25:49 -0000 1.138
+++ f8 26 Feb 2008 07:45:23 -0000 1.139
@@ -9,12 +9,12 @@
GENERIC-MAP-NOMATCH VULNERABLE (comix) multiple issues tracked via #430635
GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since FEDORA-2008-1043]
-GENERIC-MAP-NOMATCH VULNERABLE (wyrd) #433720
-GENERIC-MAP-NOMATCH VULNERABLE (sword) #433724
-CVE-2008-0928 VULNERABLE (qemu) #433561
-CVE-2008-0928 VULNERABLE (kvm) #433564
+GENERIC-MAP-NOMATCH fixed (wyrd) #433720 [since FEDORA-2008-1963]
+GENERIC-MAP-NOMATCH fixed (sword) #433724 [since FEDORA-2008-1922]
+CVE-2008-0928 fixed (qemu) #433561 [since FEDORA-2008-2001]
+CVE-2008-0928 fixed (kvm) #433564 [since FEDORA-2008-1973]
CVE-2008-0928 VULNERABLE (xen) #434639
-CVE-2008-0882 VULNERABLE (cups, fixed 1.3.6) #433803
+CVE-2008-0882 fixed (cups, fixed 1.3.6) #433803 [since FEDORA-2008-1901]
CVE-2008-0782 fixed (moin) #432019 [since FEDORA-2008-1562]
CVE-2008-0781 fixed (moin) #432750 [since FEDORA-2008-1905]
CVE-2008-0780 fixed (moin) #432750 [since FEDORA-2008-1905]
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.294
retrieving revision 1.295
diff -u -r1.294 -r1.295
--- fc7 25 Feb 2008 17:25:49 -0000 1.294
+++ fc7 26 Feb 2008 07:45:23 -0000 1.295
@@ -10,12 +10,12 @@
GENERIC-MAP-NOMATCH VULNERABLE (comix) multiple issues tracked via #430635
GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since FEDORA-2008-1047]
-GENERIC-MAP-NOMATCH VULNERABLE (wyrd) #433721
-GENERIC-MAP-NOMATCH VULNERABLE (sword) #433725
-CVE-2008-0928 VULNERABLE (qemu) #433562
-CVE-2008-0928 VULNERABLE (kvm) #433565
+GENERIC-MAP-NOMATCH fixed (wyrd) #433721 [since FEDORA-2008-1986]
+GENERIC-MAP-NOMATCH fixed (sword) #433725 [since FEDORA-2008-1951]
+CVE-2008-0928 fixed (qemu) #433562 [since FEDORA-2008-1995]
+CVE-2008-0928 fixed (kvm) #433565 [since FEDORA-2008-1993]
CVE-2008-0928 VULNERABLE (xen) #434638
-CVE-2008-0882 VULNERABLE (cups, fixed 1.3.6) #433802
+CVE-2008-0882 fixed (cups, fixed 1.3.6) #433802 [since FEDORA-2008-1976]
CVE-2008-0782 fixed (moin) #432020 [since FEDORA-2008-1486]
CVE-2008-0781 fixed (moin) #432749 [since FEDORA-2008-1880]
CVE-2008-0780 fixed (moin) #432749 [since FEDORA-2008-1880]
16 years, 2 months
fedora-security/audit f8, 1.137, 1.138 f9, 1.127, 1.128 fc7, 1.293, 1.294
by fedora-security-commits@redhat.com
Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv16892/audit
Modified Files:
f8 f9 fc7
Log Message:
note cve id of qemu block device driver issue
Index: f8
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f8,v
retrieving revision 1.137
retrieving revision 1.138
diff -u -r1.137 -r1.138
--- f8 25 Feb 2008 13:59:02 -0000 1.137
+++ f8 25 Feb 2008 17:25:49 -0000 1.138
@@ -9,11 +9,11 @@
GENERIC-MAP-NOMATCH VULNERABLE (comix) multiple issues tracked via #430635
GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since FEDORA-2008-1043]
-GENERIC-MAP-NOMATCH VULNERABLE (qemu) #433561
-GENERIC-MAP-NOMATCH VULNERABLE (kvm) #433564
-GENERIC-MAP-NOMATCH VULNERABLE (xen) #434639
GENERIC-MAP-NOMATCH VULNERABLE (wyrd) #433720
GENERIC-MAP-NOMATCH VULNERABLE (sword) #433724
+CVE-2008-0928 VULNERABLE (qemu) #433561
+CVE-2008-0928 VULNERABLE (kvm) #433564
+CVE-2008-0928 VULNERABLE (xen) #434639
CVE-2008-0882 VULNERABLE (cups, fixed 1.3.6) #433803
CVE-2008-0782 fixed (moin) #432019 [since FEDORA-2008-1562]
CVE-2008-0781 fixed (moin) #432750 [since FEDORA-2008-1905]
Index: f9
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f9,v
retrieving revision 1.127
retrieving revision 1.128
diff -u -r1.127 -r1.128
--- f9 25 Feb 2008 13:59:02 -0000 1.127
+++ f9 25 Feb 2008 17:25:49 -0000 1.128
@@ -9,12 +9,12 @@
GENERIC-MAP-NOMATCH VULNERABLE (comix) multiple issues tracked via #430635
GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since xine-lib-1.1.10-2.fc9]
-GENERIC-MAP-NOMATCH backport (qemu) #433563 [since qemu-0.9.1-3.fc9]
-GENERIC-MAP-NOMATCH backport (kvm) #433566 [since kvm-61-2.fc9]
-GENERIC-MAP-NOMATCH backport (xen) [since xen-3.2.0-8.fc9]
GENERIC-MAP-NOMATCH VULNERABLE (wyrd) #433722
GENERIC-MAP-NOMATCH VULNERABLE (sword) #433726
GENERIC-MAP-NOMATCH fixed (inkscape) #432807 [since inkscape-0.45.1+0.46pre1-4.fc9]
+CVE-2008-0928 backport (qemu) #433563 [since qemu-0.9.1-3.fc9]
+CVE-2008-0928 backport (kvm) #433566 [since kvm-61-2.fc9]
+CVE-2008-0928 backport (xen) [since xen-3.2.0-8.fc9]
CVE-2008-0882 version (cups, fixed 1.3.6) [since cups-1.3.6-1.fc9]
CVE-2008-0807 VULNERABLE (turba) #433318
CVE-2008-0786 version (cacti, fixed 0.8.7b) #432761 [since cacti-0.8.7b-1.fc9]
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.293
retrieving revision 1.294
diff -u -r1.293 -r1.294
--- fc7 25 Feb 2008 13:59:02 -0000 1.293
+++ fc7 25 Feb 2008 17:25:49 -0000 1.294
@@ -10,11 +10,11 @@
GENERIC-MAP-NOMATCH VULNERABLE (comix) multiple issues tracked via #430635
GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since FEDORA-2008-1047]
-GENERIC-MAP-NOMATCH VULNERABLE (qemu) #433562
-GENERIC-MAP-NOMATCH VULNERABLE (kvm) #433565
-GENERIC-MAP-NOMATCH VULNERABLE (xen) #434638
GENERIC-MAP-NOMATCH VULNERABLE (wyrd) #433721
GENERIC-MAP-NOMATCH VULNERABLE (sword) #433725
+CVE-2008-0928 VULNERABLE (qemu) #433562
+CVE-2008-0928 VULNERABLE (kvm) #433565
+CVE-2008-0928 VULNERABLE (xen) #434638
CVE-2008-0882 VULNERABLE (cups, fixed 1.3.6) #433802
CVE-2008-0782 fixed (moin) #432020 [since FEDORA-2008-1486]
CVE-2008-0781 fixed (moin) #432749 [since FEDORA-2008-1880]
16 years, 2 months