security-commits February 2008

security-commits@lists.fedoraproject.org

1 participants
44 discussions

fedora-security/audit f8, 1.145, 1.146 f9, 1.134, 1.135 fc7, 1.301, 1.302
by fedora-security-commits＠redhat.com 29 Feb '08

29 Feb '08

Author: lkundrak Update of /cvs/fedora/fedora-security/audit In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv2808 Modified Files: f8 f9 fc7 Log Message: wireshark Index: f8 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/f8,v retrieving revision 1.145 retrieving revision 1.146 diff -u -r1.145 -r1.146 --- f8 28 Feb 2008 22:42:17 -0000 1.145 +++ f8 29 Feb 2008 17:23:52 -0000 1.146 @@ -11,6 +11,9 @@ GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since FEDORA-2008-1043] GENERIC-MAP-NOMATCH fixed (wyrd) #433720 [since FEDORA-2008-1963] GENERIC-MAP-NOMATCH VULNERABLE (viewvc) #435349 +CVE-2008-1072 VULNERABLE (wireshark) #435485 +CVE-2008-1071 VULNERABLE (wireshark) #435485 +CVE-2008-1070 VULNERABLE (wireshark) #435485 **CVE-2008-0983 VULNERABLE (lighttpd) CVE-2008-0932 fixed (sword) #433724 [since FEDORA-2008-1922] why? diatheke.pl is not shipped... CVE-2008-0928 fixed (qemu) #433561 [since FEDORA-2008-2001] Index: f9 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/f9,v retrieving revision 1.134 retrieving revision 1.135 diff -u -r1.134 -r1.135 --- f9 28 Feb 2008 07:54:13 -0000 1.134 +++ f9 29 Feb 2008 17:23:52 -0000 1.135 @@ -11,6 +11,9 @@ GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since xine-lib-1.1.10-2.fc9] GENERIC-MAP-NOMATCH VULNERABLE (wyrd) #433722 GENERIC-MAP-NOMATCH fixed (inkscape) #432807 [since inkscape-0.45.1+0.46pre1-4.fc9] +CVE-2008-1072 VULNERABLE (wireshark) #435488 +CVE-2008-1071 VULNERABLE (wireshark) #435488 +CVE-2008-1070 VULNERABLE (wireshark) #435488 **CVE-2008-0983 VULNERABLE (lighttpd) CVE-2008-0932 backport (sword) #433726 [since sword-1.5.10-3.fc9] why? diatheke.pl is not shipped... CVE-2008-0928 backport (qemu) #433563 [since qemu-0.9.1-3.fc9] Index: fc7 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/fc7,v retrieving revision 1.301 retrieving revision 1.302 diff -u -r1.301 -r1.302 --- fc7 28 Feb 2008 22:42:17 -0000 1.301 +++ fc7 29 Feb 2008 17:23:52 -0000 1.302 @@ -12,6 +12,9 @@ GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since FEDORA-2008-1047] GENERIC-MAP-NOMATCH fixed (wyrd) #433721 [since FEDORA-2008-1986] GENERIC-MAP-NOMATCH VULNERABLE (viewvc) #435349 +CVE-2008-1072 VULNERABLE (wireshark) #435487 +CVE-2008-1071 VULNERABLE (wireshark) #435487 +CVE-2008-1070 VULNERABLE (wireshark) #435487 **CVE-2008-0983 VULNERABLE (lighttpd) CVE-2008-0932 fixed (sword) #433725 [since FEDORA-2008-1951] why? diatheke.pl is not shipped... CVE-2008-0928 fixed (qemu) #433562 [since FEDORA-2008-1995]

1 0

fedora-security/audit f8, 1.144, 1.145 fc7, 1.300, 1.301
by fedora-security-commits＠redhat.com 28 Feb '08

28 Feb '08

Author: lkundrak Update of /cvs/fedora/fedora-security/audit In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv17916 Modified Files: f8 fc7 Log Message: viewvc Index: f8 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/f8,v retrieving revision 1.144 retrieving revision 1.145 diff -u -r1.144 -r1.145 --- f8 28 Feb 2008 07:54:13 -0000 1.144 +++ f8 28 Feb 2008 22:42:17 -0000 1.145 @@ -10,6 +10,7 @@ GENERIC-MAP-NOMATCH VULNERABLE (comix) multiple issues tracked via #430635 GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since FEDORA-2008-1043] GENERIC-MAP-NOMATCH fixed (wyrd) #433720 [since FEDORA-2008-1963] +GENERIC-MAP-NOMATCH VULNERABLE (viewvc) #435349 **CVE-2008-0983 VULNERABLE (lighttpd) CVE-2008-0932 fixed (sword) #433724 [since FEDORA-2008-1922] why? diatheke.pl is not shipped... CVE-2008-0928 fixed (qemu) #433561 [since FEDORA-2008-2001] Index: fc7 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/fc7,v retrieving revision 1.300 retrieving revision 1.301 diff -u -r1.300 -r1.301 --- fc7 28 Feb 2008 07:54:13 -0000 1.300 +++ fc7 28 Feb 2008 22:42:17 -0000 1.301 @@ -11,6 +11,7 @@ GENERIC-MAP-NOMATCH VULNERABLE (comix) multiple issues tracked via #430635 GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since FEDORA-2008-1047] GENERIC-MAP-NOMATCH fixed (wyrd) #433721 [since FEDORA-2008-1986] +GENERIC-MAP-NOMATCH VULNERABLE (viewvc) #435349 **CVE-2008-0983 VULNERABLE (lighttpd) CVE-2008-0932 fixed (sword) #433725 [since FEDORA-2008-1951] why? diatheke.pl is not shipped... CVE-2008-0928 fixed (qemu) #433562 [since FEDORA-2008-1995]

1 0

fedora-security/audit f8, 1.143, 1.144 f9, 1.133, 1.134 fc7, 1.299, 1.300
by fedora-security-commits＠redhat.com 28 Feb '08

28 Feb '08

Author: thoger Update of /cvs/fedora/fedora-security/audit In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv32349/audit Modified Files: f8 f9 fc7 Log Message: add dbus, updates already pending push to stable Index: f8 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/f8,v retrieving revision 1.143 retrieving revision 1.144 diff -u -r1.143 -r1.144 --- f8 27 Feb 2008 17:09:43 -0000 1.143 +++ f8 28 Feb 2008 07:54:13 -0000 1.144 @@ -34,6 +34,7 @@ CVE-2008-0646 fixed (rb_libtorrent) [since FEDORA-2008-1198] CVE-2008-0597 version (cups) only old CUPS versions affected CVE-2008-0596 version (cups) only old CUPS versions affected +CVE-2008-0595 VULNERABLE (dbus, fixed 1.1.20) CVE-2008-0594 fixed (firefox, fixed 2.0.0.12) #432043 [since FEDORA-2008-1535] CVE-2008-0593 fixed (firefox, fixed 2.0.0.12) #432043 [since FEDORA-2008-1535] CVE-2008-0593 fixed (seamonkey, fixed 1.1.8) #432046 [since FEDORA-2008-1459] Index: f9 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/f9,v retrieving revision 1.133 retrieving revision 1.134 diff -u -r1.133 -r1.134 --- f9 27 Feb 2008 17:09:43 -0000 1.133 +++ f9 28 Feb 2008 07:54:13 -0000 1.134 @@ -33,6 +33,7 @@ CVE-2008-0646 backport (rb_libtorrent) [since rb_libtorrent-0.12-3.fc9] CVE-2008-0597 version (cups) only old CUPS versions affected CVE-2008-0596 version (cups) only old CUPS versions affected +CVE-2008-0595 version (dbus, fixed 1.1.20) [since dbus-1.1.20-1.fc9] CVE-2008-0594 version (firefox, fixed 2.0.0.12) CVE-2008-0593 version (firefox, fixed 2.0.0.12) CVE-2008-0593 version (seamonkey, fixed 1.1.8) [since seamonkey-1.1.8-3.fc9] Index: fc7 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/fc7,v retrieving revision 1.299 retrieving revision 1.300 diff -u -r1.299 -r1.300 --- fc7 27 Feb 2008 17:09:43 -0000 1.299 +++ fc7 28 Feb 2008 07:54:13 -0000 1.300 @@ -34,6 +34,7 @@ CVE-2008-0646 fixed (rb_libtorrent) [since FEDORA-2008-1245] CVE-2008-0597 version (cups) only old CUPS versions affected CVE-2008-0596 version (cups) only old CUPS versions affected +CVE-2008-0595 VULNERABLE (dbus, fixed 1.1.20) CVE-2008-0594 fixed (firefox, fixed 2.0.0.12) #432042 [since FEDORA-2008-1435] CVE-2008-0593 fixed (firefox, fixed 2.0.0.12) #432042 [since FEDORA-2008-1435] CVE-2008-0593 fixed (seamonkey, fixed 1.1.8) #432045 [since FEDORA-2008-1669]

1 0

fedora-security/audit f8, 1.142, 1.143 f9, 1.132, 1.133 fc7, 1.298, 1.299
by fedora-security-commits＠redhat.com 27 Feb '08

27 Feb '08

Author: thoger Update of /cvs/fedora/fedora-security/audit In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv7694/audit Modified Files: f8 f9 fc7 Log Message: add ghostscript Index: f8 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/f8,v retrieving revision 1.142 retrieving revision 1.143 diff -u -r1.142 -r1.143 --- f8 27 Feb 2008 16:43:19 -0000 1.142 +++ f8 27 Feb 2008 17:09:43 -0000 1.143 @@ -73,6 +73,7 @@ CVE-2008-0412 fixed (firefox, fixed 2.0.0.12) #432043 [since FEDORA-2008-1535] CVE-2008-0412 fixed (seamonkey, fixed 1.1.8) #432046 [since FEDORA-2008-1459] CVE-2008-0412 VULNERABLE (thunderbird, fixed 2.0.0.12) #432048 +CVE-2008-0411 VULNERABLE (ghostscript) #435146 CVE-2008-0404 fixed (mantis) #429552 [since FEDORA-2008-0796] CVE-2008-0386 fixed (xdg-utils) #429513 [since FEDORA-2008-1015] CVE-2008-0364 ignore (bittorrent) Windows only Index: f9 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/f9,v retrieving revision 1.132 retrieving revision 1.133 diff -u -r1.132 -r1.133 --- f9 27 Feb 2008 16:43:20 -0000 1.132 +++ f9 27 Feb 2008 17:09:43 -0000 1.133 @@ -72,6 +72,7 @@ CVE-2008-0412 version (firefox, fixed 2.0.0.12) CVE-2008-0412 version (seamonkey, fixed 1.1.8) [since seamonkey-1.1.8-3.fc9] CVE-2008-0412 version (thuderbird, fixed 2.0.0.12) [since thunderbird-2.0.0.12-1.fc9] +CVE-2008-0411 VULNERABLE (ghostscript) #435147 CVE-2008-0404 fixed (mantis) #429552 [since mantis-1.1.1-1.fc9] CVE-2008-0386 fixed (xdg-utils) #429513 [since xdg-utils-1_0_2-4_fc9] CVE-2008-0364 ignore (bittorrent) Windows only Index: fc7 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/fc7,v retrieving revision 1.298 retrieving revision 1.299 diff -u -r1.298 -r1.299 --- fc7 27 Feb 2008 16:43:20 -0000 1.298 +++ fc7 27 Feb 2008 17:09:43 -0000 1.299 @@ -73,6 +73,7 @@ CVE-2008-0412 fixed (firefox, fixed 2.0.0.12) #432042 [since FEDORA-2008-1435] CVE-2008-0412 fixed (seamonkey, fixed 1.1.8) #432045 [since FEDORA-2008-1669] CVE-2008-0412 VULNERABLE (thunderbird, fixed 2.0.0.12) #432047 +CVE-2008-0411 VULNERABLE (ghostscript) #435145 CVE-2008-0404 fixed (mantis) #429552 [since FEDORA-2008-0796] CVE-2008-0386 fixed (xdg-utils) #429513 [since FEDORA-2008-1015] CVE-2008-0364 ignore (bittorrent) Windows only

1 0

fedora-security/audit f8, 1.141, 1.142 f9, 1.131, 1.132 fc7, 1.297, 1.298
by fedora-security-commits＠redhat.com 27 Feb '08

27 Feb '08

Author: thoger Update of /cvs/fedora/fedora-security/audit In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv29272/audit Modified Files: f8 f9 fc7 Log Message: mozilla update Index: f8 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/f8,v retrieving revision 1.141 retrieving revision 1.142 diff -u -r1.141 -r1.142 --- f8 27 Feb 2008 09:39:39 -0000 1.141 +++ f8 27 Feb 2008 16:43:19 -0000 1.142 @@ -51,6 +51,9 @@ CVE-2008-0544 fixed (SDL_image) #430694 [since FEDORA-2008-1208] ILBM overflow CVE-2008-0486 fixed (xine-lib, fixed 1.1.10.1) #431543 [since FEDORA-2008-1543] CVE-2008-0460 VULNERABLE (mediawiki) #430288 +CVE-2008-0420 version (firefox, fixed 2.0.0.12) [since FEDORA-2008-1535] +CVE-2008-0420 version (seamonkey, fixed 1.1.8) [since FEDORA-2008-1459] +CVE-2008-0420 VULNERABLE (thunderbird, fixed 2.0.0.12) #432048 CVE-2008-0419 fixed (firefox, fixed 2.0.0.12) #432043 [since FEDORA-2008-1535] CVE-2008-0419 fixed (seamonkey, fixed 1.1.8) #432046 [since FEDORA-2008-1459] CVE-2008-0419 VULNERABLE (thunderbird, fixed 2.0.0.12) #432048 @@ -74,6 +77,8 @@ CVE-2008-0386 fixed (xdg-utils) #429513 [since FEDORA-2008-1015] CVE-2008-0364 ignore (bittorrent) Windows only CVE-2008-0318 fixed (clamav, fixed 0.92.1) [since FEDORA-2008-1625] +CVE-2008-0304 version (seamonkey, fixed 1.1.8) [since FEDORA-2008-1459] +CVE-2008-0304 VULNERABLE (thunderbird, fixed 2.0.0.12) #432048 CVE-2008-0299 fixed (python-paramiko) #428728 [since FEDORA-2008-0722] CVE-2008-0285 ignore (ngircd) Not yet in Fedora, review request #234926 CVE-2008-0274 version (drupal, fixed 5.6) DRUPAL-SA-2008-007 [since FEDORA-2008-0485] Index: f9 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/f9,v retrieving revision 1.131 retrieving revision 1.132 diff -u -r1.131 -r1.132 --- f9 27 Feb 2008 09:39:39 -0000 1.131 +++ f9 27 Feb 2008 16:43:20 -0000 1.132 @@ -33,16 +33,16 @@ CVE-2008-0646 backport (rb_libtorrent) [since rb_libtorrent-0.12-3.fc9] CVE-2008-0597 version (cups) only old CUPS versions affected CVE-2008-0596 version (cups) only old CUPS versions affected -CVE-2008-0594 VULNERABLE (firefox, fixed 2.0.0.12) -CVE-2008-0593 VULNERABLE (firefox, fixed 2.0.0.12) +CVE-2008-0594 version (firefox, fixed 2.0.0.12) +CVE-2008-0593 version (firefox, fixed 2.0.0.12) CVE-2008-0593 version (seamonkey, fixed 1.1.8) [since seamonkey-1.1.8-3.fc9] -CVE-2008-0593 VULNERABLE (thunderbird, fixed 2.0.0.12) -CVE-2008-0592 VULNERABLE (firefox, fixed 2.0.0.12) +CVE-2008-0593 version (thuderbird, fixed 2.0.0.12) [since thunderbird-2.0.0.12-1.fc9] +CVE-2008-0592 version (firefox, fixed 2.0.0.12) CVE-2008-0592 version (seamonkey, fixed 1.1.8) [since seamonkey-1.1.8-3.fc9] -CVE-2008-0592 VULNERABLE (thunderbird, fixed 2.0.0.12) -CVE-2008-0591 VULNERABLE (firefox, fixed 2.0.0.12) +CVE-2008-0592 version (thuderbird, fixed 2.0.0.12) [since thunderbird-2.0.0.12-1.fc9] +CVE-2008-0591 version (firefox, fixed 2.0.0.12) CVE-2008-0591 version (seamonkey, fixed 1.1.8) [since seamonkey-1.1.8-3.fc9] -CVE-2008-0591 VULNERABLE (thunderbird, fixed 2.0.0.12) +CVE-2008-0591 version (thuderbird, fixed 2.0.0.12) [since thunderbird-2.0.0.12-1.fc9] CVE-2008-0564 backport (mailman, fixed 2.1.10b1) [since mailman-2.1.9-10.fc9] CVE-2008-0554 version (netpbm, fixed 10.27) CVE-2008-0553 backport (perl-Tk) #431529 [since perl-Tk-804.028-3.fc9] @@ -50,29 +50,34 @@ CVE-2008-0544 backport (SDL_image) #430696 ILBM overflow [since SDL_image-1.2.6-5.fc9] CVE-2008-0486 version (xine-lib, fixed 1.1.10.1) #431544 [since xine-lib-1.1.10.1-1.fc9] CVE-2008-0460 VULNERABLE (mediawiki) #430289 -CVE-2008-0419 VULNERABLE (firefox, fixed 2.0.0.12) +CVE-2008-0420 version (firefox, fixed 2.0.0.12) +CVE-2008-0420 version (seamonkey, fixed 1.1.8) [since seamonkey-1.1.8-3.fc9] +CVE-2008-0420 version (thuderbird, fixed 2.0.0.12) [since thunderbird-2.0.0.12-1.fc9] +CVE-2008-0419 version (firefox, fixed 2.0.0.12) CVE-2008-0419 version (seamonkey, fixed 1.1.8) [since seamonkey-1.1.8-3.fc9] -CVE-2008-0419 VULNERABLE (thunderbird, fixed 2.0.0.12) -CVE-2008-0418 VULNERABLE (firefox, fixed 2.0.0.12) +CVE-2008-0419 version (thuderbird, fixed 2.0.0.12) [since thunderbird-2.0.0.12-1.fc9] +CVE-2008-0418 version (firefox, fixed 2.0.0.12) CVE-2008-0418 version (seamonkey, fixed 1.1.8) [since seamonkey-1.1.8-3.fc9] -CVE-2008-0418 VULNERABLE (thunderbird, fixed 2.0.0.12) -CVE-2008-0417 VULNERABLE (firefox, fixed 2.0.0.12) +CVE-2008-0418 version (thuderbird, fixed 2.0.0.12) [since thunderbird-2.0.0.12-1.fc9] +CVE-2008-0417 version (firefox, fixed 2.0.0.12) CVE-2008-0417 version (seamonkey, fixed 1.1.8) [since seamonkey-1.1.8-3.fc9] -CVE-2008-0415 VULNERABLE (firefox, fixed 2.0.0.12) +CVE-2008-0415 version (firefox, fixed 2.0.0.12) CVE-2008-0415 version (seamonkey, fixed 1.1.8) [since seamonkey-1.1.8-3.fc9] -CVE-2008-0415 VULNERABLE (thunderbird, fixed 2.0.0.12) -CVE-2008-0414 VULNERABLE (firefox, fixed 2.0.0.12) +CVE-2008-0415 version (thuderbird, fixed 2.0.0.12) [since thunderbird-2.0.0.12-1.fc9] +CVE-2008-0414 version (firefox, fixed 2.0.0.12) CVE-2008-0414 version (seamonkey, fixed 1.1.8) [since seamonkey-1.1.8-3.fc9] -CVE-2008-0413 VULNERABLE (firefox, fixed 2.0.0.12) +CVE-2008-0413 version (firefox, fixed 2.0.0.12) CVE-2008-0413 version (seamonkey, fixed 1.1.8) [since seamonkey-1.1.8-3.fc9] -CVE-2008-0413 VULNERABLE (thunderbird, fixed 2.0.0.12) -CVE-2008-0412 VULNERABLE (firefox, fixed 2.0.0.12) +CVE-2008-0413 version (thuderbird, fixed 2.0.0.12) [since thunderbird-2.0.0.12-1.fc9] +CVE-2008-0412 version (firefox, fixed 2.0.0.12) CVE-2008-0412 version (seamonkey, fixed 1.1.8) [since seamonkey-1.1.8-3.fc9] -CVE-2008-0412 VULNERABLE (thunderbird, fixed 2.0.0.12) +CVE-2008-0412 version (thuderbird, fixed 2.0.0.12) [since thunderbird-2.0.0.12-1.fc9] CVE-2008-0404 fixed (mantis) #429552 [since mantis-1.1.1-1.fc9] CVE-2008-0386 fixed (xdg-utils) #429513 [since xdg-utils-1_0_2-4_fc9] CVE-2008-0364 ignore (bittorrent) Windows only CVE-2008-0318 fixed (clamav, fixed 0.92.1) +CVE-2008-0304 version (seamonkey, fixed 1.1.8) [since seamonkey-1.1.8-3.fc9] +CVE-2008-0304 version (thuderbird, fixed 2.0.0.12) [since thunderbird-2.0.0.12-1.fc9] CVE-2008-0299 fixed (python-paramiko) #428730 [since python-paramiko-1.7.1-3.fc9] CVE-2008-0274 version (drupal, fixed 5.6) [since drupal-5.6-1.fc9] DRUPAL-SA-2008-007 CVE-2008-0273 version (drupal, fixed 5.6) [since drupal-5.6-1.fc9] DRUPAL-SA-2008-006 Index: fc7 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/fc7,v retrieving revision 1.297 retrieving revision 1.298 diff -u -r1.297 -r1.298 --- fc7 27 Feb 2008 09:39:39 -0000 1.297 +++ fc7 27 Feb 2008 16:43:20 -0000 1.298 @@ -51,6 +51,9 @@ CVE-2008-0544 fixed (SDL_image) #430695 [since FEDORA-2008-1208] ILBM overflow CVE-2008-0486 fixed (xine-lib, fixed 1.1.10.1) #431542 [since FEDORA-2008-1581] CVE-2008-0460 VULNERABLE (mediawiki) #430287 +CVE-2008-0420 version (firefox, fixed 2.0.0.12) [since FEDORA-2008-1435] +CVE-2008-0420 version (seamonkey, fixed 1.1.8) [since FEDORA-2008-1669] +CVE-2008-0420 VULNERABLE (thunderbird, fixed 2.0.0.12) #432047 CVE-2008-0419 fixed (firefox, fixed 2.0.0.12) #432042 [since FEDORA-2008-1435] CVE-2008-0419 fixed (seamonkey, fixed 1.1.8) #432045 [since FEDORA-2008-1669] CVE-2008-0419 VULNERABLE (thunderbird, fixed 2.0.0.12) #432047 @@ -74,6 +77,8 @@ CVE-2008-0386 fixed (xdg-utils) #429513 [since FEDORA-2008-1015] CVE-2008-0364 ignore (bittorrent) Windows only CVE-2008-0318 fixed (clamav, fixed 0.92.1) [since FEDORA-2008-1608] +CVE-2008-0304 version (seamonkey, fixed 1.1.8) [since FEDORA-2008-1669] +CVE-2008-0304 VULNERABLE (thunderbird, fixed 2.0.0.12) #432047 CVE-2008-0299 fixed (python-paramiko) #428729 [since FEDORA-2008-0644] CVE-2008-0274 version (drupal, fixed 5.6) DRUPAL-SA-2008-007 [since FEDORA-2008-0469] CVE-2008-0273 version (drupal, fixed 5.6) DRUPAL-SA-2008-006 [since FEDORA-2008-0469]

1 0

fedora-security/audit f8, 1.140, 1.141 f9, 1.130, 1.131 fc7, 1.296, 1.297
by fedora-security-commits＠redhat.com 27 Feb '08

27 Feb '08

Author: thoger Update of /cvs/fedora/fedora-security/audit In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv17781/audit Modified Files: f8 f9 fc7 Log Message: add lighttpd, mysql Index: f8 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/f8,v retrieving revision 1.140 retrieving revision 1.141 diff -u -r1.140 -r1.141 --- f8 26 Feb 2008 08:33:00 -0000 1.140 +++ f8 27 Feb 2008 09:39:39 -0000 1.141 @@ -10,6 +10,7 @@ GENERIC-MAP-NOMATCH VULNERABLE (comix) multiple issues tracked via #430635 GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since FEDORA-2008-1043] GENERIC-MAP-NOMATCH fixed (wyrd) #433720 [since FEDORA-2008-1963] +**CVE-2008-0983 VULNERABLE (lighttpd) CVE-2008-0932 fixed (sword) #433724 [since FEDORA-2008-1922] why? diatheke.pl is not shipped... CVE-2008-0928 fixed (qemu) #433561 [since FEDORA-2008-2001] CVE-2008-0928 fixed (kvm) #433564 [since FEDORA-2008-1973] @@ -329,6 +330,7 @@ CVE-2007-0537 version (kdebase, fixed 3.5.6) #225420 CVE-2007-0235 version (libgtop2, fixed 2.14.6) #222637 not sure, will triage CVE-2007-0095 backport (phpMyAdmin) #221694 "Reveals path" [since FEDORA-2007-4334] +CVE-2006-7232 version (mysql, fixed 5.0.32) CVE-2006-6698 VULNERABLE (GConf2) #219280 CVE-2006-6128 version (kernel, fixed 2.6.19-1.2911.fc6) #250625 ReiserFS MOKB CVE-2006-6107 version (dbus, fixed 1.0.2) #219665 Index: f9 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/f9,v retrieving revision 1.130 retrieving revision 1.131 diff -u -r1.130 -r1.131 --- f9 26 Feb 2008 10:13:27 -0000 1.130 +++ f9 27 Feb 2008 09:39:39 -0000 1.131 @@ -11,6 +11,7 @@ GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since xine-lib-1.1.10-2.fc9] GENERIC-MAP-NOMATCH VULNERABLE (wyrd) #433722 GENERIC-MAP-NOMATCH fixed (inkscape) #432807 [since inkscape-0.45.1+0.46pre1-4.fc9] +**CVE-2008-0983 VULNERABLE (lighttpd) CVE-2008-0932 backport (sword) #433726 [since sword-1.5.10-3.fc9] why? diatheke.pl is not shipped... CVE-2008-0928 backport (qemu) #433563 [since qemu-0.9.1-3.fc9] CVE-2008-0928 backport (kvm) #433566 [since kvm-61-2.fc9] @@ -307,6 +308,7 @@ CVE-2007-0537 version (kdebase, fixed 3.5.6) #225420 CVE-2007-0235 version (libgtop2, fixed 2.14.6) #222637 not sure, will triage CVE-2007-0095 backport (phpMyAdmin) #221694 "Reveals path" [since phpMyAdmin-2.11.3-1.fc9] +CVE-2006-7232 version (mysql, fixed 5.0.32) CVE-2006-6698 VULNERABLE (GConf2) #219280 CVE-2006-6128 version (kernel, fixed 2.6.19-1.2911.fc6) #250625 ReiserFS MOKB CVE-2006-6107 version (dbus, fixed 1.0.2) #219665 Index: fc7 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/fc7,v retrieving revision 1.296 retrieving revision 1.297 diff -u -r1.296 -r1.297 --- fc7 26 Feb 2008 08:33:00 -0000 1.296 +++ fc7 27 Feb 2008 09:39:39 -0000 1.297 @@ -11,6 +11,7 @@ GENERIC-MAP-NOMATCH VULNERABLE (comix) multiple issues tracked via #430635 GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since FEDORA-2008-1047] GENERIC-MAP-NOMATCH fixed (wyrd) #433721 [since FEDORA-2008-1986] +**CVE-2008-0983 VULNERABLE (lighttpd) CVE-2008-0932 fixed (sword) #433725 [since FEDORA-2008-1951] why? diatheke.pl is not shipped... CVE-2008-0928 fixed (qemu) #433562 [since FEDORA-2008-1995] CVE-2008-0928 fixed (kvm) #433565 [since FEDORA-2008-1993] @@ -806,6 +807,7 @@ CVE-2007-0005 version (kernel, fixed 2.6.20) [since FEDORA-2007-335] CVE-2007-0002 version (libwpd, fixed 0.8.9) #222808 [since FEDORA-2007-351] CVE-2007-0001 ignore (kernel) rhel4 2.6.9 only known affected +CVE-2006-7232 version (mysql, fixed 5.0.32) CVE-2006-7228 version (pcre, fixed 6.7) CVE-2006-7227 version (pcre, fixed 6.7) CVE-2006-7221 ignore (gftp) single zero byte overflow in fsplib

1 0

fedora-security/audit f9,1.129,1.130
by fedora-security-commits＠redhat.com 26 Feb '08

26 Feb '08

Author: thoger Update of /cvs/fedora/fedora-security/audit In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv4319/audit Modified Files: f9 Log Message: update on horde / imp / turba Index: f9 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/f9,v retrieving revision 1.129 retrieving revision 1.130 diff -u -r1.129 -r1.130 --- f9 26 Feb 2008 08:33:00 -0000 1.129 +++ f9 26 Feb 2008 10:13:27 -0000 1.130 @@ -16,7 +16,7 @@ CVE-2008-0928 backport (kvm) #433566 [since kvm-61-2.fc9] CVE-2008-0928 backport (xen) [since xen-3.2.0-8.fc9] CVE-2008-0882 version (cups, fixed 1.3.6) [since cups-1.3.6-1.fc9] -CVE-2008-0807 VULNERABLE (turba) #433318 +CVE-2008-0807 version (turba, fixed 2.1.7) #433318 [since turba-2.1.7-1.fc9] CVE-2008-0786 version (cacti, fixed 0.8.7b) #432761 [since cacti-0.8.7b-1.fc9] CVE-2008-0785 version (cacti, fixed 0.8.7b) #432761 [since cacti-0.8.7b-1.fc9] CVE-2008-0784 version (cacti, fixed 0.8.7b) #432761 [since cacti-0.8.7b-1.fc9] @@ -182,8 +182,8 @@ CVE-2007-6067 version (postgresql, fixed 8.2.6) #427774 [since postgresql-8.2.6-1.fc9] CVE-2007-6061 VULNERABLE (audacity) #393251 CVE-2007-6035 version (cacti, fixed 0.8.7a) #392001 [since cacti-0.8.7a-1.fc9] -CVE-2007-6018 VULNERABLE (horde) #428630 -CVE-2007-6018 VULNERABLE (imp) #428634 +CVE-2007-6018 version (horde, fixed 3.1.6) #428630 [since horde-3.1.6-1.fc9] +CVE-2007-6018 version (imp, fixed 4.1.6) #428634 [since imp-4.1.6-1.fc9] CVE-2007-6015 VULNERABLE (samba, fixed 3.0.28) #433622 CVE-2007-6013 VULNERABLE (wordpress) #426434 CVE-2007-5977 version (phpMyAdmin) #385911 [since phpMyAdmin-2.11.2.2-1.fc9]

1 0

fedora-security/audit f8, 1.139, 1.140 f9, 1.128, 1.129 fc7, 1.295, 1.296
by fedora-security-commits＠redhat.com 26 Feb '08

26 Feb '08

Author: thoger Update of /cvs/fedora/fedora-security/audit In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv19196/audit Modified Files: f8 f9 fc7 Log Message: sword cve i Index: f8 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/f8,v retrieving revision 1.139 retrieving revision 1.140 diff -u -r1.139 -r1.140 --- f8 26 Feb 2008 07:45:23 -0000 1.139 +++ f8 26 Feb 2008 08:33:00 -0000 1.140 @@ -10,7 +10,7 @@ GENERIC-MAP-NOMATCH VULNERABLE (comix) multiple issues tracked via #430635 GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since FEDORA-2008-1043] GENERIC-MAP-NOMATCH fixed (wyrd) #433720 [since FEDORA-2008-1963] -GENERIC-MAP-NOMATCH fixed (sword) #433724 [since FEDORA-2008-1922] +CVE-2008-0932 fixed (sword) #433724 [since FEDORA-2008-1922] why? diatheke.pl is not shipped... CVE-2008-0928 fixed (qemu) #433561 [since FEDORA-2008-2001] CVE-2008-0928 fixed (kvm) #433564 [since FEDORA-2008-1973] CVE-2008-0928 VULNERABLE (xen) #434639 Index: f9 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/f9,v retrieving revision 1.128 retrieving revision 1.129 diff -u -r1.128 -r1.129 --- f9 25 Feb 2008 17:25:49 -0000 1.128 +++ f9 26 Feb 2008 08:33:00 -0000 1.129 @@ -10,8 +10,8 @@ GENERIC-MAP-NOMATCH VULNERABLE (comix) multiple issues tracked via #430635 GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since xine-lib-1.1.10-2.fc9] GENERIC-MAP-NOMATCH VULNERABLE (wyrd) #433722 -GENERIC-MAP-NOMATCH VULNERABLE (sword) #433726 GENERIC-MAP-NOMATCH fixed (inkscape) #432807 [since inkscape-0.45.1+0.46pre1-4.fc9] +CVE-2008-0932 backport (sword) #433726 [since sword-1.5.10-3.fc9] why? diatheke.pl is not shipped... CVE-2008-0928 backport (qemu) #433563 [since qemu-0.9.1-3.fc9] CVE-2008-0928 backport (kvm) #433566 [since kvm-61-2.fc9] CVE-2008-0928 backport (xen) [since xen-3.2.0-8.fc9] Index: fc7 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/fc7,v retrieving revision 1.295 retrieving revision 1.296 diff -u -r1.295 -r1.296 --- fc7 26 Feb 2008 07:45:23 -0000 1.295 +++ fc7 26 Feb 2008 08:33:00 -0000 1.296 @@ -11,7 +11,7 @@ GENERIC-MAP-NOMATCH VULNERABLE (comix) multiple issues tracked via #430635 GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since FEDORA-2008-1047] GENERIC-MAP-NOMATCH fixed (wyrd) #433721 [since FEDORA-2008-1986] -GENERIC-MAP-NOMATCH fixed (sword) #433725 [since FEDORA-2008-1951] +CVE-2008-0932 fixed (sword) #433725 [since FEDORA-2008-1951] why? diatheke.pl is not shipped... CVE-2008-0928 fixed (qemu) #433562 [since FEDORA-2008-1995] CVE-2008-0928 fixed (kvm) #433565 [since FEDORA-2008-1993] CVE-2008-0928 VULNERABLE (xen) #434638

1 0

fedora-security/audit f8, 1.138, 1.139 fc7, 1.294, 1.295
by fedora-security-commits＠redhat.com 26 Feb '08

26 Feb '08

Author: lkundrak Update of /cvs/fedora/fedora-security/audit In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv10809 Modified Files: f8 fc7 Log Message: check-updates Index: f8 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/f8,v retrieving revision 1.138 retrieving revision 1.139 diff -u -r1.138 -r1.139 --- f8 25 Feb 2008 17:25:49 -0000 1.138 +++ f8 26 Feb 2008 07:45:23 -0000 1.139 @@ -9,12 +9,12 @@ GENERIC-MAP-NOMATCH VULNERABLE (comix) multiple issues tracked via #430635 GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since FEDORA-2008-1043] -GENERIC-MAP-NOMATCH VULNERABLE (wyrd) #433720 -GENERIC-MAP-NOMATCH VULNERABLE (sword) #433724 -CVE-2008-0928 VULNERABLE (qemu) #433561 -CVE-2008-0928 VULNERABLE (kvm) #433564 +GENERIC-MAP-NOMATCH fixed (wyrd) #433720 [since FEDORA-2008-1963] +GENERIC-MAP-NOMATCH fixed (sword) #433724 [since FEDORA-2008-1922] +CVE-2008-0928 fixed (qemu) #433561 [since FEDORA-2008-2001] +CVE-2008-0928 fixed (kvm) #433564 [since FEDORA-2008-1973] CVE-2008-0928 VULNERABLE (xen) #434639 -CVE-2008-0882 VULNERABLE (cups, fixed 1.3.6) #433803 +CVE-2008-0882 fixed (cups, fixed 1.3.6) #433803 [since FEDORA-2008-1901] CVE-2008-0782 fixed (moin) #432019 [since FEDORA-2008-1562] CVE-2008-0781 fixed (moin) #432750 [since FEDORA-2008-1905] CVE-2008-0780 fixed (moin) #432750 [since FEDORA-2008-1905] Index: fc7 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/fc7,v retrieving revision 1.294 retrieving revision 1.295 diff -u -r1.294 -r1.295 --- fc7 25 Feb 2008 17:25:49 -0000 1.294 +++ fc7 26 Feb 2008 07:45:23 -0000 1.295 @@ -10,12 +10,12 @@ GENERIC-MAP-NOMATCH VULNERABLE (comix) multiple issues tracked via #430635 GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since FEDORA-2008-1047] -GENERIC-MAP-NOMATCH VULNERABLE (wyrd) #433721 -GENERIC-MAP-NOMATCH VULNERABLE (sword) #433725 -CVE-2008-0928 VULNERABLE (qemu) #433562 -CVE-2008-0928 VULNERABLE (kvm) #433565 +GENERIC-MAP-NOMATCH fixed (wyrd) #433721 [since FEDORA-2008-1986] +GENERIC-MAP-NOMATCH fixed (sword) #433725 [since FEDORA-2008-1951] +CVE-2008-0928 fixed (qemu) #433562 [since FEDORA-2008-1995] +CVE-2008-0928 fixed (kvm) #433565 [since FEDORA-2008-1993] CVE-2008-0928 VULNERABLE (xen) #434638 -CVE-2008-0882 VULNERABLE (cups, fixed 1.3.6) #433802 +CVE-2008-0882 fixed (cups, fixed 1.3.6) #433802 [since FEDORA-2008-1976] CVE-2008-0782 fixed (moin) #432020 [since FEDORA-2008-1486] CVE-2008-0781 fixed (moin) #432749 [since FEDORA-2008-1880] CVE-2008-0780 fixed (moin) #432749 [since FEDORA-2008-1880]

1 0

fedora-security/audit f8, 1.137, 1.138 f9, 1.127, 1.128 fc7, 1.293, 1.294
by fedora-security-commits＠redhat.com 25 Feb '08

25 Feb '08

Author: thoger Update of /cvs/fedora/fedora-security/audit In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv16892/audit Modified Files: f8 f9 fc7 Log Message: note cve id of qemu block device driver issue Index: f8 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/f8,v retrieving revision 1.137 retrieving revision 1.138 diff -u -r1.137 -r1.138 --- f8 25 Feb 2008 13:59:02 -0000 1.137 +++ f8 25 Feb 2008 17:25:49 -0000 1.138 @@ -9,11 +9,11 @@ GENERIC-MAP-NOMATCH VULNERABLE (comix) multiple issues tracked via #430635 GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since FEDORA-2008-1043] -GENERIC-MAP-NOMATCH VULNERABLE (qemu) #433561 -GENERIC-MAP-NOMATCH VULNERABLE (kvm) #433564 -GENERIC-MAP-NOMATCH VULNERABLE (xen) #434639 GENERIC-MAP-NOMATCH VULNERABLE (wyrd) #433720 GENERIC-MAP-NOMATCH VULNERABLE (sword) #433724 +CVE-2008-0928 VULNERABLE (qemu) #433561 +CVE-2008-0928 VULNERABLE (kvm) #433564 +CVE-2008-0928 VULNERABLE (xen) #434639 CVE-2008-0882 VULNERABLE (cups, fixed 1.3.6) #433803 CVE-2008-0782 fixed (moin) #432019 [since FEDORA-2008-1562] CVE-2008-0781 fixed (moin) #432750 [since FEDORA-2008-1905] Index: f9 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/f9,v retrieving revision 1.127 retrieving revision 1.128 diff -u -r1.127 -r1.128 --- f9 25 Feb 2008 13:59:02 -0000 1.127 +++ f9 25 Feb 2008 17:25:49 -0000 1.128 @@ -9,12 +9,12 @@ GENERIC-MAP-NOMATCH VULNERABLE (comix) multiple issues tracked via #430635 GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since xine-lib-1.1.10-2.fc9] -GENERIC-MAP-NOMATCH backport (qemu) #433563 [since qemu-0.9.1-3.fc9] -GENERIC-MAP-NOMATCH backport (kvm) #433566 [since kvm-61-2.fc9] -GENERIC-MAP-NOMATCH backport (xen) [since xen-3.2.0-8.fc9] GENERIC-MAP-NOMATCH VULNERABLE (wyrd) #433722 GENERIC-MAP-NOMATCH VULNERABLE (sword) #433726 GENERIC-MAP-NOMATCH fixed (inkscape) #432807 [since inkscape-0.45.1+0.46pre1-4.fc9] +CVE-2008-0928 backport (qemu) #433563 [since qemu-0.9.1-3.fc9] +CVE-2008-0928 backport (kvm) #433566 [since kvm-61-2.fc9] +CVE-2008-0928 backport (xen) [since xen-3.2.0-8.fc9] CVE-2008-0882 version (cups, fixed 1.3.6) [since cups-1.3.6-1.fc9] CVE-2008-0807 VULNERABLE (turba) #433318 CVE-2008-0786 version (cacti, fixed 0.8.7b) #432761 [since cacti-0.8.7b-1.fc9] Index: fc7 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/fc7,v retrieving revision 1.293 retrieving revision 1.294 diff -u -r1.293 -r1.294 --- fc7 25 Feb 2008 13:59:02 -0000 1.293 +++ fc7 25 Feb 2008 17:25:49 -0000 1.294 @@ -10,11 +10,11 @@ GENERIC-MAP-NOMATCH VULNERABLE (comix) multiple issues tracked via #430635 GENERIC-MAP-NOMATCH version (xine-lib, fixed 1.1.10) [since FEDORA-2008-1047] -GENERIC-MAP-NOMATCH VULNERABLE (qemu) #433562 -GENERIC-MAP-NOMATCH VULNERABLE (kvm) #433565 -GENERIC-MAP-NOMATCH VULNERABLE (xen) #434638 GENERIC-MAP-NOMATCH VULNERABLE (wyrd) #433721 GENERIC-MAP-NOMATCH VULNERABLE (sword) #433725 +CVE-2008-0928 VULNERABLE (qemu) #433562 +CVE-2008-0928 VULNERABLE (kvm) #433565 +CVE-2008-0928 VULNERABLE (xen) #434638 CVE-2008-0882 VULNERABLE (cups, fixed 1.3.6) #433802 CVE-2008-0782 fixed (moin) #432020 [since FEDORA-2008-1486] CVE-2008-0781 fixed (moin) #432749 [since FEDORA-2008-1880]

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

security-commits February 2008