Author: thoger
Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv30758/audit
Modified Files:
f8 f9 fc7
Log Message:
add openldap, moin, turba
note some CVE ids
get updates
add fixed in for xine-lib
Index: f8
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f8,v
retrieving revision 1.114
retrieving revision 1.115
diff -u -r1.114 -r1.115
--- f8 6 Feb 2008 13:14:35 -0000 1.114
+++ f8 8 Feb 2008 14:47:15 -0000 1.115
@@ -9,18 +9,21 @@
GENERIC-MAP-NOMATCH VULNERABLE (comix) multiple issues tracked via #430635
GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since FEDORA-2008-1043]
-GENERIC-MAP-NOMATCH fixed (deluge, fixed 0.5.8.3) [since FEDORA-2008-1287]
-GENERIC-MAP-NOMATCH fixed (rb_libtorrent) [since FEDORA-2008-1198]
GENERIC-MAP-NOMATCH VULNERABLE (gnumeric, fixed 1.8.1) #431228 SA28725
-GENERIC-MAP-NOMATCH VULNERABLE (wordpress, fixed 2.3.3) #431549
GENERIC-MAP-NOMATCH VULNERABLE (pcre, fixed 7.6) #431677
GENERIC-MAP-NOMATCH VULNERABLE (glib2) #431679 regex issue fixed in pcre-7.6
+GENERIC-MAP-NOMATCH VULNERABLE (moin) #432019
+GENERIC-MAP-NOMATCH VULNERABLE (turba) #432027
+CVE-2008-0664 VULNERABLE (wordpress, fixed 2.3.3) #431549
+CVE-2008-0658 VULNERABLE (openldap) #432012
+CVE-2008-0646 fixed (deluge, fixed 0.5.8.3) [since FEDORA-2008-1287]
+CVE-2008-0646 fixed (rb_libtorrent) [since FEDORA-2008-1198]
CVE-2008-0564 VULNERABLE (mailman, fixed 2.1.10b1)
CVE-2008-0554 version (netpbm, fixed 10.27)
CVE-2008-0553 VULNERABLE (perl-Tk) #431532
CVE-2008-0553 VULNERABLE (tk, fixed 8.5.1)
CVE-2008-0544 fixed (SDL_image) #430694 [since FEDORA-2008-1208] ILBM overflow
-CVE-2008-0486 VULNERABLE (xine-lib) #431543
+CVE-2008-0486 VULNERABLE (xine-lib, fixed 1.1.10.1) #431543
CVE-2008-0460 VULNERABLE (mediawiki) #430288
CVE-2008-0404 fixed (mantis) #429552 [since FEDORA-2008-0796]
CVE-2008-0386 fixed (xdg-utils) #429513 [since FEDORA-2008-1015]
Index: f9
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f9,v
retrieving revision 1.105
retrieving revision 1.106
diff -u -r1.105 -r1.106
--- f9 6 Feb 2008 13:14:35 -0000 1.105
+++ f9 8 Feb 2008 14:47:15 -0000 1.106
@@ -9,18 +9,21 @@
GENERIC-MAP-NOMATCH VULNERABLE (comix) multiple issues tracked via #430635
GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since xine-lib-1.1.10-2.fc9]
-GENERIC-MAP-NOMATCH version (deluge, fixed 0.5.8.3) [since deluge-0.5.8.3-1.fc9]
-GENERIC-MAP-NOMATCH backport (rb_libtorrent) [since rb_libtorrent-0.12-3.fc9]
GENERIC-MAP-NOMATCH version (gnumeric, fixed 1.8.1) [since gnumeric-1.8.1-1.fc9] SA28725
-GENERIC-MAP-NOMATCH VULNERABLE (wordpress, fixed 2.3.3) #431551
GENERIC-MAP-NOMATCH VULNERABLE (pcre, fixed 7.6) #431678
-GENERIC-MAP-NOMATCH VULNERABLE (glib2) #431680 regex issue fixed in pcre-7.6
+GENERIC-MAP-NOMATCH version (glib2) #431680 regex issue fixed in pcre-7.6 [since
glib2-2.15.4-2.fc9]
+GENERIC-MAP-NOMATCH VULNERABLE (moin) #432021
+GENERIC-MAP-NOMATCH VULNERABLE (turba) #432027
+CVE-2008-0664 VULNERABLE (wordpress, fixed 2.3.3) #431551
+CVE-2008-0658 VULNERABLE (openldap) #432014
+CVE-2008-0646 version (deluge, fixed 0.5.8.3) [since deluge-0.5.8.3-1.fc9]
+CVE-2008-0646 backport (rb_libtorrent) [since rb_libtorrent-0.12-3.fc9]
CVE-2008-0564 backport (mailman, fixed 2.1.10b1) [since mailman-2.1.9-10.fc9]
CVE-2008-0554 version (netpbm, fixed 10.27)
CVE-2008-0553 backport (perl-Tk) #431529 [since perl-Tk-804.028-3.fc9]
CVE-2008-0553 backport (tk, fixed 8.5.1) [since tk-8.5.0-4.fc9]
CVE-2008-0544 backport (SDL_image) #430696 ILBM overflow [since SDL_image-1.2.6-5.fc9]
-CVE-2008-0486 VULNERABLE (xine-lib) #431544
+CVE-2008-0486 VULNERABLE (xine-lib, fixed 1.1.10.1) #431544
CVE-2008-0460 VULNERABLE (mediawiki) #430289
CVE-2008-0404 fixed (mantis) #429552 [since mantis-1.1.1-1.fc9]
CVE-2008-0386 fixed (xdg-utils) #429513 [since xdg-utils-1_0_2-4_fc9]
Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.270
retrieving revision 1.271
diff -u -r1.270 -r1.271
--- fc7 6 Feb 2008 13:14:35 -0000 1.270
+++ fc7 8 Feb 2008 14:47:15 -0000 1.271
@@ -10,17 +10,20 @@
GENERIC-MAP-NOMATCH VULNERABLE (comix) multiple issues tracked via #430635
GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since FEDORA-2008-1047]
-GENERIC-MAP-NOMATCH fixed (deluge, fixed 0.5.8.3) [since FEDORA-2008-1198]
-GENERIC-MAP-NOMATCH fixed (rb_libtorrent) [since FEDORA-2008-1245]
-GENERIC-MAP-NOMATCH VULNERABLE (gnumeric, fixed 1.8.1) #431228 SA28725
-GENERIC-MAP-NOMATCH VULNERABLE (wordpress, fixed 2.3.3) #431550
+GENERIC-MAP-NOMATCH fixed (gnumeric, fixed 1.8.1) #431228 [since FEDORA-2008-1313]
SA28725
GENERIC-MAP-NOMATCH VULNERABLE (pcre, fixed 7.6) #431676
+GENERIC-MAP-NOMATCH VULNERABLE (moin) #432020
+GENERIC-MAP-NOMATCH VULNERABLE (turba) #432027
+CVE-2008-0664 VULNERABLE (wordpress, fixed 2.3.3) #431550
+CVE-2008-0658 VULNERABLE (openldap) #432013
+CVE-2008-0646 fixed (deluge, fixed 0.5.8.3) [since FEDORA-2008-1198]
+CVE-2008-0646 fixed (rb_libtorrent) [since FEDORA-2008-1245]
CVE-2008-0564 VULNERABLE (mailman, fixed 2.1.10b1)
CVE-2008-0554 version (netpbm, fixed 10.27)
-CVE-2008-0553 VULNERABLE (perl-Tk) #431531
+CVE-2008-0553 fixed (perl-Tk) #431531 [since FEDORA-2008-1384]
CVE-2008-0553 VULNERABLE (tk, fixed 8.5.1)
CVE-2008-0544 fixed (SDL_image) #430695 [since FEDORA-2008-1208] ILBM overflow
-CVE-2008-0486 VULNERABLE (xine-lib) #431542
+CVE-2008-0486 VULNERABLE (xine-lib, fixed 1.1.10.1) #431542
CVE-2008-0460 VULNERABLE (mediawiki) #430287
CVE-2008-0404 fixed (mantis) #429552 [since FEDORA-2008-0796]
CVE-2008-0386 fixed (xdg-utils) #429513 [since FEDORA-2008-1015]
@@ -49,7 +52,7 @@
CVE-2008-0006 fixed (libXfont) #429131 [since FEDORA-2008-0891]
CVE-2008-0005 VULNERABLE (httpd, fixed 2.2.8) #427983
CVE-2008-0003 fixed (tog-pegasus, fixed 2.7.0) #427828 [since FEDORA-2008-0506]
-CVE-2007-6698 VULNERABLE (openldap, fixed 2.3.36) #431409
+CVE-2007-6698 fixed (openldap, fixed 2.3.36) #431409 [since FEDORA-2008-1307]
CVE-2007-6697 fixed (SDL_image, fixed 1.2.7) #430239 [since FEDORA-2008-1231]
CVE-2007-6693 version (gallery2, fixed 2.2.4) [since FEDORA-2007-4777]
CVE-2007-6692 version (gallery2, fixed 2.2.4) [since FEDORA-2007-4777]
@@ -192,13 +195,13 @@
CVE-2007-5395 version (link-grammar) #372341 [since FEDORA-2007-3339]
CVE-2007-5393 backport (xpdf) #372461 [since FEDORA-2007-3031]
CVE-2007-5393 backport (cups) [since FEDORA-2007-3100]
-CVE-2007-5393 VULNERABLE (poppler) #372501
+CVE-2007-5393 VULNERABLE (poppler) #372501
CVE-2007-5393 backport (kdegraphics) #372561 [since FEDORA-2007-2985]
CVE-2007-5393 backport (koffice) #372591 [since FEDORA-2007-3059]
CVE-2007-5393 backport (tetex) #372651 [since FEDORA-2007-3390]
CVE-2007-5392 backport (xpdf) #372461 [since FEDORA-2007-3031]
CVE-2007-5392 backport (cups) [since FEDORA-2007-3100]
-CVE-2007-5392 VULNERABLE (poppler) #372501
+CVE-2007-5392 VULNERABLE (poppler) #372501
CVE-2007-5392 backport (kdegraphics) #372561 [since FEDORA-2007-2985]
CVE-2007-5392 backport (koffice) #372591 [since FEDORA-2007-3059]
CVE-2007-5392 backport (tetex) #372651 [since FEDORA-2007-3390]
@@ -304,7 +307,7 @@
CVE-2007-4357 ignore (firefox) status bar can be overwrittten
CVE-2007-4352 backport (xpdf) #372461 [since FEDORA-2007-3031]
CVE-2007-4352 backport (cups) [since FEDORA-2007-3100]
-CVE-2007-4352 VULNERABLE (poppler) #372501
+CVE-2007-4352 VULNERABLE (poppler) #372501
CVE-2007-4352 backport (kdegraphics) #372561 [since FEDORA-2007-2985]
CVE-2007-4352 backport (koffice) #372591 [since FEDORA-2007-3059]
CVE-2007-4352 backport (tetex) #372651 [since FEDORA-2007-3390]
@@ -401,7 +404,7 @@
CVE-2007-3388 backport (qt, fixed qt-3.3.8-20070727) patch available: 170529.diff [since
FEDORA-2007-2216]
CVE-2007-3387 version (xpdf, fixed 3.02pl1) [since FEDORA-2007-1383]
CVE-2007-3387 backport (tetex) #251514 [since FEDORA-2007-1547]
-CVE-2007-3387 VULNERABLE (poppler) #251512
+CVE-2007-3387 VULNERABLE (poppler) #251512
CVE-2007-3387 backport (kdegraphics) #251509 [since FEDORA-2007-1594]
CVE-2007-3387 backport (koffice) #251522 [since FEDORA-2007-1614]
CVE-2007-3387 backport (cups) #251518 [since FEDORA-2007-1541]