fedora-security/audit f8, 1.195, 1.196 f9, 1.185, 1.186 fc7, 1.351, 1.352
by fedora-security-commits@redhat.com
Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv15412/audit
Modified Files:
f8 f9 fc7
Log Message:
add speex
Index: f8
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f8,v
retrieving revision 1.195
retrieving revision 1.196
diff -u -r1.195 -r1.196
--- f8 15 Apr 2008 07:46:56 -0000 1.195
+++ f8 15 Apr 2008 17:18:52 -0000 1.196
@@ -11,6 +11,7 @@
CVE-2008-1688 ignore (m4, fixed 1.4.11) not really a security issue
CVE-2008-1687 ignore (m4, fixed 1.4.11) not really a security issue
CVE-2008-1686 VULNERABLE (libfishsound, fixed 0.9.1) #441247
+CVE-2008-1686 VULNERABLE (speex) #442572
CVE-2008-1658 fixed (PolicyKit) #439995 [since FEDORA-2008-2987]
CVE-2008-1657 VULNERABLE (openssh, fixed 4.9) #440375
CVE-2008-1652 version (Perlbal, fixed 1.70) [since FEDORA-2008-2778]
Index: f9
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f9,v
retrieving revision 1.185
retrieving revision 1.186
diff -u -r1.185 -r1.186
--- f9 15 Apr 2008 07:46:56 -0000 1.185
+++ f9 15 Apr 2008 17:18:52 -0000 1.186
@@ -11,6 +11,7 @@
CVE-2008-1688 ignore (m4, fixed 1.4.11) not really a security issue
CVE-2008-1687 ignore (m4, fixed 1.4.11) not really a security issue
CVE-2008-1686 VULNERABLE (libfishsound, fixed 0.9.1) #441248
+CVE-2008-1686 VULNERABLE (speex) [since speex-1.2-0.7.beta3]
CVE-2008-1658 VULNERABLE (PolicyKit) #439996
CVE-2008-1657 VULNERABLE (openssh, fixed 4.9) #440376
CVE-2008-1652 version (Perlbal, fixed 1.70) [since Perlbal-1.70-1.fc9]
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.351
retrieving revision 1.352
diff -u -r1.351 -r1.352
--- fc7 15 Apr 2008 07:46:56 -0000 1.351
+++ fc7 15 Apr 2008 17:18:52 -0000 1.352
@@ -12,6 +12,7 @@
CVE-2008-1688 ignore (m4, fixed 1.4.11) not really a security issue
CVE-2008-1687 ignore (m4, fixed 1.4.11) not really a security issue
CVE-2008-1686 VULNERABLE (libfishsound, fixed 0.9.1) #441246
+CVE-2008-1686 VULNERABLE (speex) #442571
CVE-2008-1657 VULNERABLE (openssh, fixed 4.9) #280461
CVE-2008-1652 version (Perlbal, fixed 1.70) [since FEDORA-2008-2788]
CVE-2008-1637 fixed (pdns-recursor, fixed 3.1.5) #440248 [since FEDORA-2008-3010]
16 years
fedora-security/audit f8, 1.194, 1.195 f9, 1.184, 1.185 fc7, 1.350, 1.351
by fedora-security-commits@redhat.com
Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv27072/audit
Modified Files:
f8 f9 fc7
Log Message:
note libpng, m4
Index: f8
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f8,v
retrieving revision 1.194
retrieving revision 1.195
diff -u -r1.194 -r1.195
--- f8 14 Apr 2008 17:02:02 -0000 1.194
+++ f8 15 Apr 2008 07:46:56 -0000 1.195
@@ -8,6 +8,8 @@
249840 VULNERABLE (tor)
CVE-2008-1729 ignore (drupal) 6.x only
CVE-2008-1720 VULNERABLE (rsync, fixed 3.0.2) #441690
+CVE-2008-1688 ignore (m4, fixed 1.4.11) not really a security issue
+CVE-2008-1687 ignore (m4, fixed 1.4.11) not really a security issue
CVE-2008-1686 VULNERABLE (libfishsound, fixed 0.9.1) #441247
CVE-2008-1658 fixed (PolicyKit) #439995 [since FEDORA-2008-2987]
CVE-2008-1657 VULNERABLE (openssh, fixed 4.9) #440375
@@ -24,7 +26,6 @@
CVE-2008-1552 fixed (libsilc, fixed 1.1.7) #438382 [since FEDORA-2008-2641]
CVE-2008-1532 version (Perlbal, fixed 1.70) #439056 [since FEDORA-2008-2778]
CVE-2008-1531 VULNERABLE (lighttpd) #439068
-CVE-2008-1515 VULNERABLE (otrs) #439724
CVE-2008-1488 VULNERABLE (php-pecl-apc) #438847
CVE-2008-1483 ignore (openssh) was alrady fixed by another patch
CVE-2008-1482 fixed (xine-lib) #438670 [since FEDORA-2008-2849]
@@ -33,6 +34,8 @@
CVE-2008-1467 fixed (centerim) #438871 [since FEDORA-2008-2869]
CVE-2008-1394 ignore (plone)
CVE-2008-1390 fixed (asterisk, fixed 1.4.19-rc3) #438133 [since FEDORA-2008-2554]
+CVE-2008-1382 VULNERABLE (libpng, fixed 1.2.27) minimal impact, affected api rarely used
+CVE-2008-1382 VULNERABLE (libpng10) minimal impact, affected api rarely used
CVE-2008-1374 ignore (cups) only affects old cups versions in RHEL
CVE-2008-1373 fixed (cups) #440040 [since FEDORA-2008-2131]
CVE-2008-1372 fixed (bzip2, fixed 1.0.5) #439855 [since FEDORA-2008-2970]
Index: f9
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f9,v
retrieving revision 1.184
retrieving revision 1.185
diff -u -r1.184 -r1.185
--- f9 14 Apr 2008 17:02:02 -0000 1.184
+++ f9 15 Apr 2008 07:46:56 -0000 1.185
@@ -8,6 +8,8 @@
249840 VULNERABLE (tor)
CVE-2008-1729 version (drupal, fixed 6.2) [since drupal-6.2-1.fc9]
CVE-2008-1720 VULNERABLE (rsync, fixed 3.0.2) [since rsync-3.0.2-0.fc9]
+CVE-2008-1688 ignore (m4, fixed 1.4.11) not really a security issue
+CVE-2008-1687 ignore (m4, fixed 1.4.11) not really a security issue
CVE-2008-1686 VULNERABLE (libfishsound, fixed 0.9.1) #441248
CVE-2008-1658 VULNERABLE (PolicyKit) #439996
CVE-2008-1657 VULNERABLE (openssh, fixed 4.9) #440376
@@ -24,7 +26,6 @@
CVE-2008-1552 version (libsilc, fixed 1.1.7) #438382 [since libsilc-1.1.7-1.fc9]
CVE-2008-1532 version (Perlbal, fixed 1.70) [since Perlbal-1.70-1.fc9]
CVE-2008-1531 VULNERABLE (lighttpd) #439069
-CVE-2008-1515 VULNERABLE (otrs) #439725
CVE-2008-1488 VULNERABLE (php-pecl-apc) #438848
CVE-2008-1483 ignore (openssh) was alrady fixed by another patch
CVE-2008-1482 version (xine-lib) #438671 [since xine-lib-1.1.11.1-1.fc9]
@@ -33,6 +34,8 @@
CVE-2008-1467 fixed (centerim) #438871
CVE-2008-1394 ignore (plone)
CVE-2008-1390 version (asterisk, fixed 1.6.0-beta6) #438134 [since asterisk-1.6.0-0.6.beta6.fc9]
+CVE-2008-1382 VULNERABLE (libpng, fixed 1.2.27) minimal impact, affected api rarely used
+CVE-2008-1382 VULNERABLE (libpng10) minimal impact, affected api rarely used
CVE-2008-1374 ignore (cups) only affects old cups versions in RHEL
CVE-2008-1373 VULNERABLE (cups) #440041
CVE-2008-1372 version (bzip2, fixed 1.0.5) [since bzip2-1.0.5-1.fc9]
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.350
retrieving revision 1.351
diff -u -r1.350 -r1.351
--- fc7 14 Apr 2008 17:02:02 -0000 1.350
+++ fc7 15 Apr 2008 07:46:56 -0000 1.351
@@ -9,6 +9,8 @@
249840 version (tor, fixed 0.1.2.15) #249840 [since FEDORA-2007-1674]
CVE-2008-1729 ignore (drupal) 6.x only
CVE-2008-1720 VULNERABLE (rsync, fixed 3.0.2) #441689
+CVE-2008-1688 ignore (m4, fixed 1.4.11) not really a security issue
+CVE-2008-1687 ignore (m4, fixed 1.4.11) not really a security issue
CVE-2008-1686 VULNERABLE (libfishsound, fixed 0.9.1) #441246
CVE-2008-1657 VULNERABLE (openssh, fixed 4.9) #280461
CVE-2008-1652 version (Perlbal, fixed 1.70) [since FEDORA-2008-2788]
@@ -33,6 +35,8 @@
CVE-2008-1467 fixed (centerim) #438871 [since FEDORA-2008-2869]
CVE-2008-1394 ignore (plone)
CVE-2008-1390 fixed (asterisk, fixed 1.4.19-rc3) #438132 [since FEDORA-2008-2620]
+CVE-2008-1382 ignore (libpng, fixed 1.2.27) minimal impact, affected api rarely used
+CVE-2008-1382 ignore (libpng10) minimal impact, affected api rarely used
CVE-2008-1374 ignore (cups) only affects old cups versions in RHEL
CVE-2008-1373 fixed (cups) #440042 [since FEDORA-2008-2897]
CVE-2008-1372 fixed (bzip2, fixed 1.0.5) #439855 [since FEDORA-2008-2970]
16 years
fedora-security/audit f8, 1.193, 1.194 f9, 1.183, 1.184 fc7, 1.349, 1.350
by fedora-security-commits@redhat.com
Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv9476/audit
Modified Files:
f8 f9 fc7
Log Message:
add clamav, note rsync bz id, update nethack note
Index: f8
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f8,v
retrieving revision 1.193
retrieving revision 1.194
diff -u -r1.193 -r1.194
--- f8 14 Apr 2008 08:48:58 -0000 1.193
+++ f8 14 Apr 2008 17:02:02 -0000 1.194
@@ -4,10 +4,10 @@
# *CVE are items that need verification for Fedora 8
# (mozilla) = (gecko-libs dependent stuff)
-441683 VULNERABLE (rsync, fixed 3.0.2) #441690
293031 fixed (nx) #293031 [since FEDORA-2008-2258]
249840 VULNERABLE (tor)
CVE-2008-1729 ignore (drupal) 6.x only
+CVE-2008-1720 VULNERABLE (rsync, fixed 3.0.2) #441690
CVE-2008-1686 VULNERABLE (libfishsound, fixed 0.9.1) #441247
CVE-2008-1658 fixed (PolicyKit) #439995 [since FEDORA-2008-2987]
CVE-2008-1657 VULNERABLE (openssh, fixed 4.9) #440375
@@ -59,6 +59,7 @@
CVE-2008-1131 ignore (drupal) #435816 drupal 6.x only
CVE-2008-1111 fixed (lighttpd) #435807 [since FEDORA-2008-2262]
CVE-2008-1110 version (xine-lib, fixed 1.1.10) [since FEDORA-2008-1043]
+CVE-2008-1100 VULNERABLE (clamav, fixed 0.93) #442363
CVE-2008-1099 VULNERABLE (moin) #438673
CVE-2008-1098 VULNERABLE (moin) #438673
CVE-2008-1078 ignore (am-utils) does not seem used by any other Fedora package
@@ -332,7 +333,7 @@
CVE-2007-5333 fixed (tomcat5) #428255 [since FEDORA-2008-1467]
CVE-2007-5201 fixed (duplicity, no upstream fix) #362831 [since FEDORA-2008-1521]
CVE-2007-5200 version (hugin) #362861 [since FEDORA-2007-2807] hugin-0.6.1-11.fc8
-CVE-2007-5198 VULNERABLE (nagios-plugins, fixed 1.4.10) #362891
+CVE-2007-5198 VULNERABLE (nagios-plugins, fixed 1.4.10) #362891
CVE-2007-5197 version (mono, fixed 1.2.5.1) #367541 [since FEDORA-2007-2969]
CVE-2007-5162 version (ruby) [since FEDORA-2007-2812]
CVE-2007-5116 backport (perl) #378141 [since FEDORA-2007-3218]
@@ -429,6 +430,7 @@
CVE-2006-4561 ignore (firefox) Needs DNS spoofing; https is for this.
CVE-2006-2894 version (firefox, fixed 2.0.0.8)
CVE-2006-2894 version (seamonkey, fixed 1.1.5) #194511
+CVE-2006-1390 VULNERABLE (nethack) bz#187353, but requires other access to games group
CVE-2006-0987 ignore (bind) example config file only
CVE-2006-0496 ignore (firefox) Feature, not a bug moz #324253
CVE-2005-4809 ignore (firefox) Status bar can be modified anyways
Index: f9
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f9,v
retrieving revision 1.183
retrieving revision 1.184
diff -u -r1.183 -r1.184
--- f9 14 Apr 2008 08:48:58 -0000 1.183
+++ f9 14 Apr 2008 17:02:02 -0000 1.184
@@ -5,9 +5,9 @@
# (mozilla) = (gecko-libs dependent stuff)
none version (swfdec, fixed 0.6.4) [since swfdec-0.6.4-1.fc9]
-441683 VULNERABLE (rsync, fixed 3.0.2) [since rsync-3.0.2-0.fc9]
249840 VULNERABLE (tor)
CVE-2008-1729 version (drupal, fixed 6.2) [since drupal-6.2-1.fc9]
+CVE-2008-1720 VULNERABLE (rsync, fixed 3.0.2) [since rsync-3.0.2-0.fc9]
CVE-2008-1686 VULNERABLE (libfishsound, fixed 0.9.1) #441248
CVE-2008-1658 VULNERABLE (PolicyKit) #439996
CVE-2008-1657 VULNERABLE (openssh, fixed 4.9) #440376
@@ -57,6 +57,7 @@
CVE-2008-1131 version (drupal, fixed 6.1) #435817 [since drupal-6.1-1.fc9]
CVE-2008-1111 backport (lighttpd) #435809 [since lighttpd-1.4.18-6.fc9]
CVE-2008-1110 version (xine-lib, fixed 1.1.10) [since xine-lib-1.1.10-2.fc9]
+CVE-2008-1100 VULNERABLE (clamav, fixed 0.93) #442364
CVE-2008-1099 VULNERABLE (moin) #438674
CVE-2008-1098 VULNERABLE (moin) #438674
CVE-2008-1078 VULNERABLE (am-utils) #437746
@@ -404,6 +405,7 @@
CVE-2006-4561 ignore (firefox) Needs DNS spoofing; https is for this.
CVE-2006-2894 version (firefox, fixed 2.0.0.8)
CVE-2006-2894 version (seamonkey, fixed 1.1.5) #194511
+CVE-2006-1390 VULNERABLE (nethack) bz#187353, but requires other access to games group
CVE-2006-0987 ignore (bind) example config file only
CVE-2006-0496 ignore (firefox) Feature, not a bug moz #324253
CVE-2005-4809 ignore (firefox) Status bar can be modified anyways
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.349
retrieving revision 1.350
diff -u -r1.349 -r1.350
--- fc7 14 Apr 2008 08:48:58 -0000 1.349
+++ fc7 14 Apr 2008 17:02:02 -0000 1.350
@@ -5,10 +5,10 @@
# (mozilla) = (firefox, seamonkey, thunderbird, yelp, devhelp, galeon, liferea. epiphany)
# A couple of first F7 updates were marked as FEDORA-2007-0001
-441683 VULNERABLE (rsync, fixed 3.0.2) #441689
293031 fixed (nx) #293031 [since FEDORA-2008-2258]
249840 version (tor, fixed 0.1.2.15) #249840 [since FEDORA-2007-1674]
CVE-2008-1729 ignore (drupal) 6.x only
+CVE-2008-1720 VULNERABLE (rsync, fixed 3.0.2) #441689
CVE-2008-1686 VULNERABLE (libfishsound, fixed 0.9.1) #441246
CVE-2008-1657 VULNERABLE (openssh, fixed 4.9) #280461
CVE-2008-1652 version (Perlbal, fixed 1.70) [since FEDORA-2008-2788]
@@ -59,6 +59,7 @@
CVE-2008-1131 ignore (drupal) #435815 drupal 6.x only
CVE-2008-1111 fixed (lighttpd) #435808 [since FEDORA-2008-2278]
CVE-2008-1110 version (xine-lib, fixed 1.1.10) [since FEDORA-2008-1047]
+CVE-2008-1100 VULNERABLE (clamav, fixed 0.93) #442362
CVE-2008-1099 VULNERABLE (moin) #438672
CVE-2008-1098 VULNERABLE (moin) #438672
CVE-2008-1078 ignore (am-utils) does not seem used by any other Fedora package
@@ -354,7 +355,7 @@
CVE-2007-5208 backport (hplip) #329111 [since FEDORA-2007-2527]
CVE-2007-5201 fixed (duplicity) #362821 [since FEDORA-2008-1584]
CVE-2007-5200 backport (hugin) #362851 [since FEDORA-2007-2989]
-CVE-2007-5198 VULNERABLE (nagios-plugins, fixed 1.4.10) #362881
+CVE-2007-5198 VULNERABLE (nagios-plugins, fixed 1.4.10) #362881
CVE-2007-5197 backport (mono, fixed 1.2.5.1) #367531 [since FEDORA-2007-3130]
CVE-2007-5191 backport (util-linux) #320141 [since FEDORA-2007-2462]
CVE-2007-5162 version (ruby) #313801 [since FEDORA-2007-2406]
@@ -1527,7 +1528,7 @@
CVE-2006-1494 version (php, fixed 5.1.3)
CVE-2006-1490 version (php, fixed 5.1.4)
CVE-2006-1470 version (openldap, not 2.3.24 at least)
-CVE-2006-1390 ignore (nethack) Gentoo-specific problem bz#187353
+CVE-2006-1390 VULNERABLE (nethack) bz#187353, but requires other access to games group
*CVE-2006-1370 ** (helixplayer)
CVE-2006-1368 version (kernel, fixed 2.6.16)
CVE-2006-1354 version (freeradius, fixed 1.1.2 at least)
16 years
fedora-security/audit f8, 1.192, 1.193 f9, 1.182, 1.183 fc7, 1.348, 1.349
by fedora-security-commits@redhat.com
Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv22244/audit
Modified Files:
f8 f9 fc7
Log Message:
add drupal, swfdec
Index: f8
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f8,v
retrieving revision 1.192
retrieving revision 1.193
diff -u -r1.192 -r1.193
--- f8 10 Apr 2008 06:34:49 -0000 1.192
+++ f8 14 Apr 2008 08:48:58 -0000 1.193
@@ -7,6 +7,7 @@
441683 VULNERABLE (rsync, fixed 3.0.2) #441690
293031 fixed (nx) #293031 [since FEDORA-2008-2258]
249840 VULNERABLE (tor)
+CVE-2008-1729 ignore (drupal) 6.x only
CVE-2008-1686 VULNERABLE (libfishsound, fixed 0.9.1) #441247
CVE-2008-1658 fixed (PolicyKit) #439995 [since FEDORA-2008-2987]
CVE-2008-1657 VULNERABLE (openssh, fixed 4.9) #440375
Index: f9
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f9,v
retrieving revision 1.182
retrieving revision 1.183
diff -u -r1.182 -r1.183
--- f9 10 Apr 2008 06:34:49 -0000 1.182
+++ f9 14 Apr 2008 08:48:58 -0000 1.183
@@ -4,8 +4,10 @@
# *CVE are items that need verification for Fedora 9
# (mozilla) = (gecko-libs dependent stuff)
+none version (swfdec, fixed 0.6.4) [since swfdec-0.6.4-1.fc9]
441683 VULNERABLE (rsync, fixed 3.0.2) [since rsync-3.0.2-0.fc9]
249840 VULNERABLE (tor)
+CVE-2008-1729 version (drupal, fixed 6.2) [since drupal-6.2-1.fc9]
CVE-2008-1686 VULNERABLE (libfishsound, fixed 0.9.1) #441248
CVE-2008-1658 VULNERABLE (PolicyKit) #439996
CVE-2008-1657 VULNERABLE (openssh, fixed 4.9) #440376
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.348
retrieving revision 1.349
diff -u -r1.348 -r1.349
--- fc7 10 Apr 2008 06:34:49 -0000 1.348
+++ fc7 14 Apr 2008 08:48:58 -0000 1.349
@@ -8,6 +8,7 @@
441683 VULNERABLE (rsync, fixed 3.0.2) #441689
293031 fixed (nx) #293031 [since FEDORA-2008-2258]
249840 version (tor, fixed 0.1.2.15) #249840 [since FEDORA-2007-1674]
+CVE-2008-1729 ignore (drupal) 6.x only
CVE-2008-1686 VULNERABLE (libfishsound, fixed 0.9.1) #441246
CVE-2008-1657 VULNERABLE (openssh, fixed 4.9) #280461
CVE-2008-1652 version (Perlbal, fixed 1.70) [since FEDORA-2008-2788]
16 years
fedora-security/audit f8, 1.191, 1.192 f9, 1.181, 1.182 fc7, 1.347, 1.348
by fedora-security-commits@redhat.com
Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv21978/audit
Modified Files:
f8 f9 fc7
Log Message:
add rsync
check-updates
(bah, i forgot to commit yesterday)
Index: f8
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f8,v
retrieving revision 1.191
retrieving revision 1.192
diff -u -r1.191 -r1.192
--- f8 7 Apr 2008 12:16:06 -0000 1.191
+++ f8 10 Apr 2008 06:34:49 -0000 1.192
@@ -4,36 +4,37 @@
# *CVE are items that need verification for Fedora 8
# (mozilla) = (gecko-libs dependent stuff)
+441683 VULNERABLE (rsync, fixed 3.0.2) #441690
293031 fixed (nx) #293031 [since FEDORA-2008-2258]
249840 VULNERABLE (tor)
CVE-2008-1686 VULNERABLE (libfishsound, fixed 0.9.1) #441247
-CVE-2008-1658 VULNERABLE (PolicyKit) #439995
+CVE-2008-1658 fixed (PolicyKit) #439995 [since FEDORA-2008-2987]
CVE-2008-1657 VULNERABLE (openssh, fixed 4.9) #440375
CVE-2008-1652 version (Perlbal, fixed 1.70) [since FEDORA-2008-2778]
-CVE-2008-1637 VULNERABLE (pdns-recursor, fixed 3.1.5) #440249
+CVE-2008-1637 fixed (pdns-recursor, fixed 3.1.5) #440249 [since FEDORA-2008-3036]
CVE-2008-1628 VULNERABLE (audit) [since audit-1.6.8-4.fc8]
CVE-2008-1614 version (mod_suphp, fixed 0.6.3) [since FEDORA-2008-2868]
CVE-2008-1612 VULNERABLE (squid, fixed 2.6.STABLE19) [since FEDORA-2008-2740]
CVE-2008-1568 VULNERABLE (comix) multiple issues tracked via bz#430635
CVE-2008-1567 VULNERABLE (phpmyadmin, fixed 2.11.5.1)
-CVE-2008-1563 VULNERABLE (wireshark, fixed 1.0) #435487
-CVE-2008-1562 VULNERABLE (wireshark, fixed 1.0) #435487
-CVE-2008-1561 VULNERABLE (wireshark, fixed 1.0) #435487
+CVE-2008-1563 fixed (wireshark, fixed 1.0) #435487 [since FEDORA-2008-3040]
+CVE-2008-1562 fixed (wireshark, fixed 1.0) #435487 [since FEDORA-2008-3040]
+CVE-2008-1561 fixed (wireshark, fixed 1.0) #435487 [since FEDORA-2008-3040]
CVE-2008-1552 fixed (libsilc, fixed 1.1.7) #438382 [since FEDORA-2008-2641]
CVE-2008-1532 version (Perlbal, fixed 1.70) #439056 [since FEDORA-2008-2778]
CVE-2008-1531 VULNERABLE (lighttpd) #439068
CVE-2008-1515 VULNERABLE (otrs) #439724
CVE-2008-1488 VULNERABLE (php-pecl-apc) #438847
CVE-2008-1483 ignore (openssh) was alrady fixed by another patch
-CVE-2008-1482 VULNERABLE (xine-lib) #438670 [since FEDORA-2008-2849]
+CVE-2008-1482 fixed (xine-lib) #438670 [since FEDORA-2008-2849]
CVE-2008-1474 fixed (roundup) #436547 [since FEDORA-2008-2370]
CVE-2008-1468 fixed (namazu) #438667 [since FEDORA-2008-2767]
CVE-2008-1467 fixed (centerim) #438871 [since FEDORA-2008-2869]
CVE-2008-1394 ignore (plone)
CVE-2008-1390 fixed (asterisk, fixed 1.4.19-rc3) #438133 [since FEDORA-2008-2554]
CVE-2008-1374 ignore (cups) only affects old cups versions in RHEL
-CVE-2008-1373 VULNERABLE (cups) #440040 [since FEDORA-2008-2131]
-CVE-2008-1372 VULNERABLE (bzip2, fixed 1.0.5) #439855
+CVE-2008-1373 fixed (cups) #440040 [since FEDORA-2008-2131]
+CVE-2008-1372 fixed (bzip2, fixed 1.0.5) #439855 [since FEDORA-2008-2970]
CVE-2008-1360 VULNERABLE (nagios) #437850
CVE-2008-1353 ignore (zabbix) #437848 Needs authorization
CVE-2008-1333 ignore (asterisk) not affected
@@ -60,9 +61,9 @@
CVE-2008-1099 VULNERABLE (moin) #438673
CVE-2008-1098 VULNERABLE (moin) #438673
CVE-2008-1078 ignore (am-utils) does not seem used by any other Fedora package
-CVE-2008-1072 VULNERABLE (wireshark, fixed 0.99.8) #435487
-CVE-2008-1071 VULNERABLE (wireshark, fixed 0.99.8) #435487
-CVE-2008-1070 VULNERABLE (wireshark, fixed 0.99.8) #435487
+CVE-2008-1072 fixed (wireshark, fixed 0.99.8) #435487 [since FEDORA-2008-3040]
+CVE-2008-1071 fixed (wireshark, fixed 0.99.8) #435487 [since FEDORA-2008-3040]
+CVE-2008-1070 fixed (wireshark, fixed 0.99.8) #435487 [since FEDORA-2008-3040]
CVE-2008-1066 version (php-Smarty) #435811 [since FEDORA-2008-1911]
CVE-2008-1066 VULNERABLE (gallery2) #438058 [since FEDORA-2008-2587]
CVE-2008-1066 VULNERABLE (php-pear-PhpDocumentor) #438062
@@ -74,7 +75,7 @@
CVE-2008-0928 fixed (kvm) #433564 [since FEDORA-2008-1973]
CVE-2008-0928 fixed (xen) #434639 [since FEDORA-2008-2057]
CVE-2008-0888 ignore (unzip) caught by glibc malloc checks
-CVE-2008-0887 VULNERABLE (gnome-screensaver) #440256
+CVE-2008-0887 fixed (gnome-screensaver) #440256 [since FEDORA-2008-3017]
CVE-2008-0882 fixed (cups, fixed 1.3.6) #433803 [since FEDORA-2008-1901]
CVE-2008-0782 fixed (moin) #432019 [since FEDORA-2008-1562]
CVE-2008-0781 fixed (moin) #432750 [since FEDORA-2008-1905]
@@ -167,7 +168,7 @@
CVE-2008-0063 fixed (krb5, fixed 1.6.4) #438023 [since FEDORA-2008-2647]
CVE-2008-0062 fixed (krb5, fixed 1.6.4) #438023 [since FEDORA-2008-2647]
CVE-2008-0053 version (cups, fixed 1.3.6) [since FEDORA-2008-1901]
-CVE-2008-0047 VULNERABLE (cups) #440040 [since FEDORA-2008-2131]
+CVE-2008-0047 fixed (cups) #440040 [since FEDORA-2008-2131]
CVE-2008-0008 fixed (pulseaudio) #425481 [since FEDORA-2008-0994]
CVE-2008-0006 fixed (libXfont) #429132 [since FEDORA-2008-0794]
CVE-2008-0005 fixed (httpd, fixed 2.2.8) #427982 [since FEDORA-2008-1711]
@@ -224,7 +225,7 @@
CVE-2007-6350 fixed (scponly) #429731 [since FEDORA-2008-1728] rsync vector only
CVE-2007-6348 ignore (squirrelmail) trojaned version was not shipped
CVE-2007-6328 ignore (dosbox) design decision
-CVE-2007-6321 VULNERABLE (roundcubemail) #423291
+CVE-2007-6321 VULNERABLE (roundcubemail) #423291 [since FEDORA-2008-2962]
CVE-2007-6318 VULNERABLE (wordpress)
CVE-2007-6313 ignore (mysql) 5.1+ only
CVE-2007-6304 ignore (mysql, fixed 5.0.52) federated engine not built
@@ -354,7 +355,7 @@
CVE-2007-4559 VULNERABLE (python, not fixed upstream) #315291 Upstream WONTFIX. See where we use the code.
CVE-2007-4476 backport (tar) #280961 [since FEDORA-2007-2800] tar-1.17-4.fc8
CVE-2007-4476 backport (cpio, not fixed 2.9) #363891 [since FEDORA-2007-2827] cpio-2.9-5.fc8
-CVE-2007-4400 VULNERABLE (konversation) #362921 [since FEDORA-2008-2062] Remove media script?
+CVE-2007-4400 fixed (konversation) #362921 [since FEDORA-2008-2062] Remove media script?
CVE-2007-4351 version (cups) #362971 [since FEDORA-2007-2982]
CVE-2007-4352 backport (xpdf) #372471 [since FEDORA-2007-3014]
CVE-2007-4352 backport (cups) [since FEDORA-2007-2982]
Index: f9
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f9,v
retrieving revision 1.181
retrieving revision 1.182
diff -u -r1.181 -r1.182
--- f9 7 Apr 2008 12:16:06 -0000 1.181
+++ f9 10 Apr 2008 06:34:49 -0000 1.182
@@ -4,6 +4,7 @@
# *CVE are items that need verification for Fedora 9
# (mozilla) = (gecko-libs dependent stuff)
+441683 VULNERABLE (rsync, fixed 3.0.2) [since rsync-3.0.2-0.fc9]
249840 VULNERABLE (tor)
CVE-2008-1686 VULNERABLE (libfishsound, fixed 0.9.1) #441248
CVE-2008-1658 VULNERABLE (PolicyKit) #439996
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.347
retrieving revision 1.348
diff -u -r1.347 -r1.348
--- fc7 7 Apr 2008 12:16:06 -0000 1.347
+++ fc7 10 Apr 2008 06:34:49 -0000 1.348
@@ -5,35 +5,36 @@
# (mozilla) = (firefox, seamonkey, thunderbird, yelp, devhelp, galeon, liferea. epiphany)
# A couple of first F7 updates were marked as FEDORA-2007-0001
+441683 VULNERABLE (rsync, fixed 3.0.2) #441689
293031 fixed (nx) #293031 [since FEDORA-2008-2258]
249840 version (tor, fixed 0.1.2.15) #249840 [since FEDORA-2007-1674]
CVE-2008-1686 VULNERABLE (libfishsound, fixed 0.9.1) #441246
CVE-2008-1657 VULNERABLE (openssh, fixed 4.9) #280461
CVE-2008-1652 version (Perlbal, fixed 1.70) [since FEDORA-2008-2788]
-CVE-2008-1637 VULNERABLE (pdns-recursor, fixed 3.1.5) #440248
+CVE-2008-1637 fixed (pdns-recursor, fixed 3.1.5) #440248 [since FEDORA-2008-3010]
CVE-2008-1628 ignore (audit) affected function not used by anything
CVE-2008-1614 version (mod_suphp, fixed 0.6.3) [since FEDORA-2008-2815]
CVE-2008-1612 backport (squid, fixed 2.6.STABLE19) [since FEDORA-2008-2729]
CVE-2008-1568 VULNERABLE (comix) multiple issues tracked via bz#430635
CVE-2008-1567 VULNERABLE (phpmyadmin, fixed 2.11.5.1)
-CVE-2008-1563 VULNERABLE (wireshark, fixed 1.0) #435485
-CVE-2008-1562 VULNERABLE (wireshark, fixed 1.0) #435485
-CVE-2008-1561 VULNERABLE (wireshark, fixed 1.0) #435485
+CVE-2008-1563 fixed (wireshark, fixed 1.0) #435485 [since FEDORA-2008-2941]
+CVE-2008-1562 fixed (wireshark, fixed 1.0) #435485 [since FEDORA-2008-2941]
+CVE-2008-1561 fixed (wireshark, fixed 1.0) #435485 [since FEDORA-2008-2941]
CVE-2008-1552 fixed (libsilc, fixed 1.1.7) #438382 [since FEDORA-2008-2641]
CVE-2008-1532 version (Perlbal, fixed 1.70) #439055 [since FEDORA-2008-2788]
CVE-2008-1531 VULNERABLE (lighttpd) #439067
CVE-2008-1515 VULNERABLE (otrs) #439723
CVE-2008-1488 VULNERABLE (php-pecl-apc) #438846
CVE-2008-1483 ignore (openssh) was alrady fixed by another patch
-CVE-2008-1482 VULNERABLE (xine-lib) #438669
+CVE-2008-1482 fixed (xine-lib) #438669 [since FEDORA-2008-2945]
CVE-2008-1474 fixed (roundup) #436548 [since FEDORA-2008-2471]
CVE-2008-1468 fixed (namazu) #438666 [since FEDORA-2008-2678]
CVE-2008-1467 fixed (centerim) #438871 [since FEDORA-2008-2869]
CVE-2008-1394 ignore (plone)
CVE-2008-1390 fixed (asterisk, fixed 1.4.19-rc3) #438132 [since FEDORA-2008-2620]
CVE-2008-1374 ignore (cups) only affects old cups versions in RHEL
-CVE-2008-1373 VULNERABLE (cups) #440042
-CVE-2008-1372 VULNERABLE (bzip2, fixed 1.0.5) #439855
+CVE-2008-1373 fixed (cups) #440042 [since FEDORA-2008-2897]
+CVE-2008-1372 fixed (bzip2, fixed 1.0.5) #439855 [since FEDORA-2008-2970]
CVE-2008-1360 VULNERABLE (nagios) #437851
CVE-2008-1353 ignore (zabbix) #437848 Needs authorization
CVE-2008-1333 ignore (asterisk) not affected
@@ -60,9 +61,9 @@
CVE-2008-1099 VULNERABLE (moin) #438672
CVE-2008-1098 VULNERABLE (moin) #438672
CVE-2008-1078 ignore (am-utils) does not seem used by any other Fedora package
-CVE-2008-1072 VULNERABLE (wireshark, fixed 0.99.8) #435485
-CVE-2008-1071 VULNERABLE (wireshark, fixed 0.99.8) #435485
-CVE-2008-1070 VULNERABLE (wireshark, fixed 0.99.8) #435485
+CVE-2008-1072 fixed (wireshark, fixed 0.99.8) #435485 [since FEDORA-2008-2941]
+CVE-2008-1071 fixed (wireshark, fixed 0.99.8) #435485 [since FEDORA-2008-2941]
+CVE-2008-1070 fixed (wireshark, fixed 0.99.8) #435485 [since FEDORA-2008-2941]
CVE-2008-1066 version (php-Smarty, fixed 2.6.19) #435812 [since FEDORA-2008-1928]
CVE-2008-1066 VULNERABLE (gallery2) #438059 [since FEDORA-2008-2650]
CVE-2008-1066 fixed (php-pear-PhpDocumentor) #438063 [since FEDORA-2008-2656]
@@ -74,7 +75,7 @@
CVE-2008-0928 fixed (kvm) #433565 [since FEDORA-2008-1993]
CVE-2008-0928 fixed (xen) #434638 [since FEDORA-2008-2083]
CVE-2008-0888 ignore (unzip) caught by glibc malloc checks
-CVE-2008-0887 VULNERABLE (gnome-screensaver) #440255
+CVE-2008-0887 fixed (gnome-screensaver) #440255 [since FEDORA-2008-2967]
CVE-2008-0806 fixed (wyrd) #433721 [since FEDORA-2008-1986]
CVE-2008-0882 fixed (cups, fixed 1.3.6) #433802 [since FEDORA-2008-1976]
CVE-2008-0782 fixed (moin) #432020 [since FEDORA-2008-1486]
@@ -161,12 +162,12 @@
CVE-2008-0123 fixed (moodle) #428731 [since FEDORA-2008-0610]
CVE-2008-0122 fixed (bind) #429149 [since FEDORA-2008-0904]
CVE-2008-0095 version (asterisk, fixed 1.4.17) AST-2008-001 [since FEDORA-2008-0198]
-CVE-2008-0073 VULNERABLE (xine-lib, fixed 1.1.11) #438191
+CVE-2008-0073 fixed (xine-lib, fixed 1.1.11) #438191 [since FEDORA-2008-2945]
CVE-2008-0072 fixed (evolution) #436080 [since FEDORA-2008-2290]
CVE-2008-0063 fixed (krb5, fixed 1.6.4) #438022 [since FEDORA-2008-2637]
CVE-2008-0062 fixed (krb5, fixed 1.6.4) #438022 [since FEDORA-2008-2637]
-CVE-2008-0053 VULNERABLE (cups) #440042
-CVE-2008-0047 VULNERABLE (cups) #440042
+CVE-2008-0053 fixed (cups) #440042 [since FEDORA-2008-2897]
+CVE-2008-0047 fixed (cups) #440042 [since FEDORA-2008-2897]
CVE-2008-0008 fixed (pulseaudio) #425481 [since FEDORA-2008-0994]
CVE-2008-0006 fixed (libXfont) #429131 [since FEDORA-2008-0891]
CVE-2008-0005 fixed (httpd, fixed 2.2.8) #427983 [since FEDORA-2008-1695]
@@ -222,7 +223,7 @@
CVE-2007-6350 fixed (scponly) #429731 [since FEDORA-2008-1728] rsync vector only
CVE-2007-6348 ignore (squirrelmail) trojaned version was not shipped
CVE-2007-6328 ignore (dosbox) design decision
-CVE-2007-6321 VULNERABLE (roundcubemail) #423281
+CVE-2007-6321 VULNERABLE (roundcubemail) #423281 [since FEDORA-2008-3019]
CVE-2007-6318 VULNERABLE (wordpress)
CVE-2007-6313 ignore (mysql) 5.1+ only
CVE-2007-6304 ignore (mysql, fixed 5.0.52) federated engine not built
@@ -432,7 +433,7 @@
CVE-2007-4465 version (httpd) [since FEDORA-2007-2214]
CVE-2007-4462 version (po4a) #253541 [since FEDORA-2007-1763]
CVE-2007-4460 backport (id3lib) #253553 [since FEDORA-2007-1774]
-CVE-2007-4400 VULNERABLE (konversation) #362911 [since FEDORA-2008-2122]
+CVE-2007-4400 fixed (konversation) #362911 [since FEDORA-2008-2122]
CVE-2007-4357 ignore (firefox) status bar can be overwrittten
CVE-2007-4352 backport (xpdf) #372461 [since FEDORA-2007-3031]
CVE-2007-4352 backport (cups) [since FEDORA-2007-3100]
16 years
fedora-security/audit f8, 1.190, 1.191 f9, 1.180, 1.181 fc7, 1.346, 1.347
by fedora-security-commits@redhat.com
Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv15435/audit
Modified Files:
f8 f9 fc7
Log Message:
add libfishsound
Index: f8
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f8,v
retrieving revision 1.190
retrieving revision 1.191
diff -u -r1.190 -r1.191
--- f8 3 Apr 2008 09:42:01 -0000 1.190
+++ f8 7 Apr 2008 12:16:06 -0000 1.191
@@ -6,6 +6,7 @@
293031 fixed (nx) #293031 [since FEDORA-2008-2258]
249840 VULNERABLE (tor)
+CVE-2008-1686 VULNERABLE (libfishsound, fixed 0.9.1) #441247
CVE-2008-1658 VULNERABLE (PolicyKit) #439995
CVE-2008-1657 VULNERABLE (openssh, fixed 4.9) #440375
CVE-2008-1652 version (Perlbal, fixed 1.70) [since FEDORA-2008-2778]
Index: f9
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f9,v
retrieving revision 1.180
retrieving revision 1.181
diff -u -r1.180 -r1.181
--- f9 3 Apr 2008 09:42:01 -0000 1.180
+++ f9 7 Apr 2008 12:16:06 -0000 1.181
@@ -5,6 +5,7 @@
# (mozilla) = (gecko-libs dependent stuff)
249840 VULNERABLE (tor)
+CVE-2008-1686 VULNERABLE (libfishsound, fixed 0.9.1) #441248
CVE-2008-1658 VULNERABLE (PolicyKit) #439996
CVE-2008-1657 VULNERABLE (openssh, fixed 4.9) #440376
CVE-2008-1652 version (Perlbal, fixed 1.70) [since Perlbal-1.70-1.fc9]
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.346
retrieving revision 1.347
diff -u -r1.346 -r1.347
--- fc7 3 Apr 2008 09:42:01 -0000 1.346
+++ fc7 7 Apr 2008 12:16:06 -0000 1.347
@@ -7,6 +7,7 @@
293031 fixed (nx) #293031 [since FEDORA-2008-2258]
249840 version (tor, fixed 0.1.2.15) #249840 [since FEDORA-2007-1674]
+CVE-2008-1686 VULNERABLE (libfishsound, fixed 0.9.1) #441246
CVE-2008-1657 VULNERABLE (openssh, fixed 4.9) #280461
CVE-2008-1652 version (Perlbal, fixed 1.70) [since FEDORA-2008-2788]
CVE-2008-1637 VULNERABLE (pdns-recursor, fixed 3.1.5) #440248
16 years
fedora-security/audit f8, 1.189, 1.190 f9, 1.179, 1.180 fc7, 1.345, 1.346
by fedora-security-commits@redhat.com
Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv27447/audit
Modified Files:
f8 f9 fc7
Log Message:
add another Perlbal issue fixed in 1.70
move mis-placed entries
Index: f8
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f8,v
retrieving revision 1.189
retrieving revision 1.190
diff -u -r1.189 -r1.190
--- f8 3 Apr 2008 09:08:54 -0000 1.189
+++ f8 3 Apr 2008 09:42:01 -0000 1.190
@@ -8,6 +8,7 @@
249840 VULNERABLE (tor)
CVE-2008-1658 VULNERABLE (PolicyKit) #439995
CVE-2008-1657 VULNERABLE (openssh, fixed 4.9) #440375
+CVE-2008-1652 version (Perlbal, fixed 1.70) [since FEDORA-2008-2778]
CVE-2008-1637 VULNERABLE (pdns-recursor, fixed 3.1.5) #440249
CVE-2008-1628 VULNERABLE (audit) [since audit-1.6.8-4.fc8]
CVE-2008-1614 version (mod_suphp, fixed 0.6.3) [since FEDORA-2008-2868]
@@ -17,12 +18,11 @@
CVE-2008-1563 VULNERABLE (wireshark, fixed 1.0) #435487
CVE-2008-1562 VULNERABLE (wireshark, fixed 1.0) #435487
CVE-2008-1561 VULNERABLE (wireshark, fixed 1.0) #435487
-CVE-2008-1552 fixed (libsilc) #438382 [since FEDORA-2008-2641]
+CVE-2008-1552 fixed (libsilc, fixed 1.1.7) #438382 [since FEDORA-2008-2641]
+CVE-2008-1532 version (Perlbal, fixed 1.70) #439056 [since FEDORA-2008-2778]
+CVE-2008-1531 VULNERABLE (lighttpd) #439068
CVE-2008-1515 VULNERABLE (otrs) #439724
CVE-2008-1488 VULNERABLE (php-pecl-apc) #438847
-CVE-2008-0806 fixed (wyrd) #433720 [since FEDORA-2008-1963]
-CVE-2008-1532 fixed (Perlbal) #439056 [since FEDORA-2008-2778]
-CVE-2008-1531 VULNERABLE (lighttpd) #439068
CVE-2008-1483 ignore (openssh) was alrady fixed by another patch
CVE-2008-1482 VULNERABLE (xine-lib) #438670 [since FEDORA-2008-2849]
CVE-2008-1474 fixed (roundup) #436547 [since FEDORA-2008-2370]
@@ -79,6 +79,7 @@
CVE-2008-0781 fixed (moin) #432750 [since FEDORA-2008-1905]
CVE-2008-0780 fixed (moin) #432750 [since FEDORA-2008-1905]
CVE-2008-0807 fixed (turba) #433319 [since FEDORA-2008-2087]
+CVE-2008-0806 fixed (wyrd) #433720 [since FEDORA-2008-1963]
CVE-2008-0786 version (cacti, fixed 0.8.7b) #432760
CVE-2008-0785 version (cacti, fixed 0.8.7b) #432760
CVE-2008-0784 version (cacti, fixed 0.8.7b) #432760
Index: f9
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f9,v
retrieving revision 1.179
retrieving revision 1.180
diff -u -r1.179 -r1.180
--- f9 3 Apr 2008 09:08:54 -0000 1.179
+++ f9 3 Apr 2008 09:42:01 -0000 1.180
@@ -4,10 +4,10 @@
# *CVE are items that need verification for Fedora 9
# (mozilla) = (gecko-libs dependent stuff)
-438382 VULNERABLE (libsilc) #438382
249840 VULNERABLE (tor)
CVE-2008-1658 VULNERABLE (PolicyKit) #439996
CVE-2008-1657 VULNERABLE (openssh, fixed 4.9) #440376
+CVE-2008-1652 version (Perlbal, fixed 1.70) [since Perlbal-1.70-1.fc9]
CVE-2008-1637 VULNERABLE (pdns-recursor, fixed 3.1.5) #440250
CVE-2008-1628 version (audit) [since audit-1.7-2.fc9]
CVE-2008-1614 version (mod_suphp, fixed 0.6.3) [since mod_suphp-0.6.3-1.fc9]
@@ -17,10 +17,11 @@
CVE-2008-1563 version (wireshark, fixed 1.0) #435488 [since wireshark-1.0.0-2.fc9]
CVE-2008-1562 version (wireshark, fixed 1.0) #435488 [since wireshark-1.0.0-2.fc9]
CVE-2008-1561 version (wireshark, fixed 1.0) #435488 [since wireshark-1.0.0-2.fc9]
+CVE-2008-1552 version (libsilc, fixed 1.1.7) #438382 [since libsilc-1.1.7-1.fc9]
+CVE-2008-1532 version (Perlbal, fixed 1.70) [since Perlbal-1.70-1.fc9]
+CVE-2008-1531 VULNERABLE (lighttpd) #439069
CVE-2008-1515 VULNERABLE (otrs) #439725
CVE-2008-1488 VULNERABLE (php-pecl-apc) #438848
-CVE-2008-0806 VULNERABLE (wyrd) #433722
-CVE-2008-1531 VULNERABLE (lighttpd) #439069
CVE-2008-1483 ignore (openssh) was alrady fixed by another patch
CVE-2008-1482 version (xine-lib) #438671 [since xine-lib-1.1.11.1-1.fc9]
CVE-2008-1474 version (roundup) #436549 [since roundup-1.4.4-1.fc9]
@@ -72,6 +73,7 @@
CVE-2008-0887 VULNERABLE (gnome-screensaver) #440257
CVE-2008-0882 version (cups, fixed 1.3.6) [since cups-1.3.6-1.fc9]
CVE-2008-0807 version (turba, fixed 2.1.7) #433318 [since turba-2.1.7-1.fc9]
+CVE-2008-0806 VULNERABLE (wyrd) #433722
CVE-2008-0786 version (cacti, fixed 0.8.7b) #432761 [since cacti-0.8.7b-1.fc9]
CVE-2008-0785 version (cacti, fixed 0.8.7b) #432761 [since cacti-0.8.7b-1.fc9]
CVE-2008-0784 version (cacti, fixed 0.8.7b) #432761 [since cacti-0.8.7b-1.fc9]
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.345
retrieving revision 1.346
diff -u -r1.345 -r1.346
--- fc7 3 Apr 2008 09:08:54 -0000 1.345
+++ fc7 3 Apr 2008 09:42:01 -0000 1.346
@@ -8,6 +8,7 @@
293031 fixed (nx) #293031 [since FEDORA-2008-2258]
249840 version (tor, fixed 0.1.2.15) #249840 [since FEDORA-2007-1674]
CVE-2008-1657 VULNERABLE (openssh, fixed 4.9) #280461
+CVE-2008-1652 version (Perlbal, fixed 1.70) [since FEDORA-2008-2788]
CVE-2008-1637 VULNERABLE (pdns-recursor, fixed 3.1.5) #440248
CVE-2008-1628 ignore (audit) affected function not used by anything
CVE-2008-1614 version (mod_suphp, fixed 0.6.3) [since FEDORA-2008-2815]
@@ -17,12 +18,11 @@
CVE-2008-1563 VULNERABLE (wireshark, fixed 1.0) #435485
CVE-2008-1562 VULNERABLE (wireshark, fixed 1.0) #435485
CVE-2008-1561 VULNERABLE (wireshark, fixed 1.0) #435485
-CVE-2008-1552 fixed (libsilc) #438382 [since FEDORA-2008-2641]
+CVE-2008-1552 fixed (libsilc, fixed 1.1.7) #438382 [since FEDORA-2008-2641]
+CVE-2008-1532 version (Perlbal, fixed 1.70) #439055 [since FEDORA-2008-2788]
+CVE-2008-1531 VULNERABLE (lighttpd) #439067
CVE-2008-1515 VULNERABLE (otrs) #439723
CVE-2008-1488 VULNERABLE (php-pecl-apc) #438846
-CVE-2008-0806 fixed (wyrd) #433721 [since FEDORA-2008-1986]
-CVE-2008-1532 fixed (Perlbal) #439055 [since FEDORA-2008-2788]
-CVE-2008-1531 VULNERABLE (lighttpd) #439067
CVE-2008-1483 ignore (openssh) was alrady fixed by another patch
CVE-2008-1482 VULNERABLE (xine-lib) #438669
CVE-2008-1474 fixed (roundup) #436548 [since FEDORA-2008-2471]
@@ -74,6 +74,7 @@
CVE-2008-0928 fixed (xen) #434638 [since FEDORA-2008-2083]
CVE-2008-0888 ignore (unzip) caught by glibc malloc checks
CVE-2008-0887 VULNERABLE (gnome-screensaver) #440255
+CVE-2008-0806 fixed (wyrd) #433721 [since FEDORA-2008-1986]
CVE-2008-0882 fixed (cups, fixed 1.3.6) #433802 [since FEDORA-2008-1976]
CVE-2008-0782 fixed (moin) #432020 [since FEDORA-2008-1486]
CVE-2008-0781 fixed (moin) #432749 [since FEDORA-2008-1880]
16 years, 1 month
fedora-security/audit f8, 1.188, 1.189 f9, 1.178, 1.179 fc7, 1.344, 1.345
by fedora-security-commits@redhat.com
Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv26817/audit
Modified Files:
f8 f9 fc7
Log Message:
add openssh, audit
note some CVE ids
note rawhide updates
check-updates
Index: f8
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f8,v
retrieving revision 1.188
retrieving revision 1.189
diff -u -r1.188 -r1.189
--- f8 2 Apr 2008 17:11:28 -0000 1.188
+++ f8 3 Apr 2008 09:08:54 -0000 1.189
@@ -4,11 +4,12 @@
# *CVE are items that need verification for Fedora 8
# (mozilla) = (gecko-libs dependent stuff)
-439982 VULNERABLE (PolicyKit) #439995
293031 fixed (nx) #293031 [since FEDORA-2008-2258]
-438382 fixed (libsilc) #438382 [since FEDORA-2008-2641]
249840 VULNERABLE (tor)
+CVE-2008-1658 VULNERABLE (PolicyKit) #439995
+CVE-2008-1657 VULNERABLE (openssh, fixed 4.9) #440375
CVE-2008-1637 VULNERABLE (pdns-recursor, fixed 3.1.5) #440249
+CVE-2008-1628 VULNERABLE (audit) [since audit-1.6.8-4.fc8]
CVE-2008-1614 version (mod_suphp, fixed 0.6.3) [since FEDORA-2008-2868]
CVE-2008-1612 VULNERABLE (squid, fixed 2.6.STABLE19) [since FEDORA-2008-2740]
CVE-2008-1568 VULNERABLE (comix) multiple issues tracked via bz#430635
@@ -16,21 +17,22 @@
CVE-2008-1563 VULNERABLE (wireshark, fixed 1.0) #435487
CVE-2008-1562 VULNERABLE (wireshark, fixed 1.0) #435487
CVE-2008-1561 VULNERABLE (wireshark, fixed 1.0) #435487
+CVE-2008-1552 fixed (libsilc) #438382 [since FEDORA-2008-2641]
CVE-2008-1515 VULNERABLE (otrs) #439724
CVE-2008-1488 VULNERABLE (php-pecl-apc) #438847
CVE-2008-0806 fixed (wyrd) #433720 [since FEDORA-2008-1963]
CVE-2008-1532 fixed (Perlbal) #439056 [since FEDORA-2008-2778]
CVE-2008-1531 VULNERABLE (lighttpd) #439068
CVE-2008-1483 ignore (openssh) was alrady fixed by another patch
-CVE-2008-1482 VULNERABLE (xine-lib) #438670
+CVE-2008-1482 VULNERABLE (xine-lib) #438670 [since FEDORA-2008-2849]
CVE-2008-1474 fixed (roundup) #436547 [since FEDORA-2008-2370]
CVE-2008-1468 fixed (namazu) #438667 [since FEDORA-2008-2767]
-CVE-2008-1467 VULNERABLE (centerim) #438871
+CVE-2008-1467 fixed (centerim) #438871 [since FEDORA-2008-2869]
CVE-2008-1394 ignore (plone)
CVE-2008-1390 fixed (asterisk, fixed 1.4.19-rc3) #438133 [since FEDORA-2008-2554]
CVE-2008-1374 ignore (cups) only affects old cups versions in RHEL
-CVE-2008-1373 VULNERABLE (cups) #440040
-CVE-2008-1372 VULNERABLE (bzip2, fixed 1.0.5) #439855
+CVE-2008-1373 VULNERABLE (cups) #440040 [since FEDORA-2008-2131]
+CVE-2008-1372 VULNERABLE (bzip2, fixed 1.0.5) #439855
CVE-2008-1360 VULNERABLE (nagios) #437850
CVE-2008-1353 ignore (zabbix) #437848 Needs authorization
CVE-2008-1333 ignore (asterisk) not affected
@@ -163,7 +165,7 @@
CVE-2008-0063 fixed (krb5, fixed 1.6.4) #438023 [since FEDORA-2008-2647]
CVE-2008-0062 fixed (krb5, fixed 1.6.4) #438023 [since FEDORA-2008-2647]
CVE-2008-0053 version (cups, fixed 1.3.6) [since FEDORA-2008-1901]
-CVE-2008-0047 VULNERABLE (cups) #440040
+CVE-2008-0047 VULNERABLE (cups) #440040 [since FEDORA-2008-2131]
CVE-2008-0008 fixed (pulseaudio) #425481 [since FEDORA-2008-0994]
CVE-2008-0006 fixed (libXfont) #429132 [since FEDORA-2008-0794]
CVE-2008-0005 fixed (httpd, fixed 2.2.8) #427982 [since FEDORA-2008-1711]
@@ -213,14 +215,14 @@
CVE-2007-6335 fixed (clamav, fixed 0.92) #426212 [since FEDORA-2008-0115]
CVE-2007-6437 fixed (syslog-ng) #426306 [since FEDORA-2008-0523]
CVE-2007-6430 version (asterisk, fixed 1.4.16) [since FEDORA-2007-4651]
-CVE-2007-6389 VULNERABLE (gnome-screensaver) #426170
+CVE-2007-6389 fixed (gnome-screensaver) #426170 [since FEDORA-2008-2872]
CVE-2007-6353 VULNERABLE (exiv2) #425923
CVE-2007-6352 fixed (libexif) #425631 [since FEDORA-2007-4667]
CVE-2007-6351 fixed (libexif) #425631 [since FEDORA-2007-4667]
CVE-2007-6350 fixed (scponly) #429731 [since FEDORA-2008-1728] rsync vector only
CVE-2007-6348 ignore (squirrelmail) trojaned version was not shipped
CVE-2007-6328 ignore (dosbox) design decision
-CVE-2007-6321 VULNERABLE (roundcubemail) #423291
+CVE-2007-6321 VULNERABLE (roundcubemail) #423291
CVE-2007-6318 VULNERABLE (wordpress)
CVE-2007-6313 ignore (mysql) 5.1+ only
CVE-2007-6304 ignore (mysql, fixed 5.0.52) federated engine not built
Index: f9
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f9,v
retrieving revision 1.178
retrieving revision 1.179
diff -u -r1.178 -r1.179
--- f9 2 Apr 2008 17:11:28 -0000 1.178
+++ f9 3 Apr 2008 09:08:54 -0000 1.179
@@ -4,23 +4,25 @@
# *CVE are items that need verification for Fedora 9
# (mozilla) = (gecko-libs dependent stuff)
-439982 VULNERABLE (PolicyKit) #439996
438382 VULNERABLE (libsilc) #438382
249840 VULNERABLE (tor)
+CVE-2008-1658 VULNERABLE (PolicyKit) #439996
+CVE-2008-1657 VULNERABLE (openssh, fixed 4.9) #440376
CVE-2008-1637 VULNERABLE (pdns-recursor, fixed 3.1.5) #440250
+CVE-2008-1628 version (audit) [since audit-1.7-2.fc9]
CVE-2008-1614 version (mod_suphp, fixed 0.6.3) [since mod_suphp-0.6.3-1.fc9]
CVE-2008-1612 ignore (squid, fixed 2.6.STABLE19) 3.0 was not affected
-CVE-2008-1568 VULNERABLE (comix) multiple issues tracked via bz#430635
+CVE-2008-1568 fixed (comix) [since comix-3.6.4-6.fc9]
CVE-2008-1567 version (phpmyadmin, fixed 2.11.5.1) [since phpMyAdmin-2.11.5.1-1.fc9]
-CVE-2008-1563 VULNERABLE (wireshark, fixed 1.0) #435488
-CVE-2008-1562 VULNERABLE (wireshark, fixed 1.0) #435488
-CVE-2008-1561 VULNERABLE (wireshark, fixed 1.0) #435488
+CVE-2008-1563 version (wireshark, fixed 1.0) #435488 [since wireshark-1.0.0-2.fc9]
+CVE-2008-1562 version (wireshark, fixed 1.0) #435488 [since wireshark-1.0.0-2.fc9]
+CVE-2008-1561 version (wireshark, fixed 1.0) #435488 [since wireshark-1.0.0-2.fc9]
CVE-2008-1515 VULNERABLE (otrs) #439725
CVE-2008-1488 VULNERABLE (php-pecl-apc) #438848
CVE-2008-0806 VULNERABLE (wyrd) #433722
CVE-2008-1531 VULNERABLE (lighttpd) #439069
CVE-2008-1483 ignore (openssh) was alrady fixed by another patch
-CVE-2008-1482 VULNERABLE (xine-lib) #438671
+CVE-2008-1482 version (xine-lib) #438671 [since xine-lib-1.1.11.1-1.fc9]
CVE-2008-1474 version (roundup) #436549 [since roundup-1.4.4-1.fc9]
CVE-2008-1468 VULNERABLE (namazu) #438668
CVE-2008-1467 fixed (centerim) #438871
@@ -53,9 +55,9 @@
CVE-2008-1099 VULNERABLE (moin) #438674
CVE-2008-1098 VULNERABLE (moin) #438674
CVE-2008-1078 VULNERABLE (am-utils) #437746
-CVE-2008-1072 VULNERABLE (wireshark, fixed 0.99.8) #435488
-CVE-2008-1071 VULNERABLE (wireshark, fixed 0.99.8) #435488
-CVE-2008-1070 VULNERABLE (wireshark, fixed 0.99.8) #435488
+CVE-2008-1072 version (wireshark, fixed 0.99.8) #435488 [since wireshark-1.0.0-2.fc9]
+CVE-2008-1071 version (wireshark, fixed 0.99.8) #435488 [since wireshark-1.0.0-2.fc9]
+CVE-2008-1070 version (wireshark, fixed 0.99.8) #435488 [since wireshark-1.0.0-2.fc9]
CVE-2008-1066 version (php-Smarty) #435813 [since php-Smarty-2.6.19-1.fc9]
CVE-2008-1066 VULNERABLE (gallery2) #438060
CVE-2008-1066 VULNERABLE (php-pear-PhpDocumentor) #438064
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.344
retrieving revision 1.345
diff -u -r1.344 -r1.345
--- fc7 2 Apr 2008 17:11:28 -0000 1.344
+++ fc7 3 Apr 2008 09:08:54 -0000 1.345
@@ -6,9 +6,10 @@
# A couple of first F7 updates were marked as FEDORA-2007-0001
293031 fixed (nx) #293031 [since FEDORA-2008-2258]
-438382 fixed (libsilc) #438382 [since FEDORA-2008-2641]
249840 version (tor, fixed 0.1.2.15) #249840 [since FEDORA-2007-1674]
+CVE-2008-1657 VULNERABLE (openssh, fixed 4.9) #280461
CVE-2008-1637 VULNERABLE (pdns-recursor, fixed 3.1.5) #440248
+CVE-2008-1628 ignore (audit) affected function not used by anything
CVE-2008-1614 version (mod_suphp, fixed 0.6.3) [since FEDORA-2008-2815]
CVE-2008-1612 backport (squid, fixed 2.6.STABLE19) [since FEDORA-2008-2729]
CVE-2008-1568 VULNERABLE (comix) multiple issues tracked via bz#430635
@@ -16,6 +17,7 @@
CVE-2008-1563 VULNERABLE (wireshark, fixed 1.0) #435485
CVE-2008-1562 VULNERABLE (wireshark, fixed 1.0) #435485
CVE-2008-1561 VULNERABLE (wireshark, fixed 1.0) #435485
+CVE-2008-1552 fixed (libsilc) #438382 [since FEDORA-2008-2641]
CVE-2008-1515 VULNERABLE (otrs) #439723
CVE-2008-1488 VULNERABLE (php-pecl-apc) #438846
CVE-2008-0806 fixed (wyrd) #433721 [since FEDORA-2008-1986]
@@ -25,12 +27,12 @@
CVE-2008-1482 VULNERABLE (xine-lib) #438669
CVE-2008-1474 fixed (roundup) #436548 [since FEDORA-2008-2471]
CVE-2008-1468 fixed (namazu) #438666 [since FEDORA-2008-2678]
-CVE-2008-1467 VULNERABLE (centerim) #438871
+CVE-2008-1467 fixed (centerim) #438871 [since FEDORA-2008-2869]
CVE-2008-1394 ignore (plone)
CVE-2008-1390 fixed (asterisk, fixed 1.4.19-rc3) #438132 [since FEDORA-2008-2620]
CVE-2008-1374 ignore (cups) only affects old cups versions in RHEL
CVE-2008-1373 VULNERABLE (cups) #440042
-CVE-2008-1372 VULNERABLE (bzip2, fixed 1.0.5) #439855
+CVE-2008-1372 VULNERABLE (bzip2, fixed 1.0.5) #439855
CVE-2008-1360 VULNERABLE (nagios) #437851
CVE-2008-1353 ignore (zabbix) #437848 Needs authorization
CVE-2008-1333 ignore (asterisk) not affected
@@ -211,14 +213,14 @@
CVE-2007-6335 fixed (clamav, fixed 0.92) #426211 [since FEDORA-2008-0170]
CVE-2007-6437 fixed (syslog-ng) #426305 [since FEDORA-2008-0559]
CVE-2007-6430 version (asterisk, fixed 1.4.16) [since FEDORA-2007-4593]
-CVE-2007-6389 VULNERABLE (gnome-screensaver) #426169
+CVE-2007-6389 fixed (gnome-screensaver) #426169 [since FEDORA-2008-2818]
CVE-2007-6353 fixed (exiv2) #425922 [since FEDORA-2007-4551]
CVE-2007-6352 fixed (libexif) #425621 [since FEDORA-2007-4608]
CVE-2007-6351 fixed (libexif) #425621 [since FEDORA-2007-4608]
CVE-2007-6350 fixed (scponly) #429731 [since FEDORA-2008-1728] rsync vector only
CVE-2007-6348 ignore (squirrelmail) trojaned version was not shipped
CVE-2007-6328 ignore (dosbox) design decision
-CVE-2007-6321 VULNERABLE (roundcubemail) #423281
+CVE-2007-6321 VULNERABLE (roundcubemail) #423281
CVE-2007-6318 VULNERABLE (wordpress)
CVE-2007-6313 ignore (mysql) 5.1+ only
CVE-2007-6304 ignore (mysql, fixed 5.0.52) federated engine not built
16 years, 1 month
fedora-security/audit f8, 1.187, 1.188 f9, 1.177, 1.178 fc7, 1.343, 1.344
by fedora-security-commits@redhat.com
Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv26325/audit
Modified Files:
f8 f9 fc7
Log Message:
note pdns-recursor cve id
Index: f8
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f8,v
retrieving revision 1.187
retrieving revision 1.188
diff -u -r1.187 -r1.188
--- f8 2 Apr 2008 15:48:32 -0000 1.187
+++ f8 2 Apr 2008 17:11:28 -0000 1.188
@@ -4,11 +4,11 @@
# *CVE are items that need verification for Fedora 8
# (mozilla) = (gecko-libs dependent stuff)
-440247 VULNERABLE (pdns-recursor, fixed 3.1.5) #440249
439982 VULNERABLE (PolicyKit) #439995
293031 fixed (nx) #293031 [since FEDORA-2008-2258]
438382 fixed (libsilc) #438382 [since FEDORA-2008-2641]
249840 VULNERABLE (tor)
+CVE-2008-1637 VULNERABLE (pdns-recursor, fixed 3.1.5) #440249
CVE-2008-1614 version (mod_suphp, fixed 0.6.3) [since FEDORA-2008-2868]
CVE-2008-1612 VULNERABLE (squid, fixed 2.6.STABLE19) [since FEDORA-2008-2740]
CVE-2008-1568 VULNERABLE (comix) multiple issues tracked via bz#430635
Index: f9
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f9,v
retrieving revision 1.177
retrieving revision 1.178
diff -u -r1.177 -r1.178
--- f9 2 Apr 2008 15:48:32 -0000 1.177
+++ f9 2 Apr 2008 17:11:28 -0000 1.178
@@ -4,10 +4,10 @@
# *CVE are items that need verification for Fedora 9
# (mozilla) = (gecko-libs dependent stuff)
-440247 VULNERABLE (pdns-recursor, fixed 3.1.5) #440250
439982 VULNERABLE (PolicyKit) #439996
438382 VULNERABLE (libsilc) #438382
249840 VULNERABLE (tor)
+CVE-2008-1637 VULNERABLE (pdns-recursor, fixed 3.1.5) #440250
CVE-2008-1614 version (mod_suphp, fixed 0.6.3) [since mod_suphp-0.6.3-1.fc9]
CVE-2008-1612 ignore (squid, fixed 2.6.STABLE19) 3.0 was not affected
CVE-2008-1568 VULNERABLE (comix) multiple issues tracked via bz#430635
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.343
retrieving revision 1.344
diff -u -r1.343 -r1.344
--- fc7 2 Apr 2008 15:48:32 -0000 1.343
+++ fc7 2 Apr 2008 17:11:28 -0000 1.344
@@ -5,10 +5,10 @@
# (mozilla) = (firefox, seamonkey, thunderbird, yelp, devhelp, galeon, liferea. epiphany)
# A couple of first F7 updates were marked as FEDORA-2007-0001
-440247 VULNERABLE (pdns-recursor, fixed 3.1.5) #440248
293031 fixed (nx) #293031 [since FEDORA-2008-2258]
438382 fixed (libsilc) #438382 [since FEDORA-2008-2641]
249840 version (tor, fixed 0.1.2.15) #249840 [since FEDORA-2007-1674]
+CVE-2008-1637 VULNERABLE (pdns-recursor, fixed 3.1.5) #440248
CVE-2008-1614 version (mod_suphp, fixed 0.6.3) [since FEDORA-2008-2815]
CVE-2008-1612 backport (squid, fixed 2.6.STABLE19) [since FEDORA-2008-2729]
CVE-2008-1568 VULNERABLE (comix) multiple issues tracked via bz#430635
16 years, 1 month
fedora-security/audit f8, 1.186, 1.187 f9, 1.176, 1.177 fc7, 1.342, 1.343
by fedora-security-commits@redhat.com
Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv6472/audit
Modified Files:
f8 f9 fc7
Log Message:
add gnome-screensaver
node mod_suphp cve id
Index: f8
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f8,v
retrieving revision 1.186
retrieving revision 1.187
diff -u -r1.186 -r1.187
--- f8 2 Apr 2008 14:35:47 -0000 1.186
+++ f8 2 Apr 2008 15:48:32 -0000 1.187
@@ -6,10 +6,10 @@
440247 VULNERABLE (pdns-recursor, fixed 3.1.5) #440249
439982 VULNERABLE (PolicyKit) #439995
-439687 VULNERABLE (mod_suphp, fixed 0.6.3)
293031 fixed (nx) #293031 [since FEDORA-2008-2258]
438382 fixed (libsilc) #438382 [since FEDORA-2008-2641]
249840 VULNERABLE (tor)
+CVE-2008-1614 version (mod_suphp, fixed 0.6.3) [since FEDORA-2008-2868]
CVE-2008-1612 VULNERABLE (squid, fixed 2.6.STABLE19) [since FEDORA-2008-2740]
CVE-2008-1568 VULNERABLE (comix) multiple issues tracked via bz#430635
CVE-2008-1567 VULNERABLE (phpmyadmin, fixed 2.11.5.1)
@@ -71,6 +71,7 @@
CVE-2008-0928 fixed (kvm) #433564 [since FEDORA-2008-1973]
CVE-2008-0928 fixed (xen) #434639 [since FEDORA-2008-2057]
CVE-2008-0888 ignore (unzip) caught by glibc malloc checks
+CVE-2008-0887 VULNERABLE (gnome-screensaver) #440256
CVE-2008-0882 fixed (cups, fixed 1.3.6) #433803 [since FEDORA-2008-1901]
CVE-2008-0782 fixed (moin) #432019 [since FEDORA-2008-1562]
CVE-2008-0781 fixed (moin) #432750 [since FEDORA-2008-1905]
Index: f9
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f9,v
retrieving revision 1.176
retrieving revision 1.177
diff -u -r1.176 -r1.177
--- f9 2 Apr 2008 14:35:47 -0000 1.176
+++ f9 2 Apr 2008 15:48:32 -0000 1.177
@@ -6,9 +6,9 @@
440247 VULNERABLE (pdns-recursor, fixed 3.1.5) #440250
439982 VULNERABLE (PolicyKit) #439996
-439687 version (mod_suphp, fixed 0.6.3) [since mod_suphp-0.6.3-1.fc9]
438382 VULNERABLE (libsilc) #438382
249840 VULNERABLE (tor)
+CVE-2008-1614 version (mod_suphp, fixed 0.6.3) [since mod_suphp-0.6.3-1.fc9]
CVE-2008-1612 ignore (squid, fixed 2.6.STABLE19) 3.0 was not affected
CVE-2008-1568 VULNERABLE (comix) multiple issues tracked via bz#430635
CVE-2008-1567 version (phpmyadmin, fixed 2.11.5.1) [since phpMyAdmin-2.11.5.1-1.fc9]
@@ -67,6 +67,7 @@
CVE-2008-0928 backport (kvm) #433566 [since kvm-61-2.fc9]
CVE-2008-0928 backport (xen) [since xen-3.2.0-8.fc9]
CVE-2008-0888 backport (unzip) #437927 [since unzip-5.52-9.fc9]
+CVE-2008-0887 VULNERABLE (gnome-screensaver) #440257
CVE-2008-0882 version (cups, fixed 1.3.6) [since cups-1.3.6-1.fc9]
CVE-2008-0807 version (turba, fixed 2.1.7) #433318 [since turba-2.1.7-1.fc9]
CVE-2008-0786 version (cacti, fixed 0.8.7b) #432761 [since cacti-0.8.7b-1.fc9]
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.342
retrieving revision 1.343
diff -u -r1.342 -r1.343
--- fc7 2 Apr 2008 14:35:47 -0000 1.342
+++ fc7 2 Apr 2008 15:48:32 -0000 1.343
@@ -6,10 +6,10 @@
# A couple of first F7 updates were marked as FEDORA-2007-0001
440247 VULNERABLE (pdns-recursor, fixed 3.1.5) #440248
-439687 VULNERABLE (mod_suphp, fixed 0.6.3)
293031 fixed (nx) #293031 [since FEDORA-2008-2258]
438382 fixed (libsilc) #438382 [since FEDORA-2008-2641]
249840 version (tor, fixed 0.1.2.15) #249840 [since FEDORA-2007-1674]
+CVE-2008-1614 version (mod_suphp, fixed 0.6.3) [since FEDORA-2008-2815]
CVE-2008-1612 backport (squid, fixed 2.6.STABLE19) [since FEDORA-2008-2729]
CVE-2008-1568 VULNERABLE (comix) multiple issues tracked via bz#430635
CVE-2008-1567 VULNERABLE (phpmyadmin, fixed 2.11.5.1)
@@ -71,6 +71,7 @@
CVE-2008-0928 fixed (kvm) #433565 [since FEDORA-2008-1993]
CVE-2008-0928 fixed (xen) #434638 [since FEDORA-2008-2083]
CVE-2008-0888 ignore (unzip) caught by glibc malloc checks
+CVE-2008-0887 VULNERABLE (gnome-screensaver) #440255
CVE-2008-0882 fixed (cups, fixed 1.3.6) #433802 [since FEDORA-2008-1976]
CVE-2008-0782 fixed (moin) #432020 [since FEDORA-2008-1486]
CVE-2008-0781 fixed (moin) #432749 [since FEDORA-2008-1880]
16 years, 1 month