[Bug 544245] New: CVE-2009-3585 rt3: session hijack

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.

Summary: CVE-2009-3585 rt3: session hijack

https://bugzilla.redhat.com/show_bug.cgi?id=544245

           Summary: CVE-2009-3585 rt3: session hijack
           Product: Fedora EPEL
           Version: el5
          Platform: All
               URL: http://fedoraproject.org/wiki/Security/TrackingBugs
        OS/Version: Linux
            Status: NEW
          Keywords: Security
          Severity: low
          Priority: low
         Component: rt3
        AssignedTo: xavier(a)bachelot.org
        ReportedBy: rc040203(a)freenet.de
         QAContact: extras-qa(a)fedoraproject.org
                CC: xavier(a)bachelot.org, rc040203(a)freenet.de,
                    fedora-perl-devel-list(a)redhat.com, mmahut(a)redhat.com,
                    vdanen(a)redhat.com
        Depends on: 543977
    Classification: Fedora
          Clone Of: 543977


Clone bug for el5. I'll take care about the FC10-rawhide versions, but will not
touch RHEL5.

+++ This bug was initially created as a clone of Bug #543977 +++

This is an automatically created tracking bug! It was created to ensure that
one or more security vulnerabilities are fixed in affected Fedora versions.

For comments that are specific to the vulnerability please use bugs filed
against "Security Response" product referenced in "Blocks" field.

bug #543962:
CVE-2009-3585 rt3: session hijack

When creating a Bodhi update request, please include the bug IDs of the
respective parent bugs filed against the "Security Response" product. Please
mention CVE ids in the RPM changelog when available.

Bodhi update submission link:
https://admin.fedoraproject.org/updates/new/?type_=security&bugs=543962

Please note: this issue affects multiple supported versions of Fedora.  Only
one tracking bug has been filed; please only close it when all affected
versions are fixed.

For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

[Bug 544245] CVE-2009-3585 rt3: session hijack

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.


https://bugzilla.redhat.com/show_bug.cgi?id=544245





--- Comment #1 from Fedora Update System <updates(a)fedoraproject.org&gt;  2009-12-04
16:54:07 EDT ---
rt3-3.6.10-1.el5 has been submitted as an update for Fedora EPEL 5.
http://admin.fedoraproject.org/updates/rt3-3.6.10-1.el5

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

[Bug 544245] CVE-2009-3585 rt3: session hijack

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.


https://bugzilla.redhat.com/show_bug.cgi?id=544245


Fedora Update System <updates(a)fedoraproject.org&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ON_QA




--- Comment #2 from Fedora Update System <updates(a)fedoraproject.org&gt;  2009-12-07
01:31:36 EDT ---
rt3-3.6.10-1.el5 has been pushed to the Fedora EPEL 5 testing repository.  If
problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing update rt3'.  You can provide feedback
for this update here:
http://admin.fedoraproject.org/updates/EL-5/FEDORA-EPEL-2009-0981

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

[Bug 544245] CVE-2009-3585 rt3: session hijack

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.


https://bugzilla.redhat.com/show_bug.cgi?id=544245





--- Comment #3 from Fedora Update System <updates(a)fedoraproject.org&gt;  2009-12-31
01:54:45 EDT ---
rt3-3.6.10-1.el5 has been pushed to the Fedora EPEL 5 stable repository.  If
problems still persist, please make note of it in this bug report.

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

[Bug 544245] CVE-2009-3585 rt3: session hijack

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.


https://bugzilla.redhat.com/show_bug.cgi?id=544245


Fedora Update System <updates(a)fedoraproject.org&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ON_QA                       |CLOSED
   Fixed In Version|                            |3.6.10-1.el5
         Resolution|                            |ERRATA




-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.