Author: lkundrak Update of /cvs/fedora/fedora-security/audit In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv15692 Modified Files: fc6 fc7 Log Message: releng pushed loooots of stuff Index: fc6 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/fc6,v retrieving revision 1.251 retrieving revision 1.252 diff -u -r1.251 -r1.252 --- fc6 4 Sep 2007 21:12:24 -0000 1.251 +++ fc6 5 Sep 2007 08:30:51 -0000 1.252 @@ -5,9 +5,9 @@ # (mozilla) = (firefox, seamonkey, thunderbird, yelp, devhelp, galeon, liferea. epiphany) # Up to date CVE as of CVE email 20070823 -# Up to date FC6 as of 20070827 +# Up to date FC6 as of 20070905 -CVE-2007-4565 VULNERABLE (fetchmail) #260881 +CVE-2007-4565 backport (fetchmail) #260881 [since FEDORA-2007-689] CVE-2007-4357 ignore (firefox) status bar can be overwrittten CVE-2007-4255 ignore (php) msql extension not shipped CVE-2007-4251 ignore (openoffice.org) just a crash @@ -16,12 +16,15 @@ CVE-2007-4224 ignore (kdebase) too obvious -- mouse pointer indicates script activity CVE-2007-4211 version (dovecot, fixed 1.0.3) #251009 [since FEDORA-2007-664] CVE-2007-4134 VULNERABLE (star, fixed 1.5a84) #254129 -CVE-2007-4131 VULNERABLE (tar) #253684 -CVE-2007-4029 VULNERABLE (libvorbis) #250600 +CVE-2007-4131 backport (tar) #253684 [since FEDORA-2007-683] +CVE-2007-4029 backport (libvorbis) #250600 [since FEDORA-2007-677] CVE-2007-4168 backport (libexif) #243892 [since FEDORA-2007-614] +CVE-2007-4000 backport (krb5) [since FEDORA-2007-690] +CVE-2007-3999 backport (krb5) [since FEDORA-2007-690] CVE-2007-3962 ignore (gftp) multiple buffer overflows in fsplib, not on Linux CVE-2007-3961 ignore (gftp) off-by-one error in fsplib CVE-2007-3852 backport (sysstat) #252296 [since FEDORA-2007-675] +CVE-2007-3848 version (kernel) [since FEDORA-2007-679] CVE-2007-3847 VULNERABLE (httpd) #250756 CVE-2007-3845 ignore (firefox) windows specific CVE-2007-3844 VULNERABLE (firefox) #250648 "fixed on next update" @@ -50,7 +53,7 @@ CVE-2007-3389 version (wireshark, fixed 0.99.6) [since FEDORA-2007-628] CVE-2007-3387 VULNERABLE (poppler) #251513 CVE-2007-3387 backport (tetex) #251515 [since FEDORA-2007-669] -CVE-2007-3387 VULNERABLE (kdegraphics) #251511 +CVE-2007-3387 backport (kdegraphics) #251511 [since FEDORA-2007-685] CVE-2007-3387 backport (cups) #251519 [since FEDORA-2007-644] CVE-2007-3384 ignore (tomcat) only affects 3.3.x and just affects an example CVE-2007-3381 version (gdm, fixed 2.18.4) #250277 [since FEDORA-2007-653] Index: fc7 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/fc7,v retrieving revision 1.92 retrieving revision 1.93 diff -u -r1.92 -r1.93 --- fc7 4 Sep 2007 21:12:24 -0000 1.92 +++ fc7 5 Sep 2007 08:30:51 -0000 1.93 @@ -6,22 +6,22 @@ # A couple of first F7 updates were marked as FEDORA-2007-0001 # Up to date CVE as of CVE email 20070829 -# Up to date FC7 as of 20070829 +# Up to date FC7 as of 20070905 -CVE-2007-4650 VULNERABLE (gallery2) #267421 -CVE-2007-4629 VULNERABLE (mapserver, fixed 4.10.3) #272081 +CVE-2007-4650 version (gallery2) #267421 [since FEDORA-2007-2020] +CVE-2007-4629 version (mapserver, fixed 4.10.3) #272081 [since FEDORA-2007-2018] CVE-2007-4631 VULNERABLE (qgit) #268381 -CVE-2007-4565 VULNERABLE (fetchmail) #260861 +CVE-2007-4565 backport (fetchmail) #260861 [since FEDORA-2007-1983] CVE-2007-4560 VULNERABLE (clamav) #260583 CVE-2007-4559 VULNERABLE (python) tarfile module - directory traversal CVE-2007-4558 version (star, fixed 1.5a84) [since FEDORA-2007-1852] CVE-2007-4543 version (bugzilla, fixed 3.0.1) #256021 [since FEDORA-2007-1853] -CVE-2007-4542 VULNERABLE (mapserver, fixed 4.10.3) #256561 +CVE-2007-4542 version (mapserver, fixed 4.10.3) #256561 [since FEDORA-2007-2018] CVE-2007-4539 version (bugzilla, fixed 3.0.1) #256021 [since FEDORA-2007-1853] CVE-2007-4538 version (bugzilla, fixed 3.0.1) #256021 [since FEDORA-2007-1853] -CVE-2007-4534 VULNERABLE (vavoom) #256621 -CVE-2007-4533 VULNERABLE (vavoom) #256621 -CVE-2007-4532 VULNERABLE (vavoom) #256621 +CVE-2007-4534 backport (vavoom) #256621 [since CVE-2007-4533] +CVE-2007-4533 backport (vavoom) #256621 [since CVE-2007-4533] +CVE-2007-4532 backport (vavoom) #256621 [since CVE-2007-4533] CVE-2007-4510 VULNERABLE (clamav, fixed 0.91.2) #253780 CVE-2007-4462 version (po4a) #253541 [since FEDORA-2007-1763] CVE-2007-4460 backport (id3lib) #253553 [since FEDORA-2007-1774] @@ -42,12 +42,14 @@ CVE-2007-4168 backport (libexif) #243892 [since FEDORA-2007-0414] CVE-2007-4153 ignore (wordpress) "remote authenticated administrators" CVE-2007-4154 ignore (wordpress) "remote authenticated administrators" -CVE-2007-4139 VULNERABLE (wordpress) #250751 +CVE-2007-4139 version (wordpress) #250751 [since FEDORA-2007-1885] CVE-2007-4134 version (star, fixed 1.5a84) #254128 [since FEDORA-2007-1852] -CVE-2007-4131 VULNERABLE (tar) #253684 +CVE-2007-4131 backport (tar) #253684 [since FEDORA-2007-1890] CVE-2007-4066 backport (libvorbis) #245991 [since FEDORA-2007-1765] CVE-2007-4065 backport (libvorbis) #245991 [since FEDORA-2007-1765] CVE-2007-4029 backport (libvorbis) #245991 [since FEDORA-2007-1765] +CVE-2007-4000 backport (krb5) [since FEDORA-2007-2017] +CVE-2007-3999 backport (krb5) [since FEDORA-2007-2017] CVE-2007-3962 ignore (gftp) multiple buffer overflows in fsplib, not on Linux CVE-2007-3961 ignore (gftp) off-by-one error in fsplib CVE-2007-3852 backport (sysstat) #252295 [since FEDORA-2007-1697] @@ -142,7 +144,7 @@ CVE-2007-3023 VULNERABLE (clamav, fixed 0.90.3) #245219 CVE-2007-3007 ignore (php) safe mode isn't safe *CVE-2007-2975 (openfire) -CVE-2007-2958 VULNERABLE (claws-mail) #254121 +CVE-2007-2958 version (claws-mail) #254121 [since FEDORA-2007-2009] CVE-2007-2958 backport (sylpheed) #254123 [since FEDORA-2007-1841] CVE-2007-2956 backport (qtpfsgui) #251674 [since FEDORA-2007-1581] CVE-2007-2949 version (gimp, fixed, 2.2.16) [since FEDORA-2007-0725] -- fedora-extras-commits mailing list fedora-extras-commits(a)redhat.com https://www.redhat.com/mailman/listinfo/fedora-extras-commits