fedora-security/audit fc7,1.54,1.55

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Author: lkundrak

Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv1903

Modified Files:
	fc7 
Log Message:
Updated to match FEDORA-2007-1070



Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.54
retrieving revision 1.55
diff -u -r1.54 -r1.55
--- fc7	27 Jul 2007 15:56:53 -0000	1.54
+++ fc7	1 Aug 2007 15:19:31 -0000	1.55
@@ -1,35 +1,44 @@
 # $Id$
 
-** are items that need attention
+# ** are items that need attention
+# *CVE are items that need verification for Fedora 7
+# (mozilla) = (firefox, seamonkey, thunderbird, yelp, devhelp, galeon, liferea. epiphany)
+# A couple of first F7 updates were marked as FEDORA-2007-0001
 
-*CVE are items that need verification for Fedora 7
+# Version: FEDORA-2007-1070
 
 CVE-NOID      VULNERABLE (tor, fixed 0.1.2.15) #249840
-CVE-2007-4168 VULNERABLE (libexif) #243890
+CVE-2007-4168 backport (libexif) #243892 [since FEDORA-2007-0414]
 CVE-2007-4029 VULNERABLE (libvorbis) #245991
-CVE-2007-3950 version (lighttpd, fixed 1.4.16) #249162
-CVE-2007-3949 version (lighttpd, fixed 1.4.16) #249162
-CVE-2007-3948 version (lighttpd, fixed 1.4.16) #249162
-CVE-2007-3947 version (lighttpd, fixed 1.4.16) #249162
-CVE-2007-3946 version (lighttpd, fixed 1.4.16) #249162
+CVE-2007-3950 version (lighttpd, fixed 1.4.16) #249162 [since FEDORA-2007-1299]
+CVE-2007-3949 version (lighttpd, fixed 1.4.16) #249162 [since FEDORA-2007-1299]
+CVE-2007-3948 version (lighttpd, fixed 1.4.16) #249162 [since FEDORA-2007-1299]
+CVE-2007-3947 version (lighttpd, fixed 1.4.16) #249162 [since FEDORA-2007-1299]
+CVE-2007-3946 version (lighttpd, fixed 1.4.16) #249162 [since FEDORA-2007-1299]
 CVE-2007-3841 WTF (pidgin)
 CVE-2007-3820 ** (kdebase) #248537
 CVE-2007-3799 ** (php)
 CVE-2007-3781 ** (mysql)
 CVE-2007-3782 ** (mysql)
 CVE-2007-3770 ** (xfce-utils)
+CVE-2007-3738 version (mozilla) #248518 [since FEDORA-2007-1138]
+CVE-2007-3737 version (mozilla) #248518 [since FEDORA-2007-1138]
+CVE-2007-3736 version (mozilla) #248518 [since FEDORA-2007-1138]
+CVE-2007-3735 version (mozilla) #248518 [since FEDORA-2007-1138]
 CVE-2007-3728 ignore (libsilc, 1.1.1 only)
 CVE-2007-3725 ** (clamav)
-CVE-2007-3713 VULNERABLE (centericq) #247979
+CVE-2007-3713 backport (centericq) #247979 [since FEDORA-2007-1160]
+CVE-2007-3656 version (mozilla) #248518 [since FEDORA-2007-1138]
+CVE-2007-3642 version (kernel, fixed 2.6.22.1) [since FEDORA-2007-1130]
 CVE-2007-3628 version (php-pear-Structures-DataGrid-DataSource-MDB2, fixed 0.1.10)
 CVE-2007-3555 VULNERABLE (moodle) #247528
 CVE-2007-3546 ignore (nessus-core) Windows only
-CVE-2007-3528 VULNERABLE (dar, fixed 2.3.4) #246760
-CVE-2007-3544 ** (wordpress) #245211
-CVE-2007-3543 ** (wordpress) #245211
+CVE-2007-3528 version (dar, fixed 2.3.4) #246760 [since FEDORA-2007-0904]
+CVE-2007-3544 VULNERABLE (wordpress, NOT fixed 2.2.1) #245211 Incomplete fix for CVE-2007-3543
+CVE-2007-3543 version (wordpress, fixed 2.2.1) #245211 [since FEDORA-2007-0894]
 CVE-2007-3508 ignore (glibc) not an issue
 CVE-2007-3506 version (freetype, fixed 2.3.4) #235479 [since FEDORA-2007-0033]
-CVE-2007-3507 version (flac123, fixed 0.0.10) #246322
+CVE-2007-3507 version (flac123, fixed 0.0.10) #246322 [since FEDORA-2007-1045]
 CVE-2007-3478 ** (gd)
 CVE-2007-3477 ** (gd)
 CVE-2007-3476 ** (gd)
@@ -37,65 +46,74 @@
 CVE-2007-3474 ** (gd)
 CVE-2007-3473 ** (gd)
 CVE-2007-3472 ** (gd)
-CVE-2007-3410 VULNERABLE (HelixPlayer) #245838
+CVE-2007-3410 backport (HelixPlayer) #245838 [since CVE-2007-3410]
 CVE-2007-3409 version (perl-Net-DNS, fixed 0.60) #245807
-CVE-2007-3393 VULNERABLE (wireshark)
-CVE-2007-3392 VULNERABLE (wireshark)
-CVE-2007-3391 VULNERABLE (wireshark)
-CVE-2007-3390 VULNERABLE (wireshark)
-CVE-2007-3389 VULNERABLE (wireshark)
+CVE-2007-3393 version (wireshark, fixed 0.99.6) [since FEDORA-2007-0982]
+CVE-2007-3392 version (wireshark, fixed 0.99.6) [since FEDORA-2007-0982]
+CVE-2007-3391 version (wireshark, fixed 0.99.6) [since FEDORA-2007-0982]
+CVE-2007-3390 version (wireshark, fixed 0.99.6) [since FEDORA-2007-0982]
+CVE-2007-3389 version (wireshark, fixed 0.99.6) [since FEDORA-2007-0982]
+CVE-2007-3381 version (gdm, fixed 2.18.4) #250277 [since FEDORA-2007-1362]
 CVE-2007-3378 ignore (php) safe mode escape
-CVE-2007-3377 version (perl-Net-DNS, fixed 0.60) #245612
-CVE-2007-3241 ** (wordpress) #245211
-CVE-2007-3240 ** (wordpress) #245211
-CVE-2007-3239 ** (wordpress) #245211
-CVE-2007-3238 ** (wordpress) #245211
+CVE-2007-3377 version (perl-Net-DNS, fixed 0.60) #245612 [since EDORA-2007-0668]
+CVE-2007-3257 backport (evolution) #244283 [since FEDORA-2007-0464]
+CVE-2007-3241 version (wordpress, fixed 2.2.1) #245211 [since FEDORA-2007-0894]
+CVE-2007-3240 version (wordpress, fixed 2.2.1) #245211 [since FEDORA-2007-0894]
+CVE-2007-3239 version (wordpress, fixed 2.2.1) #245211 [since FEDORA-2007-0894]
+CVE-2007-3238 version (wordpress, fixed 2.2.1) #245211 [since FEDORA-2007-0894]
+CVE-2007-3140 version (wordpress, fixed 2.2.1) #245211 [since FEDORA-2007-0894]
+CVE-2007-3231 version (mecab, fixed 0.96) [since FEDORA-2007-0366]
 CVE-2007-3209 ignore (mail-notification, shipped with SSL enabled)
 CVE-2007-3106 VULNERABLE (libvorbis) #245991
-CVE-2007-3100 version (iscsi-initiator-utils, fixed 6.2.0.865)
-CVE-2007-3099 version (iscsi-initiator-utils, fixed 6.2.0.865)
+CVE-2007-3100 version (iscsi-initiator-utils, fixed 6.2.0.865) [since FEDORA-2007-0543]
+CVE-2007-3099 version (iscsi-initiator-utils, fixed 6.2.0.865) [since FEDORA-2007-0543]
 CVE-2007-3165 VULNERABLE (tor, fixed 0.1.2.14) #244502
-CVE-2007-3153 version (c-ares, fixed 1.4.0) #243591
-CVE-2007-3152 version (c-ares, fixed 1.4.0) #243591
+CVE-2007-3153 version (c-ares, fixed 1.4.0) #243591 [since FEDORA-2007-0724]
+CVE-2007-3152 version (c-ares, fixed 1.4.0) #243591 [since FEDORA-2007-0724]
 CVE-2007-3145 VULNERABLE (galeon) **
-CVE-2007-3140 ** (wordpress) #245211
+CVE-2007-3140 version (wordpress, fixed 2.2.1) #245211 [since FEDORA-2007-0894]
 CVE-2007-3126 ignore (gimp) just a crash
 CVE-2007-3123 VULNERABLE (clamav, fixed 0.90.3) #245219
 CVE-2007-3122 VULNERABLE (clamav, fixed 0.90.3) #245219
-CVE-2007-3121 version (zvbi, fixed 0.2.25)
+CVE-2007-3121 version (zvbi, fixed 0.2.25) [since FEDORA-2007-0175]
 *CVE-2007-3113 VULNERABLE (cacti) #243592
 *CVE-2007-3112 VULNERABLE (cacti) #243592
+CVE-2007-3089 version (mozilla) #248518 [since FEDORA-2007-1138]
 CVE-2007-3025 ignore (clamav, Solaris only)
 CVE-2007-3024 VULNERABLE (clamav, fixed 0.90.3) #245219
 CVE-2007-3023 VULNERABLE (clamav, fixed 0.90.3) #245219
 CVE-2007-3007 ignore (php) safe mode isn't safe
 *CVE-2007-2975 (openfire)
+CVE-2007-2949 version (gimp, fixed, 2.2.16) [since FEDORA-2007-0725]
+CVE-2007-2926 version (bind, fixed 9.4.1) [since FEDORA-2007-1247]
+CVE-2007-2925 version (bind, fixed 9.4.1) [since FEDORA-2007-1247]
 *CVE-2007-2894 VULNERABLE (bochs) #241799
 CVE-2007-2894 ignore (bochs, unreproducible) #241799
-CVE-2007-2893 patch (bochs, fixed 2.3-5) #241799
+CVE-2007-2893 patch (bochs, fixed 2.3-5) #241799 [since FEDORA-2007-1153]
 CVE-2007-2876 version (kernel, fixed 2.6.21.5) [ since FEDORA-2007-0409 ]
-*CVE-2007-2874 (wpa_supplicant) #242455
-CVE-2007-2873 version (spamassassin, fixed 3.2.1)
-CVE-2007-2871 version (seamonkey, fixed 1.0.9)
-CVE-2007-2870 version (seamonkey, fixed 1.0.9)
-CVE-2007-2869 (firefox)
-CVE-2007-2868 version (seamonkey, fixed 1.0.9)
-CVE-2007-2867 version (seamonkey, fixed 1.0.9)
-CVE-2007-2865 version (phpPgAdmin, fixed 4.1.2) #241489
+CVE-2007-2874 remove-patch (wpa_supplicant) #242455 [since FEDORA-2007-0185]
+CVE-2007-2873 version (spamassassin, fixed 3.2.1) [since FEDORA-2007-0390]
+CVE-2007-2871 version (mozilla) #241840
+CVE-2007-2870 version (mozilla) #241840
+CVE-2007-2869 version (mozilla) #241840
+CVE-2007-2868 version (mozilla) #241840
+CVE-2007-2867 version (mozilla) #241840
+CVE-2007-2865 version (phpPgAdmin, fixed 4.1.2) #241489 [since FEDORA-2007-0469]
 CVE-2007-2844 ignore (php) #241641
 CVE-2007-2843 ignore (konqueror) safari specific
-*CVE-2007-2821 VULNERABLE (wordpress, fixed 2.2) #240970
-*CVE-2007-2799 (file)
+CVE-2007-2821 version (wordpress, fixed 2.2) #245211 [since FEDORA-2007-0894]
+CVE-2007-2799 version (file, fixed 4.21) #241034 [since FEDORA-2007-0836]
+CVE-2007-2798 version (krb5, 1.6.1) [since FEDORA-2007-0740]
 CVE-2007-2768 ignore (openssh) needs pam OPIE which is not shipped.
 CVE-2007-2756 ignore (gd) DoS only
-*CVE-2007-2754 (freetype)
+CVE-2007-2754 backport (freetype) [since FEDORA-2007-0033]
 CVE-2007-2721 patch (jasper, fixed 1.900.1-2) #240397
-*CVE-2007-2683 (mutt)
+CVE-2007-2683 backport (mutt)
 *CVE-2007-2654 VULNERABLE (xfsdump) #240396
-CVE-2007-2650 version (clamav, fixed 0.90.3) #240395
-CVE-2007-2645 ignore (libexif) #240055 DoS only
+CVE-2007-2650 version (clamav, fixed 0.90.3) #240395 [since FEDORA-2007-1154]
+CVE-2007-2645 backport (libexif) #240055 [since FEDORA-2007-0414]
 *CVE-2007-2637 patch (moin, fixed 1.5.7-2)
-*CVE-2007-2627 ** (wordpress) #239904
+CVE-2007-2627 version (wordpress, fixed 2.2.1) #239904 [since FEDORA-2007-0894]
 *CVE-2007-2589 (squirrelmail)
 *CVE-2007-2583 (mysql)
 CVE-2007-2519 ignore (php-pear) no trust boundary is crossed
@@ -113,6 +131,8 @@
 *CVE-2007-2446 (samba)
 CVE-2007-2445 version (libpng10, fixed 1.0.25) #240398
 *CVE-2007-2444 (samba)
+CVE-2007-2443 version (krb5, 1.6.1) [since FEDORA-2007-0740]
+CVE-2007-2442 version (krb5, 1.6.1) [since FEDORA-2007-0740]
 *CVE-2007-2438 VULNERABLE (vim) #238734
 CVE-2007-2437 ignore (xorg-x11) DoS only
 *CVE-2007-2435 (java)
@@ -123,18 +143,18 @@
 *CVE-2007-2353 (axis)
 *CVE-2007-2245 VULNERABLE (phpMyAdmin, fixed 2.10.1) #237882
 CVE-2007-2243 ignore (openssh, fixed 4.6) needs S/KEY support which is not shipped.
-*CVE-2007-2241 (bind)
+CVE-2007-2241 backport (bind) [since FEDORA-2007-0300]
 CVE-2007-2176 ignore (firefox) only affects the java quicktime interaction
 CVE-2007-2172 version (kernel, fixed 2.6.21-rc6)
 *CVE-2007-2165 VULNERABLE (proftpd) #237533
-*CVE-2007-2138 (postgresql)
+CVE-2007-2138 version (postgresql, fixed 8.2.4) #237682 [since FEDORA-2007-0174]
 CVE-2007-2057 version (aircrack-ng, fixed 0.8-0.1)
 CVE-2007-2029 VULNERABLE (clamav, fixed 0.90.3) #245219
 *CVE-2007-2028 (freeradius)
 *CVE-2007-2026 (file)
 CVE-2007-2016 ignore (phpMyAdmin, < 2.8.0.2 never shipped)
 CVE-2007-1997 version (clamav, fixed in 0.90.2)
-*CVE-2007-1995 (quagga) #240488
+CVE-2007-1995 version (quagga, fixed CVE-2007-1995) #240488
 CVE-2007-1897 version (wordpress, fixed 2.1.3) #235912
 CVE-2007-1894 version (wordpress, fixed 2.1.3-0.rc2)
 CVE-2007-1893 version (wordpress, fixed 2.1.3) #235912
@@ -148,6 +168,7 @@
 *CVE-2007-1841 VULNERABLE (ipsec-tools) #238052
 *CVE-2007-1804 VULNERABLE (pulseaudio) #235013
 CVE-2007-1799 version (ktorrent, fixed 2.1.3) #235014
+CVE-2007-1797 version (GraphicsMagick, fixed 1.1.8) [since FEDORA-2007-1340]
 CVE-2007-1745 version (clamav, fixed in 0.90.2) #236703
 *CVE-2007-1743 (httpd)
 *CVE-2007-1742 (httpd)
@@ -159,9 +180,9 @@
 CVE-2007-1710 version (php, fixed 5.2.2)
 CVE-2007-1709 ignore (php) no security impact
 *CVE-2007-1667 (xorg-x11)
-CVE-2007-1665 VULNERABLE (ekg) #246034
-CVE-2007-1664 VULNERABLE (ekg) #246034
-CVE-2007-1663 VULNERABLE (ekg) #246034
+CVE-2007-1665 version (ekg) #246034 [since FEDORA-2007-0791]
+CVE-2007-1664 version (ekg) #246034 [since FEDORA-2007-0791]
+CVE-2007-1663 version (ekg) #246034 [since FEDORA-2007-0791]
 CVE-2007-1649 version (php, fixed 5.2.2)
 CVE-2007-1622 version (wordpress, fixed 2.1.3-0.rc2) #233703
 CVE-2007-1614 version (zziplib, fixed 0.13.49) #233700
@@ -169,7 +190,7 @@
 CVE-2007-1583 version (php, fixed 5.2.2)
 CVE-2007-1565 ignore (konqueror) client crash
 CVE-2007-1564 vulnerable (konqueror) [#CVE-2007-1564]
-CVE-2007-1562 (firefox, seamonkey, thunderbird)
+CVE-2007-1562 version (firefox, seamonkey, thunderbird) #241840
 CVE-2007-1560 version (squid, fixed 2.6.STABLE12)
 CVE-2007-1558 version (claws-mail, fixed 2.9.1) #237293
 *CVE-2007-1558 backport (sylpheed, fixed 2.3.1-1)
@@ -208,12 +229,13 @@
 *CVE-2007-1384 version (ktorrent, fixed 2.1.2)
 CVE-2007-1375 version (php, fixed 5.2.2)
 *CVE-2007-1366 ** (qemu) #238723
-*CVE-2007-1362 version (seamonkey, fixed 1.0.9)
+CVE-2007-1362 version (seamonkey, fixed 1.0.9) #241840
 *CVE-2007-1359 patch (mod_security, fixed 2.1.0-3) #231728
 CVE-2007-1358 ** (tomcat5) #244810
 *CVE-2007-1354 (jboss)
 *CVE-2007-1352 VULNERABLE (libXfont) #235265
 *CVE-2007-1351 VULNERABLE (libXfont) #235265
+CVE-2007-1349 backport (mod_perl) [since FEDORA-2007-0316]
 CVE-2007-1325 version (phpMyAdmin, fixed 2.10.0.2)
 *CVE-2007-1322 ** (qemu) #238723
 *CVE-2007-1321 ** (qemu) #238723
@@ -281,7 +303,7 @@
 *CVE-2007-0774 (mod_jk)
 VE-2007-0772 version (kernel, fixed 2.6.20.1) [since FEDORA-2007-291]
 CVE-2007-0771 patch (kernel, fixed 2.6.20-1.2933) #227952
-*CVE-2007-0770 patch (GraphicsMagick, fixed 1.1.7-7) #228758
+CVE-2007-0770 patch (GraphicsMagick, fixed 1.1.7-7) #228758
 CVE-2007-0770 ignore (ImageMagick) only if incomplete CVE-2006-5456
 CVE-2007-0720 ignore (cups, fixed 1.2.7) cups is already updated
 CVE-2007-0657 ignore (nexuiz, 2.2.2 only (not shipped), fixed 2.2.3)
@@ -318,6 +340,7 @@
 *CVE-2007-0262 version (wordpress, fixed 2.1-0) #223101
 CVE-2007-0248 version (squid, fixed 2.6.STABLE7) [since FEDORA-2007-073]
 CVE-2007-0247 version (squid, fixed 2.6.STABLE7) #222883 [since FEDORA-2007-073]
+CVE-2007-0245 backport (openoffice.org) [since FEDORA-2007-0410]
 CVE-2007-0243 ignore, no-ship (java-ibm)
 *CVE-2007-0242 patch (qt4, fixed 4.2.3-7)
 *CVE-2007-0240 patch (zope, fixed 2.9.6-2) #233378
@@ -510,6 +533,7 @@
 CVE-2006-5462 version (firefox, fixed 1.5.0.8) [since FEDORA-2006-1191]
 *CVE-2006-5461 VULNERABLE (avahi, fixed 0.6.15)
 *CVE-2006-5456 backport (ImageMagick) #210921 [since FEDORA-2006-1285]
+CVE-2006-5456 version (GraphicsMagick, fixed 1.1.7) [since FEDORA-2007-1340]
 *CVE-2006-5455 patch (bugzilla, fixed 2.22-7) #212355
 *CVE-2006-5454 patch (bugzilla, fixed 2.22-7) #212355
 *CVE-2006-5453 patch (bugzilla, fixed 2.22-7) #212355
@@ -599,7 +623,7 @@
 CVE-2006-4561 VULNERABLE (firefox)
 CVE-2006-4538 version (kernel, fixed after 2.6.18-rc6)
 CVE-2006-4535 version (kernel, fixed 2.6.18-rc6)
-CVE-2006-4519 VULNERABLE (gimp) #247566
+CVE-2006-4519 version (gimp, fixed 2.2.16) #247566 [since FEDORA-2007-1044]
 *CVE-2006-4514 backport (libgsf) [since FEDORA-2006-1417]
 CVE-2006-4513 version (wv, fixed 1.2.4) #212696
 *CVE-2006-4513 ** (abiword) #212698
@@ -649,6 +673,7 @@
 CVE-2006-4146 backport (gdb)
 CVE-2006-4145 version (kernel, fixed 2.6.17.10, fixed 2.6.18-rc5) needs a better upstream fix
 *CVE-2006-4144 backport (ImageMagick, fixed 6.2.9)
+CVE-2006-4144 version (GraphicsMagick, fixed 1.1.8) [since FEDORA-2007-1340]
 *CVE-2006-4124 (lesstif)
 CVE-2006-4096 version (bind, fixed 9.3.2-P1)
 CVE-2006-4095 version (bind, fixed 9.3.2-P1)
@@ -665,42 +690,19 @@
 CVE-2006-3816 version (krusader, fixed 1.70.1) #200323
 CVE-2006-3815 version (heartbeat, fixed 2.0.6)
 CVE-2006-3813 version (perl) only Red Hat Enterprise Linux affected
-CVE-2006-3812 version (thunderbird, fixed 1.5.0.5)
-CVE-2006-3812 version (seamonkey, fixed 1.0.4) #200455
-CVE-2006-3812 version (firefox, fixed 1.5.0.5)
-CVE-2006-3811 version (thunderbird, fixed 1.5.0.5)
-CVE-2006-3811 version (seamonkey, fixed 1.0.4) #200455
-CVE-2006-3811 version (firefox, fixed 1.5.0.5)
-CVE-2006-3810 version (thunderbird, fixed 1.5.0.5)
-CVE-2006-3810 version (seamonkey, fixed 1.0.4) #200455
-CVE-2006-3810 version (firefox, fixed 1.5.0.5)
-CVE-2006-3809 version (thunderbird, fixed 1.5.0.5)
-CVE-2006-3809 version (seamonkey, fixed 1.0.4) #200455
-CVE-2006-3809 version (firefox, fixed 1.5.0.5)
-CVE-2006-3808 version (thunderbird, fixed 1.5.0.5)
-CVE-2006-3808 version (seamonkey, fixed 1.0.4) #200455
-CVE-2006-3808 version (firefox, fixed 1.5.0.5)
-CVE-2006-3807 version (thunderbird, fixed 1.5.0.5)
-CVE-2006-3807 version (seamonkey, fixed 1.0.4) #200455
-CVE-2006-3807 version (firefox, fixed 1.5.0.5)
-CVE-2006-3806 version (thunderbird, fixed 1.5.0.5)
-CVE-2006-3806 version (seamonkey, fixed 1.0.4) #200455
-CVE-2006-3806 version (firefox, fixed 1.5.0.5)
-CVE-2006-3805 version (thunderbird, fixed 1.5.0.5)
-CVE-2006-3805 version (seamonkey, fixed 1.0.4) #200455
-CVE-2006-3805 version (firefox, fixed 1.5.0.5)
-CVE-2006-3804 version (thunderbird, fixed 1.5.0.5)
-CVE-2006-3804 version (seamonkey, fixed 1.0.4) #200455
-CVE-2006-3804 version (firefox, fixed 1.5.0.5)
-CVE-2006-3803 version (thunderbird, fixed 1.5.0.5)
-CVE-2006-3803 version (seamonkey, fixed 1.0.4) #200455
-CVE-2006-3803 version (firefox, fixed 1.5.0.5)
-CVE-2006-3802 version (thunderbird, fixed 1.5.0.5)
-CVE-2006-3802 version (seamonkey, fixed 1.0.4) #200455
-CVE-2006-3802 version (firefox, fixed 1.5.0.5)
-CVE-2006-3801 version (thunderbird, fixed 1.5.0.5)
-CVE-2006-3801 version (seamonkey, fixed 1.0.4) #200455
-CVE-2006-3801 version (firefox, fixed 1.5.0.5)
+CVE-2006-3812 version (mozilla) #200455
+CVE-2006-3811 version (mozilla) #200455
+CVE-2006-3810 version (mozilla) #200455
+CVE-2006-3809 version (mozilla) #200455
+CVE-2006-3808 version (mozilla) #200455
+CVE-2006-3807 version (mozilla) #200455
+CVE-2006-3806 version (mozilla) #200455
+CVE-2006-3805 version (mozilla) #200455
+CVE-2006-3804 version (mozilla) #200455
+CVE-2006-3803 version (mozilla) #200455
+CVE-2006-3802 version (mozilla) #200455
+CVE-2006-3801 version (mozilla) #200455
+CVE-2007-3798 version (tcpdump, fixed 3.9.7) #244860 [since FEDORA-2007-1361]
 CVE-2006-3747 version (httpd, fixed 2.2.3)
 CVE-2006-3746 version (gnupg, fixed 1.4.5)
 CVE-2006-3745 version (kernel, fixed 2.6.17.10, fixed 2.6.18-rc5)
@@ -711,6 +713,7 @@
 CVE-2006-3740 version (libXfont, fixed 1.2.2)
 CVE-2006-3739 version (libXfont, fixed 1.2.2)
 *CVE-2006-3738 backport (openssl, fixed 0.9.8d)
+CVE-2007-3734 version (mozilla) #248518 [since FEDORA-2007-1138]
 *CVE-2006-3733 ignore (jboss) cisco only
 CVE-2006-3731 ignore (firefox) just a user complicit crash
 CVE-2006-3694 version (ruby, fixed 1.8.5)
@@ -855,8 +858,8 @@
 *CVE-2006-2366 ignore (openobex) we don't ship ircp
 CVE-2006-2362 ignore (binutils) minor crash (not exploitable)
 CVE-2006-2332 ignore (firefox) disputed
-CVE-2006-2314 version (postgresql, fixed 8.1.4)
-CVE-2006-2313 version (postgresql, fixed 8.1.4)
+CVE-2006-2314 version (postgresql, fixed 8.1.4) [since FEDORA-2007-0249]
+CVE-2006-2313 version (postgresql, fixed 8.1.4) [since FEDORA-2007-0249]
 CVE-2006-2276 version (quagga, fixed 0.98.6)
 CVE-2006-2275 version (kernel, fixed 2.6.16.15)
 CVE-2006-2274 version (kernel, fixed 2.6.16.15)
@@ -1156,6 +1159,7 @@
 CVE-2006-0096 ignore (kernel) minor and requires root
 CVE-2006-0095 version (kernel, fixed 2.6.16)
 CVE-2006-0082 version (ImageMagick, not 6.2.5.4)
+CVE-2006-0082 version (GraphicsMagick, fixed 1.1.8) [since FEDORA-2007-1340]
 CVE-2006-0071 ignore (pinentry, Gentoo-specific problem)
 CVE-2006-0058 version (sendmail, fixed 8.13.6)
 CVE-2006-0052 version (mailman, fixed 2.1.6)
@@ -1196,6 +1200,7 @@
 CVE-2005-4618 version (kernel, fixed 2.6.15)
 CVE-2005-4605 version (kernel, fixed 2.6.15)
 *CVE-2005-4601 (ImageMagick)
+CVE-2005-4601 version (GraphicsMagick, fixed 1.1.8) [since FEDORA-2007-1340]
 CVE-2005-4585 version (wireshark, fixed 0.10.14)
 CVE-2005-4442 version (openldap) gentoo only
 CVE-2005-4352 version (kernel, fixed 2.6.18.3) [since FEDORA-2006-1471]

-- 
fedora-extras-commits mailing list
fedora-extras-commits@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-extras-commits

--
Fedora-security-list mailing list
Fedora-security-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-security-list

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Big List of Linux Books]     [Yosemite News]     [KDE Users]     [Coolkey]

  Powered by Linux