security-commits October 2007

security-commits@lists.fedoraproject.org

1 participants
40 discussions

fedora-security/audit fc6, 1.286, 1.287 fc7, 1.159, 1.160
by fedora-security-commits＠redhat.com 31 Oct '07

31 Oct '07

Author: thoger Update of /cvs/fedora/fedora-security/audit In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv8509/audit Modified Files: fc6 fc7 Log Message: liferea Index: fc6 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/fc6,v retrieving revision 1.286 retrieving revision 1.287 diff -u -r1.286 -r1.287 --- fc6 31 Oct 2007 15:54:32 -0000 1.286 +++ fc6 31 Oct 2007 17:37:03 -0000 1.287 @@ -4,7 +4,7 @@ # *CVE are items that need verification for Fedora Core 6 # (mozilla) = (firefox, seamonkey, thunderbird, yelp, devhelp, galeon, liferea. epiphany) -# Up to date CVE as of CVE email 20071015 +# Up to date CVE as of CVE email 20071030 # Up to date FC6 as of 20071029 CVE-2007-5461 VULNERABLE (tomcat5) #334521 Index: fc7 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/fc7,v retrieving revision 1.159 retrieving revision 1.160 diff -u -r1.159 -r1.160 --- fc7 31 Oct 2007 15:54:32 -0000 1.159 +++ fc7 31 Oct 2007 17:37:03 -0000 1.160 @@ -5,9 +5,10 @@ # (mozilla) = (firefox, seamonkey, thunderbird, yelp, devhelp, galeon, liferea. epiphany) # A couple of first F7 updates were marked as FEDORA-2007-0001 -# Up to date CVE as of CVE email 20071015 +# Up to date CVE as of CVE email 20071030 # Up to date FC7 as of 20071029 +CVE-2007-5751 VULNERABLE (liferea, fixed 1.4.6) #360641 CVE-2007-5728 version (phpPgAdmin) seems to be fixed for some time CVE-2007-5715 backport (denyhosts) fixed long ago CVE-2007-5712 VULNERABLE (Django, fixed 0.96.1) #357051

1 0

fedora-security/audit fc6, 1.285, 1.286 fc7, 1.158, 1.159
by fedora-security-commits＠redhat.com 31 Oct '07

31 Oct '07

Author: lkundrak Update of /cvs/fedora/fedora-security/audit In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv21236 Modified Files: fc6 fc7 Log Message: Tomcat5 Index: fc6 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/fc6,v retrieving revision 1.285 retrieving revision 1.286 diff -u -r1.285 -r1.286 --- fc6 30 Oct 2007 17:10:19 -0000 1.285 +++ fc6 31 Oct 2007 15:54:32 -0000 1.286 @@ -7,6 +7,7 @@ # Up to date CVE as of CVE email 20071015 # Up to date FC6 as of 20071029 +CVE-2007-5461 VULNERABLE (tomcat5) #334521 CVE-2007-5340 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 CVE-2007-5339 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 CVE-2007-5338 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 Index: fc7 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/fc7,v retrieving revision 1.158 retrieving revision 1.159 diff -u -r1.158 -r1.159 --- fc7 31 Oct 2007 14:43:17 -0000 1.158 +++ fc7 31 Oct 2007 15:54:32 -0000 1.159 @@ -24,6 +24,7 @@ CVE-2007-5589 VULNERABLE (phpmyadmin, fixed 2.11.1.2) #333661 PMASA-2007-6 CVE-2007-5585 backport (rss-glx) #336331 [since FEDORA-2007-2652] CVE-2007-5585 backport (tempest) #336331 [since FEDORA-2007-2652] +CVE-2007-5461 VULNERABLE (tomcat5) #334511 #334531 CVE-2007-5416 ignore (drupal) Vulnerability in PHP<5.1.3, we're safe CVE-2007-5386 VULNERABLE (phpmyadmin, fixed 2.11.1.1) #333661 PMASA-2007-5 CVE-2007-5340 version (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 [since FEDORA-2007-2664]

1 0

fedora-security/audit fc7,1.157,1.158
by fedora-security-commits＠redhat.com 31 Oct '07

31 Oct '07

Author: thoger Update of /cvs/fedora/fedora-security/audit In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv10488/audit Modified Files: fc7 Log Message: some issue from cve mail Index: fc7 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/fc7,v retrieving revision 1.157 retrieving revision 1.158 diff -u -r1.157 -r1.158 --- fc7 30 Oct 2007 17:10:19 -0000 1.157 +++ fc7 31 Oct 2007 14:43:17 -0000 1.158 @@ -8,7 +8,11 @@ # Up to date CVE as of CVE email 20071015 # Up to date FC7 as of 20071029 -CVE-NOID VULNERABLE (Django) #357051 +CVE-2007-5728 version (phpPgAdmin) seems to be fixed for some time +CVE-2007-5715 backport (denyhosts) fixed long ago +CVE-2007-5712 VULNERABLE (Django, fixed 0.96.1) #357051 +CVE-2007-5708 VULNERABLE (openldap, fixed 2.3.39) #360081 +CVE-2007-5707 VULNERABLE (openldap, fixed 2.3.39) #360081 CVE-2007-5626 ignore (bacula) known, documented limitation CVE-2007-5624 VULNERABLE (nagios, fixed 2.10) #349011 CVE-2007-5623 VULNERABLE (nagios-plugins) #348731

1 0

fedora-security/audit fc6, 1.284, 1.285 fc7, 1.156, 1.157
by fedora-security-commits＠redhat.com 30 Oct '07

30 Oct '07

Author: thoger Update of /cvs/fedora/fedora-security/audit In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv30603/audit Modified Files: fc6 fc7 Log Message: fedora updates Index: fc6 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/fc6,v retrieving revision 1.284 retrieving revision 1.285 diff -u -r1.284 -r1.285 --- fc6 29 Oct 2007 12:38:04 -0000 1.284 +++ fc6 30 Oct 2007 17:10:19 -0000 1.285 @@ -5,7 +5,7 @@ # (mozilla) = (firefox, seamonkey, thunderbird, yelp, devhelp, galeon, liferea. epiphany) # Up to date CVE as of CVE email 20071015 -# Up to date FC6 as of 20071025 +# Up to date FC6 as of 20071029 CVE-2007-5340 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 CVE-2007-5339 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 Index: fc7 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/fc7,v retrieving revision 1.156 retrieving revision 1.157 diff -u -r1.156 -r1.157 --- fc7 29 Oct 2007 18:17:05 -0000 1.156 +++ fc7 30 Oct 2007 17:10:19 -0000 1.157 @@ -6,7 +6,7 @@ # A couple of first F7 updates were marked as FEDORA-2007-0001 # Up to date CVE as of CVE email 20071015 -# Up to date FC7 as of 20071025 +# Up to date FC7 as of 20071029 CVE-NOID VULNERABLE (Django) #357051 CVE-2007-5626 ignore (bacula) known, documented limitation @@ -57,7 +57,7 @@ CVE-2007-4993 backport (xen) [since FEDORA-2007-2270] CVE-2007-4990 VULNERABLE (xorg-x11-xfs, fixed 1.0.5) CVE-2007-4974 backport (libsndfile) #296221 [since FEDORA-2007-2236] -CVE-2007-4965 VULNERABLE (python) imageop module heap overflow +CVE-2007-4965 backport (python) imageop module heap overflow [since FEDORA-2007-2663] CVE-2007-4924 version (opal, fixed 2.2.10) #297551 [since FEDORA-2007-2245] CVE-2007-4897 version (opal, fixed 2.2.9) CVE-2007-4894 version (wordpress, fixed 2.2.3) [since FEDORA-2007-2143] @@ -100,6 +100,8 @@ CVE-2007-4533 backport (vavoom) #256621 [since FEDORA-2007-1977] CVE-2007-4532 backport (vavoom) #256621 [since FEDORA-2007-1977] CVE-2007-4510 version (clamav, fixed 0.91.2) #253780 [since FEDORA-2007-2050] +CVE-2007-4476 VULNERABLE (cpio) +CVE-2007-4476 backport (tar) [since FEDORA-2007-2673] CVE-2007-4465 version (httpd) [since FEDORA-2007-2214] CVE-2007-4462 version (po4a) #253541 [since FEDORA-2007-1763] CVE-2007-4460 backport (id3lib) #253553 [since FEDORA-2007-1774] @@ -278,7 +280,7 @@ *CVE-2007-2452 ** (locate) CVE-2007-2450 VULNERABLE (tomcat5) #244810 CVE-2007-2449 VULNERABLE (tomcat5) #244810 -CVE-2007-2448 VULNERABLE (subversion, fixed 1.4.4) #243856 +CVE-2007-2448 version (subversion, fixed 1.4.4) #243856 [since FEDORA-2007-2635] *CVE-2007-2447 ** (samba) *CVE-2007-2446 ** (samba) CVE-2007-2445 version (libpng10, fixed 1.0.25) #240398

1 0

fedora-security/audit fc7, 1.155, 1.156 fe6, 1.133, 1.134
by fedora-security-commits＠redhat.com 29 Oct '07

29 Oct '07

Author: scop Update of /cvs/fedora/fedora-security/audit In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv20115 Modified Files: fc7 fe6 Log Message: Django i18n DoS Index: fc7 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/fc7,v retrieving revision 1.155 retrieving revision 1.156 diff -u -r1.155 -r1.156 --- fc7 29 Oct 2007 12:38:04 -0000 1.155 +++ fc7 29 Oct 2007 18:17:05 -0000 1.156 @@ -8,6 +8,7 @@ # Up to date CVE as of CVE email 20071015 # Up to date FC7 as of 20071025 +CVE-NOID VULNERABLE (Django) #357051 CVE-2007-5626 ignore (bacula) known, documented limitation CVE-2007-5624 VULNERABLE (nagios, fixed 2.10) #349011 CVE-2007-5623 VULNERABLE (nagios-plugins) #348731 Index: fe6 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/fe6,v retrieving revision 1.133 retrieving revision 1.134 diff -u -r1.133 -r1.134 --- fe6 24 Aug 2007 10:27:37 -0000 1.133 +++ fe6 29 Oct 2007 18:17:05 -0000 1.134 @@ -2,6 +2,7 @@ ** are items that need attention +CVE-NOID VULNERABLE (Django) #357051 CVE-2007-4510 VULNERABLE (clamav, 0.91.2) #253780 CVE-2007-3950 version (lighttpd, fixed 1.4.16) #249162 CVE-2007-3949 version (lighttpd, fixed 1.4.16) #249162

1 0

fedora-security/audit fc6, 1.283, 1.284 fc7, 1.154, 1.155
by fedora-security-commits＠redhat.com 29 Oct '07

29 Oct '07

Author: thoger Update of /cvs/fedora/fedora-security/audit In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv16700/audit Modified Files: fc6 fc7 Log Message: xen issue fedora updates Index: fc6 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/fc6,v retrieving revision 1.283 retrieving revision 1.284 diff -u -r1.283 -r1.284 --- fc6 24 Oct 2007 12:25:12 -0000 1.283 +++ fc6 29 Oct 2007 12:38:04 -0000 1.284 @@ -5,7 +5,7 @@ # (mozilla) = (firefox, seamonkey, thunderbird, yelp, devhelp, galeon, liferea. epiphany) # Up to date CVE as of CVE email 20071015 -# Up to date FC6 as of 20071017 +# Up to date FC6 as of 20071025 CVE-2007-5340 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 CVE-2007-5339 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 @@ -72,6 +72,7 @@ CVE-2007-3962 ignore (gftp) multiple buffer overflows in fsplib, not on Linux CVE-2007-3961 ignore (gftp) off-by-one error in fsplib CVE-2007-3920 VULNERABLE (gnome-screensaver) #350271 +CVE-2007-3919 VULNERABLE (xen) CVE-2007-3852 backport (sysstat) #252296 [since FEDORA-2007-675] CVE-2007-3848 version (kernel) [since FEDORA-2007-679] CVE-2007-3847 version (httpd) #250756 [since FEDORA-2007-707] Index: fc7 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/fc7,v retrieving revision 1.154 retrieving revision 1.155 diff -u -r1.154 -r1.155 --- fc7 25 Oct 2007 07:34:05 -0000 1.154 +++ fc7 29 Oct 2007 12:38:04 -0000 1.155 @@ -6,28 +6,29 @@ # A couple of first F7 updates were marked as FEDORA-2007-0001 # Up to date CVE as of CVE email 20071015 -# Up to date FC7 as of 20071017 +# Up to date FC7 as of 20071025 CVE-2007-5626 ignore (bacula) known, documented limitation CVE-2007-5624 VULNERABLE (nagios, fixed 2.10) #349011 CVE-2007-5623 VULNERABLE (nagios-plugins) #348731 -CVE-2007-5597 VULNERABLE (drupal, fixed 5.3) -CVE-2007-5596 VULNERABLE (drupal, fixed 5.3) -CVE-2007-5595 VULNERABLE (drupal, fixed 5.3) -CVE-2007-5594 VULNERABLE (drupal, fixed 5.3) -CVE-2007-5593 VULNERABLE (drupal, fixed 5.3) +CVE-2007-5597 version (drupal, fixed 5.3) [since FEDORA-2007-2649] +CVE-2007-5596 version (drupal, fixed 5.3) [since FEDORA-2007-2649] +CVE-2007-5595 version (drupal, fixed 5.3) [since FEDORA-2007-2649] +CVE-2007-5594 version (drupal, fixed 5.3) [since FEDORA-2007-2649] +CVE-2007-5593 version (drupal, fixed 5.3) [since FEDORA-2007-2649] CVE-2007-5589 VULNERABLE (phpmyadmin, fixed 2.11.1.2) #333661 PMASA-2007-6 -CVE-2007-5585 (tempest) #336331 +CVE-2007-5585 backport (rss-glx) #336331 [since FEDORA-2007-2652] +CVE-2007-5585 backport (tempest) #336331 [since FEDORA-2007-2652] CVE-2007-5416 ignore (drupal) Vulnerability in PHP<5.1.3, we're safe CVE-2007-5386 VULNERABLE (phpmyadmin, fixed 2.11.1.1) #333661 PMASA-2007-5 -CVE-2007-5340 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 -CVE-2007-5339 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 -CVE-2007-5338 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 -CVE-2007-5337 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 -CVE-2007-5335 VULNERABLE (mozilla) ff 2.0.0.8, does not affect ff1.5 -CVE-2007-5334 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 -CVE-2007-5269 VULNERABLE (libpng10) update pending -CVE-2007-5269 VULNERABLE (libpng, fixed 1.2.21) #337461 +CVE-2007-5340 version (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 [since FEDORA-2007-2664] +CVE-2007-5339 version (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 [since FEDORA-2007-2664] +CVE-2007-5338 version (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 [since FEDORA-2007-2664] +CVE-2007-5337 version (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 [since FEDORA-2007-2664] +CVE-2007-5335 version (mozilla) ff 2.0.0.8, does not affect ff1.5 [since FEDORA-2007-2664] +CVE-2007-5334 version (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 [since FEDORA-2007-2664] +CVE-2007-5269 version (libpng10) [since FEDORA-2007-2521] +CVE-2007-5269 version (libpng, fixed 1.2.21) #337461 [since FEDORA-2007-2666] CVE-2007-5268 ignore (libpng) shipped version too old and not affected CVE-2007-5267 ignore (libpng) shipped version too old and not affected CVE-2007-5266 ignore (libpng) shipped version too old and not affected @@ -140,6 +141,7 @@ CVE-2007-3948 version (lighttpd, fixed 1.4.16) #249162 [since FEDORA-2007-1299] CVE-2007-3947 version (lighttpd, fixed 1.4.16) #249162 [since FEDORA-2007-1299] CVE-2007-3946 version (lighttpd, fixed 1.4.16) #249162 [since FEDORA-2007-1299] +CVE-2007-3919 VULNERABLE (xen) CVE-2007-3917 version (wesnoth, fixed 1.2.7) #324841 [since FEDORA-2007-2496] CVE-2007-3848 version (kernel) [since FEDORA-2007-1785] CVE-2007-3847 version (httpd) #250755 [since FEDORA-2007-2214] @@ -169,7 +171,7 @@ CVE-2007-3528 version (dar, fixed 2.3.4) #246760 [since FEDORA-2007-0904] CVE-2007-3544 VULNERABLE (wordpress, NOT fixed 2.2.1) #245211 Incomplete fix for CVE-2007-3543 CVE-2007-3543 version (wordpress, fixed 2.2.1) #245211 [since FEDORA-2007-0894] -CVE-2007-3511 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 +CVE-2007-3511 version (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 [since FEDORA-2007-2664] CVE-2007-3508 ignore (glibc) not an issue CVE-2007-3506 version (freetype, fixed 2.3.4) #235479 [since FEDORA-2007-0033] CVE-2007-3507 version (flac123, fixed 0.0.10) #246322 [since FEDORA-2007-1045] @@ -290,7 +292,7 @@ CVE-2007-2381 ignore (MochiKit) #238616 *CVE-2007-2356 ** (gimp) *CVE-2007-2353 ** (axis) -CVE-2007-2292 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 +CVE-2007-2292 version (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 [since FEDORA-2007-2664] *CVE-2007-2245 VULNERABLE (phpMyAdmin, fixed 2.10.1) #237882 CVE-2007-2243 ignore (openssh, fixed 4.6) needs S/KEY support which is not shipped. CVE-2007-2241 backport (bind) [since FEDORA-2007-0300] @@ -411,7 +413,7 @@ *CVE-2007-1218 backport (tcpdump) 232349 [since FEDORA-2007-347] CVE-2007-1216 version (krb5, fixed 1.6-3) #231537 *CVE-2007-1103 VULNERABLE (tor) #230927 -CVE-2007-1095 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 +CVE-2007-1095 version (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 [since FEDORA-2007-2664] CVE-2007-1092 version (seamonkey, fixed 1.0.8) CVE-2007-1055 version (mediawiki, fixed 1.8.3) CVE-2007-1054 version (mediawiki, fixed 1.9.3) [since FEDORA-2007-1442] @@ -431,7 +433,7 @@ CVE-2007-0996 version (seamonkey, fixed 1.0.8) CVE-2007-0995 version (seamonkey, fixed 1.0.8) CVE-2007-0988 version (php, fixed 5.2.1) -CVE-2007-0981 VULNERABLE (mozilla) +CVE-2007-0981 version (mozilla) CVE-2007-0981 version (seamonkey, fixed 1.0.8) #229253 CVE-2007-0957 backport (krb5, fixed 1.6-3) #231528 CVE-2007-0956 backport (krb5, fixed 1.6-3) #229782

1 0

fedora-security/tools suidaudit,NONE,1.1
by fedora-security-commits＠redhat.com 26 Oct '07

26 Oct '07

Author: lkundrak Update of /cvs/fedora/fedora-security/tools In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv11548 Added Files: suidaudit Log Message: What SetUID and SetGID files do we have in our packages ***** Error reading new file: [Errno 2] No such file or directory: 'suidaudit'

1 0

fedora-security/audit fc7,1.153,1.154
by fedora-security-commits＠redhat.com 25 Oct '07

25 Oct '07

Author: thoger Update of /cvs/fedora/fedora-security/audit In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv22479/audit Modified Files: fc7 Log Message: pidgin crash - updated packages already built Index: fc7 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/fc7,v retrieving revision 1.153 retrieving revision 1.154 diff -u -r1.153 -r1.154 --- fc7 24 Oct 2007 12:25:12 -0000 1.153 +++ fc7 25 Oct 2007 07:34:05 -0000 1.154 @@ -49,6 +49,7 @@ CVE-2007-5034 version (elinks) #297981 [since FEDORA-2007-2224] CVE-2007-5007 VULNERABLE (balsa) #297601 GENERIC-MAP-NOMATCH VULNERABLE (nx) #293031 +CVE-2007-4999 VULNERABLE (pidgin, fixed 2.2.2) CVE-2007-4996 version (pidgin, fixed 2.2.1) [since FEDORA-2007-2368] CVE-2007-4995 backport (openssl, fixed 0.9.8f) [since FEDORA-2007-2530] CVE-2007-4993 backport (xen) [since FEDORA-2007-2270]

1 0

fedora-security/audit fc6, 1.282, 1.283 fc7, 1.152, 1.153
by fedora-security-commits＠redhat.com 24 Oct '07

24 Oct '07

Author: thoger Update of /cvs/fedora/fedora-security/audit In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv27121/audit Modified Files: fc6 fc7 Log Message: compact mozilla issues Index: fc6 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/fc6,v retrieving revision 1.282 retrieving revision 1.283 diff -u -r1.282 -r1.283 --- fc6 24 Oct 2007 10:51:07 -0000 1.282 +++ fc6 24 Oct 2007 12:25:12 -0000 1.283 @@ -7,21 +7,12 @@ # Up to date CVE as of CVE email 20071015 # Up to date FC6 as of 20071017 -CVE-2007-5340 VULNERABLE (firefox, fixed 2.0.0.8) -CVE-2007-5340 VULNERABLE (thunderbird, fixed 2.0.0.6) -CVE-2007-5340 VULNERABLE (seamonkey, fixed 1.1.5) -CVE-2007-5339 VULNERABLE (firefox, fixed 2.0.0.8) -CVE-2007-5339 VULNERABLE (thunderbird, fixed 2.0.0.6) -CVE-2007-5339 VULNERABLE (seamonkey, fixed 1.1.5) -CVE-2007-5338 VULNERABLE (firefox, fixed 2.0.0.8) -CVE-2007-5338 VULNERABLE (thunderbird, fixed 2.0.0.6) -CVE-2007-5338 VULNERABLE (seamonkey, fixed 1.1.5) -CVE-2007-5337 VULNERABLE (firefox, fixed 2.0.0.8) -CVE-2007-5337 VULNERABLE (thunderbird, fixed 2.0.0.6) -CVE-2007-5337 VULNERABLE (seamonkey, fixed 1.1.5) -CVE-2007-5334 VULNERABLE (firefox, fixed 2.0.0.8) -CVE-2007-5334 VULNERABLE (thunderbird, fixed 2.0.0.6) -CVE-2007-5334 VULNERABLE (seamonkey, fixed 1.1.5) +CVE-2007-5340 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 +CVE-2007-5339 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 +CVE-2007-5338 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 +CVE-2007-5337 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 +CVE-2007-5335 ignore (mozilla) ff2 only +CVE-2007-5334 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 CVE-2007-5269 VULNERABLE (libpng, fixed 1.2.21) #337471 CVE-2007-5268 ignore (libpng) shipped version too old and not affected CVE-2007-5267 ignore (libpng) shipped version too old and not affected @@ -95,9 +86,7 @@ CVE-2007-3781 VULNERABLE (mysql, fixed 5.0.44) CVE-2007-3780 VULNERABLE (mysql, fixed 5.0.44) CVE-2007-3642 version (kernel, fixed 2.6.22) [since FEDORA-2007-655] -CVE-2007-3511 VULNERABLE (firefox, fixed 2.0.0.8) -CVE-2007-3511 VULNERABLE (thunderbird, fixed 2.0.0.6) -CVE-2007-3511 VULNERABLE (seamonkey, fixed 1.1.5) +CVE-2007-3511 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 CVE-2007-3508 ignore (glibc) not an issue CVE-2007-3506 backport (freetype, fixed 2.3.4) #235479 [since FEDORA-2007-561] CVE-2007-3478 version (gd, fixed 2.0.35) #277421 [since FEDORA-2007-692] @@ -148,9 +137,7 @@ CVE-2007-2451 version (kernel, fixed 2.6.21.4) [since FEDORA-2007-600] CVE-2007-2445 backport (libpng) #239542 [since FEDORA-2007-529] CVE-2007-2438 version (vim, fixed 7.0.235) #238734 [since FEDORA-2007-492] -CVE-2007-2292 VULNERABLE (firefox, fixed 2.0.0.8) -CVE-2007-2292 VULNERABLE (thunderbird, fixed 2.0.0.6) -CVE-2007-2292 VULNERABLE (seamonkey, fixed 1.1.5) +CVE-2007-2292 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 CVE-2007-2242 version (kernel) [since FEDORA-2007-482] CVE-2007-2138 version (postgresql, fixed 8.1.9) [since FEDORA-2007-565] CVE-2007-2028 backport (freeradius) [since FEDORA-2007-499] @@ -185,9 +172,7 @@ CVE-2007-1263 version (gnupg, fixed 1.4.7) [since FEDORA-2007-315] CVE-2007-1262 version (squirrelmail, fixed 1.4.10a) #239704 [since FEDORA-2007-505] CVE-2007-1218 backport (tcpdump) 232349 [since FEDORA-2007-347] -CVE-2007-1095 VULNERABLE (firefox, fixed 2.0.0.8) -CVE-2007-1095 VULNERABLE (thunderbird, fixed 2.0.0.6) -CVE-2007-1095 VULNERABLE (seamonkey, fixed 1.1.5) +CVE-2007-1095 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 CVE-2007-1006 version (ekiga, fixed 2.0.5) #229259 [since FEDORA-2007-322] CVE-2007-1004 VULNERABLE (firefox) https://bugzilla.mozilla.org/show_bug.cgi?id=390627 CVE-2007-1003 backport (xorg-x11-server, fixed > X11R7.2) #235263 [since FEDORA-2007-425] Index: fc7 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/fc7,v retrieving revision 1.152 retrieving revision 1.153 diff -u -r1.152 -r1.153 --- fc7 24 Oct 2007 10:51:07 -0000 1.152 +++ fc7 24 Oct 2007 12:25:12 -0000 1.153 @@ -20,21 +20,12 @@ CVE-2007-5585 (tempest) #336331 CVE-2007-5416 ignore (drupal) Vulnerability in PHP<5.1.3, we're safe CVE-2007-5386 VULNERABLE (phpmyadmin, fixed 2.11.1.1) #333661 PMASA-2007-5 -CVE-2007-5340 VULNERABLE (firefox, fixed 2.0.0.8) -CVE-2007-5340 VULNERABLE (thunderbird, fixed 2.0.0.6) -CVE-2007-5340 VULNERABLE (seamonkey, fixed 1.1.5) -CVE-2007-5339 VULNERABLE (firefox, fixed 2.0.0.8) -CVE-2007-5339 VULNERABLE (thunderbird, fixed 2.0.0.6) -CVE-2007-5339 VULNERABLE (seamonkey, fixed 1.1.5) -CVE-2007-5338 VULNERABLE (firefox, fixed 2.0.0.8) -CVE-2007-5338 VULNERABLE (thunderbird, fixed 2.0.0.6) -CVE-2007-5338 VULNERABLE (seamonkey, fixed 1.1.5) -CVE-2007-5337 VULNERABLE (firefox, fixed 2.0.0.8) -CVE-2007-5337 VULNERABLE (thunderbird, fixed 2.0.0.6) -CVE-2007-5337 VULNERABLE (seamonkey, fixed 1.1.5) -CVE-2007-5334 VULNERABLE (firefox, fixed 2.0.0.8) -CVE-2007-5334 VULNERABLE (thunderbird, fixed 2.0.0.6) -CVE-2007-5334 VULNERABLE (seamonkey, fixed 1.1.5) +CVE-2007-5340 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 +CVE-2007-5339 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 +CVE-2007-5338 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 +CVE-2007-5337 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 +CVE-2007-5335 VULNERABLE (mozilla) ff 2.0.0.8, does not affect ff1.5 +CVE-2007-5334 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 CVE-2007-5269 VULNERABLE (libpng10) update pending CVE-2007-5269 VULNERABLE (libpng, fixed 1.2.21) #337461 CVE-2007-5268 ignore (libpng) shipped version too old and not affected @@ -177,9 +168,7 @@ CVE-2007-3528 version (dar, fixed 2.3.4) #246760 [since FEDORA-2007-0904] CVE-2007-3544 VULNERABLE (wordpress, NOT fixed 2.2.1) #245211 Incomplete fix for CVE-2007-3543 CVE-2007-3543 version (wordpress, fixed 2.2.1) #245211 [since FEDORA-2007-0894] -CVE-2007-3511 VULNERABLE (firefox, fixed 2.0.0.8) -CVE-2007-3511 VULNERABLE (thunderbird, fixed 2.0.0.6) -CVE-2007-3511 VULNERABLE (seamonkey, fixed 1.1.5) +CVE-2007-3511 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 CVE-2007-3508 ignore (glibc) not an issue CVE-2007-3506 version (freetype, fixed 2.3.4) #235479 [since FEDORA-2007-0033] CVE-2007-3507 version (flac123, fixed 0.0.10) #246322 [since FEDORA-2007-1045] @@ -300,9 +289,7 @@ CVE-2007-2381 ignore (MochiKit) #238616 *CVE-2007-2356 ** (gimp) *CVE-2007-2353 ** (axis) -CVE-2007-2292 VULNERABLE (firefox, fixed 2.0.0.8) -CVE-2007-2292 VULNERABLE (thunderbird, fixed 2.0.0.6) -CVE-2007-2292 VULNERABLE (seamonkey, fixed 1.1.5) +CVE-2007-2292 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 *CVE-2007-2245 VULNERABLE (phpMyAdmin, fixed 2.10.1) #237882 CVE-2007-2243 ignore (openssh, fixed 4.6) needs S/KEY support which is not shipped. CVE-2007-2241 backport (bind) [since FEDORA-2007-0300] @@ -423,9 +410,7 @@ *CVE-2007-1218 backport (tcpdump) 232349 [since FEDORA-2007-347] CVE-2007-1216 version (krb5, fixed 1.6-3) #231537 *CVE-2007-1103 VULNERABLE (tor) #230927 -CVE-2007-1095 VULNERABLE (firefox, fixed 2.0.0.8) -CVE-2007-1095 VULNERABLE (thunderbird, fixed 2.0.0.6) -CVE-2007-1095 VULNERABLE (seamonkey, fixed 1.1.5) +CVE-2007-1095 VULNERABLE (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 CVE-2007-1092 version (seamonkey, fixed 1.0.8) CVE-2007-1055 version (mediawiki, fixed 1.8.3) CVE-2007-1054 version (mediawiki, fixed 1.9.3) [since FEDORA-2007-1442]

1 0

fedora-security/audit fc6, 1.281, 1.282 fc7, 1.151, 1.152
by fedora-security-commits＠redhat.com 24 Oct '07

24 Oct '07

Author: lkundrak Update of /cvs/fedora/fedora-security/audit In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv9603/audit Modified Files: fc6 fc7 Log Message: compiz Index: fc6 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/fc6,v retrieving revision 1.281 retrieving revision 1.282 diff -u -r1.281 -r1.282 --- fc6 23 Oct 2007 14:25:40 -0000 1.281 +++ fc6 24 Oct 2007 10:51:07 -0000 1.282 @@ -80,6 +80,7 @@ CVE-2007-3996 backport (php) [since FEDORA-2007-709] CVE-2007-3962 ignore (gftp) multiple buffer overflows in fsplib, not on Linux CVE-2007-3961 ignore (gftp) off-by-one error in fsplib +CVE-2007-3920 VULNERABLE (gnome-screensaver) #350271 CVE-2007-3852 backport (sysstat) #252296 [since FEDORA-2007-675] CVE-2007-3848 version (kernel) [since FEDORA-2007-679] CVE-2007-3847 version (httpd) #250756 [since FEDORA-2007-707] Index: fc7 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/fc7,v retrieving revision 1.151 retrieving revision 1.152 diff -u -r1.151 -r1.152 --- fc7 24 Oct 2007 09:01:23 -0000 1.151 +++ fc7 24 Oct 2007 10:51:07 -0000 1.152 @@ -141,6 +141,7 @@ CVE-2007-3999 VULNERABLE (libtirpc) #294921 CVE-2007-3962 ignore (gftp) multiple buffer overflows in fsplib, not on Linux CVE-2007-3961 ignore (gftp) off-by-one error in fsplib +CVE-2007-3920 VULNERABLE (gnome-screensaver) #350271 CVE-2007-3852 backport (sysstat) #252295 [since FEDORA-2007-1697] CVE-2007-3950 version (lighttpd, fixed 1.4.16) #249162 [since FEDORA-2007-1299] CVE-2007-3949 version (lighttpd, fixed 1.4.16) #249162 [since FEDORA-2007-1299]

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

security-commits October 2007