Author: trassl Update of /cvs/fedora/fedora-security/audit In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv22232 Modified Files: fc7 Log Message: Processed rsync. Index: fc7 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/fc7,v retrieving revision 1.4 retrieving revision 1.5 diff -u -r1.4 -r1.5 --- fc7 12 Jun 2007 19:18:56 -0000 1.4 +++ fc7 12 Jun 2007 20:40:54 -0000 1.5 @@ -804,7 +804,7 @@ *CVE-2006-2162 version (nagios, fixed 2.3.1) bz#190612 *CVE-2006-2120 version (libtiff, fixed 3.8.2 at least) *CVE-2006-2093 version (nessus, fixed 2.2.7) bz#191053 -*CVE-2006-2083 version (rsync, fixed 2.6.8) +CVE-2006-2083 version (rsync, fixed 2.6.8) *CVE-2006-2073 ignore (bind) http://www.kb.cert.org/vuls/id/MIMG-6P8GRP *CVE-2006-2071 version (kernel, fixed 2.6.16.6) *CVE-2006-2057 ignore (firefox) not Linux @@ -1750,7 +1750,7 @@ *CVE-2004-2149 version (mysql, fixed 4.1.5) *CVE-2004-2136 ignore (dm-crypt) design *CVE-2004-2135 ignore (kernel) design -*CVE-2004-2093 ignore (rsync) not security issue +CVE-2004-2093 ignore (rsync) not a security issue (rsync is not setuid) *CVE-2004-2069 version (openssh, not 4) *CVE-2004-2014 version (wget, fixed 1.10.1) *CVE-2004-2013 version (kernel, not 2.6) @@ -1946,7 +1946,7 @@ *CVE-2004-0797 version (zlib, fixed 1.2.2.2 at least) *CVE-2004-0797 version (zlib) *CVE-2004-0796 version (spamassassin, fixed 2.64) -*CVE-2004-0792 version (rsync, fixed 2.6.3) +CVE-2004-0792 version (rsync, fixed 2.6.3) *CVE-2004-0791 version (kernel, fixed 2.6.9) *CVE-2004-0790 version (kernel, not 2.6) *CVE-2004-0788 version (gtk2, fixed 2.6.7 at least) @@ -2035,7 +2035,7 @@ *CVE-2004-0452 version (perl, fixed 5.8.8) *CVE-2004-0447 version (kernel, fixed 2.6.5) *CVE-2004-0427 version (kernel, fixed 2.6.6) -*CVE-2004-0426 version (rsync, fixed 2.6.1) +CVE-2004-0426 version (rsync, fixed 2.6.1) *CVE-2004-0424 version (kernel, fixed 2.6.4) *CVE-2004-0421 version (libpng, fixed 1.0.16) *CVE-2004-0419 version (xorg-x11, fixed 6.8.2 at least) @@ -2163,7 +2163,7 @@ *CVE-2003-0967 version (freeradius, fixed after 0.9.2) *CVE-2003-0965 version (mailman, fixed 2.1.4) *CVE-2003-0963 version (lftp, fixed after 2.6.9) -*CVE-2003-0962 version (rsync, fixed 2.5.7) +CVE-2003-0962 version (rsync, fixed 2.5.7) *CVE-2003-0961 version (kernel, fixed 2.4.23) *CVE-2003-0959 version (kernel, fixed 2.4.21) *CVE-2003-0956 version (kernel, fixed 2.4.22) @@ -2576,16 +2576,17 @@ *CVE-2002-0083 version (openssh, fixed 3.1) *CVE-2002-0082 version (mod_ssl, not httpd 2.2) *CVE-2002-0081 version (php, not 4.2+) -*CVE-2002-0080 version (rsync, fixed 2.5.3) +CVE-2002-0080 version (rsync, fixed 2.5.3) *CVE-2002-0069 version (squid, fixed 2.4STABLE4) *CVE-2002-0068 version (squid, fixed 2.4STABLE4) *CVE-2002-0067 version (squid, fixed 2.4STABLE4) *CVE-2002-0063 version (cups, fixed 1.1.14) *CVE-2002-0062 version (ncurses, only 5.0) *CVE-2002-0060 version (kernel, fixed 2.5.5) -*CVE-2002-0059 ** zlib (cvs, dump, gcc, libgcj, kernel, rsync, vnc) +*CVE-2002-0059 ** zlib (cvs, dump, gcc, libgcj, kernel, vnc) +CVE-2002-0059 version (rsync, fixed 2.5.4/2.6.6) *CVE-2002-0059 version (zlib, fixed 1.1.4) -*CVE-2002-0048 version (rsync, fixed 2.5.2) +CVE-2002-0048 version (rsync, fixed 2.5.2) *CVE-2002-0046 version (kernel, fixed 2.4.0) *CVE-2002-0045 version (openldap, fixed 2.0.20) *CVE-2002-0044 version (enscript, fixed 1.6.4 at least) @@ -2615,4 +2616,5 @@ *CVE-1999-1332 (gzip) CVE-1999-0997 ignore, no-ship (wu-ftpd) *CVE-1999-0710 (squid) +CVE-1999-0473 version (rsync, fixed 2.3.1) *CVE-1999-0103 (bind) -- fedora-extras-commits mailing list fedora-extras-commits@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-extras-commits -- Fedora-security-list mailing list Fedora-security-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-security-list
