fedora-security/audit fc6,1.237,1.238 fc7,1.68,1.69

Lubomir Kundrak (lkundrak) fedora-extras-commits at redhat.com
Mon Aug 13 13:05:49 UTC 2007


Author: lkundrak

Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv15057

Modified Files:
	fc6 fc7 
Log Message:
Firefox NUL injection was Windows specific.



Index: fc6
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc6,v
retrieving revision 1.237
retrieving revision 1.238
diff -u -r1.237 -r1.238
--- fc6	13 Aug 2007 12:22:22 -0000	1.237
+++ fc6	13 Aug 2007 13:05:46 -0000	1.238
@@ -17,7 +17,7 @@
 CVE-2007-4168 backport (libexif) #243892 [since FEDORA-2007-614]
 CVE-2007-3962 ignore (gftp) multiple buffer overflows in fsplib, not on Linux
 CVE-2007-3961 ignore (gftp) off-by-one error in fsplib
-CVE-2007-3845 VULNERABLE (firefox) https://bugzilla.mozilla.org/show_bug.cgi?id=389580
+CVE-2007-3845 ignore (firefox) windows specific
 CVE-2007-3844 VULNERABLE (firefox) #250648 "fixed on next update"
 CVE-2007-3843 VULNERABLE (kernel) #246595
 CVE-2007-3841 ignore (pidgin) ethically disclosed


Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.68
retrieving revision 1.69
diff -u -r1.68 -r1.69
--- fc7	13 Aug 2007 12:29:51 -0000	1.68
+++ fc7	13 Aug 2007 13:05:46 -0000	1.69
@@ -28,7 +28,7 @@
 CVE-2007-3948 version (lighttpd, fixed 1.4.16) #249162 [since FEDORA-2007-1299]
 CVE-2007-3947 version (lighttpd, fixed 1.4.16) #249162 [since FEDORA-2007-1299]
 CVE-2007-3946 version (lighttpd, fixed 1.4.16) #249162 [since FEDORA-2007-1299]
-CVE-2007-3845 VULNERABLE (firefox, fixed 2.0.0.6) https://bugzilla.mozilla.org/show_bug.cgi?id=389580
+CVE-2007-3845 ignore (firefox) windows specific
 CVE-2007-3844 VULNERABLE (firefox) #250648 "fixed on next update"
 CVE-2007-3843 VULNERABLE (kernel) #246595
 CVE-2007-3841 ignore (pidgin) ethically disclosed




More information about the fedora-extras-commits mailing list