Author: thoger
Update of /cvs/fedora/fedora-security/audit In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv8625/audit
Modified Files: f9 Log Message: asterisk fixes in rawhide
Index: f9 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/f9,v retrieving revision 1.170 retrieving revision 1.171 diff -u -r1.170 -r1.171 --- f9 30 Mar 2008 23:13:52 -0000 1.170 +++ f9 31 Mar 2008 12:32:21 -0000 1.171 @@ -18,15 +18,15 @@ CVE-2008-1468 VULNERABLE (namazu) #438668 CVE-2008-1467 fixed (centerim) #438871 CVE-2008-1394 ignore (plone) -CVE-2008-1390 VULNERABLE (asterisk, fixed 1.6.0-beta6) #438134 +CVE-2008-1390 version (asterisk, fixed 1.6.0-beta6) #438134 [since asterisk-1.6.0-0.6.beta6.fc9] CVE-2008-1372 ignore (bzip2) Just a crash CVE-2008-1360 VULNERABLE (nagios) #437852 CVE-2008-1353 ignore (zabbix) #437848 Needs authorization -CVE-2008-1333 VULNERABLE (asterisk, fixed 1.6.0-beta6) #438134 +CVE-2008-1333 version (asterisk, fixed 1.6.0-beta6) #438134 [since asterisk-1.6.0-0.6.beta6.fc9] CVE-2008-1332 ignore (asterisk) not affected according to upstream advisory CVE-2008-1318 ignore (mediawiki) 1.11.2 security fix applies only for 1.11 we never shipped CVE-2008-1304 ignore (wordpress) bogus CVE id description? -CVE-2008-1289 VULNERABLE (asterisk, fixed 1.6.0-beta6) #438134 +CVE-2008-1289 version (asterisk, fixed 1.6.0-beta6) #438134 [since asterisk-1.6.0-0.6.beta6.fc9] CVE-2008-1284 version (horde, fixed 3.1.7) #436628 CVE-2008-1270 ignore (lighttpd) Not a bug, requires unlikely and incredibly stupid configuration change with well-documented effects. **CVE-2008-1227 fixed (libsilc) We updated this as non-security
security-commits@lists.fedoraproject.org