Author: bressers Update of /cvs/fedora/fedora-security/audit In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv5528 Modified Files: fc7 Log Message: Deal with gd and gdm Index: fc7 =================================================================== RCS file: /cvs/fedora/fedora-security/audit/fc7,v retrieving revision 1.38 retrieving revision 1.39 diff -u -r1.38 -r1.39 --- fc7 11 Jul 2007 00:07:58 -0000 1.38 +++ fc7 12 Jul 2007 00:52:20 -0000 1.39 @@ -62,11 +62,11 @@ CVE-2007-2867 version (seamonkey, fixed 1.0.9) CVE-2007-2865 VULNERABLE (phpPgAdmin) #241489 CVE-2007-2844 ignore (php) #241641 -*CVE-2007-2843 ignore (konqueror) safari specific +CVE-2007-2843 ignore (konqueror) safari specific *CVE-2007-2821 VULNERABLE (wordpress, fixed 2.2) #240970 *CVE-2007-2799 (file) CVE-2007-2768 ignore (openssh) needs pam OPIE which is not shipped. -*CVE-2007-2756 ignore (gd) DoS only +CVE-2007-2756 ignore (gd) DoS only *CVE-2007-2754 (freetype) CVE-2007-2721 patch (jasper, fixed 1.900.1-2) #240397 *CVE-2007-2683 (mutt) @@ -147,7 +147,7 @@ *CVE-2007-1599 version (wordpress, fixed 2.1.3-0.rc2) #233703 CVE-2007-1583 version (php, fixed 5.2.2) CVE-2007-1565 ignore (konqueror) client crash -*CVE-2007-1564 vulnerable (konqueror) [#CVE-2007-1564] +CVE-2007-1564 vulnerable (konqueror) [#CVE-2007-1564] CVE-2007-1562 (firefox, seamonkey, thunderbird) CVE-2007-1560 version (squid, fixed 2.6.STABLE12) *CVE-2007-1558 version (claws-mail, fixed 2.9.1) #237293 @@ -285,7 +285,7 @@ CVE-2007-0458 version (wireshark, fixed 0.99.5) #227140 CVE-2007-0457 version (wireshark, fixed 0.99.5) #227140 CVE-2007-0456 version (wireshark, fixed 0.99.5) #227140 -*CVE-2007-0455 VULNERABLE (gd) #224610 +CVE-2007-0455 version (gd, fixed 2.0.34) #224610 *CVE-2007-0454 (samba) *CVE-2007-0452 (samba) *CVE-2007-0451 version (spamassassin, fixed 3.1.8) [since FEDORA-2007-241] @@ -394,7 +394,7 @@ *CVE-2006-6303 version (ruby, fixed 1.8.5.2) [since FEDORA-2006-1441] *CVE-2006-6301 version (denyhosts, fixed 2.6-2) #218824 *CVE-2006-6297 ignore (kdegraphics) just a crash -*CVE-2006-6238 (konqueror) probably safari only +CVE-2006-6238 (konqueror) probably safari only CVE-2006-6236 ignore, no-ship (acroread) *CVE-2006-6235 patch (gnupg2, fixed 2.0.1-2) #218821 *CVE-2006-6235 backport (gnupg, fixed 1.4.6) [since FEDORA-2006-1406] @@ -410,7 +410,7 @@ *CVE-2006-6120 version (koffice, fixed 1.6.1) #218030 *CVE-2006-6107 VULNERABLE (dbus, fixed 1.0.2) #219665 CVE-2006-6106 version (kernel, fixed 2.6.19.2, fixed 2.6.20-rc5) [since FEDORA-2006-1471] -*CVE-2006-6105 version (gdm, fixed 2.14.11) [since FEDORA-2006-1468] +CVE-2006-6105 version (gdm, fixed 2.14.11) [since FEDORA-2006-1468] *CVE-2006-6104 backport (mono, fixed 1.1.13.8.2) #220853 [since FEDORA-2007-067] *CVE-2006-6103 (xorg-x11) *CVE-2006-6102 (xorg-x11) @@ -586,7 +586,7 @@ CVE-2006-4486 version (php, fixed 5.1.6) CVE-2006-4485 version (php, fixed 5.1.5) CVE-2006-4484 version (php, fixed 5.1.5) -*CVE-2006-4484 ignore (gd) +CVE-2006-4484 ignore (gd) CVE-2006-4483 ignore (php) not linux CVE-2006-4482 version (php, fixed 5.1.5) CVE-2006-4481 ignore (php) safe mode isn't safe @@ -625,7 +625,7 @@ *CVE-2006-4192 patch (libmodplug, fixed 0.8-3) CVE-2006-4182 version (clamav, fixed 0.88.5) #210973 *CVE-2006-4181 (gnuradius) -*CVE-2006-4146 backport (gdb) +CVE-2006-4146 backport (gdb) *CVE-2006-4145 version (kernel, fixed 2.6.17.10, fixed 2.6.18-rc5) needs a better upstream fix *CVE-2006-4144 backport (ImageMagick, fixed 6.2.9) *CVE-2006-4124 (lesstif) @@ -770,7 +770,7 @@ *CVE-2006-2932 ignore (kernel) no 4G/4G split support *CVE-2006-2920 version (sylpheed-claws, fixed 2.2.2) *CVE-2006-2916 ignore (arts) not shipped setuid -*CVE-2006-2906 backport (gd) from changelog +CVE-2006-2906 backport (gd) from changelog CVE-2006-2894 VULNERABLE (seamonkey) #194511 CVE-2006-2894 VULNERABLE (firefox) https://bugzilla.mozilla.org/show_bug.cgi?id=56236 CVE-2006-2842 version (squirrelmail, fixed 1.4.6) @@ -817,7 +817,7 @@ *CVE-2006-2489 version (nagios, fixed 2.3.1) *CVE-2006-2480 patch (dia, fixed 0.95-2) bz#192535 *CVE-2006-2453 patch (dia, fixed 0.95-3) #192830 -*CVE-2006-2452 version (gdm) +CVE-2006-2452 version (gdm) *CVE-2006-2451 version (kernel, fixed 2.6.17.4) *CVE-2006-2450 (vnc) *CVE-2006-2449 version (kdebase, fixed 3.5.4) @@ -1021,7 +1021,7 @@ *CVE-2006-1061 version (curl, fixed 7.15.3) *CVE-2006-1059 version (samba, fixed 3.0.22 at least) *CVE-2006-1058 version (busybox, fixed 1.2.x) -*CVE-2006-1057 version (gdm, fixed 2.14.1) +CVE-2006-1057 version (gdm, fixed 2.14.1) *CVE-2006-1056 version (kernel, fixed 2.6.16.9) *CVE-2006-1055 version (kernel, fixed 2.6.17) *CVE-2006-1053 (fedora directory server) @@ -1918,7 +1918,7 @@ *CVE-2004-1002 ignore (ppp) not a security issue *CVE-2004-0997 version (kernel, not 2.6) *CVE-2004-0996 backport (cscope) not fixed in 15.5 -*CVE-2004-0990 version (gd, fixed 2.0.33 at least) +CVE-2004-0990 version (gd, fixed 2.0.33 at least) *CVE-2004-0989 version (libxml2, fixed 2.6.15) *CVE-2004-0986 version (iptables, fixed 1.2.12) *CVE-2004-0983 version (ruby, fixed 1.8.2) @@ -1943,7 +1943,7 @@ *CVE-2004-0956 version (mysql, fixed 4.0.20) *CVE-2004-0946 version (nfs-utils, fixed 1.0.6-r6) *CVE-2004-0942 version (httpd, not 2.2) -*CVE-2004-0941 backport (gd) +CVE-2004-0941 backport (gd) *CVE-2004-0940 version (httpd, not 2.2) *CVE-2004-0938 version (freeradius, fixed 1.0.1) *CVE-2004-0930 version (samba, fixed 3.0.8) @@ -2062,7 +2062,7 @@ *CVE-2004-0547 version (postgresql, fixed 7.2.1) CVE-2004-0541 version (squid, fixed 2.5.STABLE6) *CVE-2004-0535 version (kernel, fixed 2.6.6) -*CVE-2004-0527 version (konqueror, not 3+) +CVE-2004-0527 version (konqueror, not 3+) CVE-2004-0523 version (krb5, fixed 1.3.4) *CVE-2004-0521 version (squirrelmail, fixed 1.4.3a) *CVE-2004-0520 version (squirrelmail, fixed 1.4.3a) @@ -2239,8 +2239,8 @@ *CVE-2003-0851 version (openssl, not 0.9.8) *CVE-2003-0851 version (openssl097a, not 0.9.7) *CVE-2003-0795 version (quagga, fixed 0.96.4) -*CVE-2003-0794 version (gdm, fixed 2.4.1.7) -*CVE-2003-0793 version (gdm, fixed 2.4.1.7) +CVE-2003-0794 version (gdm, fixed 2.4.1.7) +CVE-2003-0793 version (gdm, fixed 2.4.1.7) *CVE-2003-0792 version (fetchmail, 6.2.4 only) *CVE-2003-0789 version (httpd, not 2.2) CVE-2003-0788 version (cups, fixed 1.1.19) @@ -2277,9 +2277,9 @@ *CVE-2003-0552 version (kernel, not 2.6) *CVE-2003-0551 version (kernel, not 2.6) *CVE-2003-0550 version (kernel, not 2.6) -*CVE-2003-0549 version (gdm, fixed 2.4.1.6) -*CVE-2003-0548 version (gdm, fixed 2.4.1.6) -*CVE-2003-0547 version (gdm, fixed 2.4.1.6) +CVE-2003-0549 version (gdm, fixed 2.4.1.6) +CVE-2003-0548 version (gdm, fixed 2.4.1.6) +CVE-2003-0547 version (gdm, fixed 2.4.1.6) *CVE-2003-0545 version (openssl, not 0.9.8) *CVE-2003-0545 backport (openssl097a, fixed 0.9.7c) *CVE-2003-0544 version (openssl, not 0.9.8) -- fedora-extras-commits mailing list fedora-extras-commits@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-extras-commits -- Fedora-security-list mailing list Fedora-security-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-security-list
