Claiming ownership of mantis

Jason L Tibbitts III tibbs at math.uh.edu
Sat Oct 7 17:23:28 UTC 2006


>>>>> "GS" == Gianluca Sforna <giallu at gmail.com> writes:

GS> I am going to pick up mantis ( I am using it at work as our bug /
GS> issue tracker ).

I hope the group that ends up maintaining mantis can give some thought
to the currently open security issues.  See:

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=191089

And these open issues in the security audit:

fe3:CVE-2006-1577 VULNERABLE (mantis) bz#191089
fe3:CVE-2006-0841 VULNERABLE (mantis) bz#191089
fe3:CVE-2006-0840 VULNERABLE (mantis) bz#191089
fe3:CVE-2006-0665 VULNERABLE (mantis) bz#191089
fe3:CVE-2006-0664 VULNERABLE (mantis) bz#191089
fe4:CVE-2006-1577 VULNERABLE (mantis) bz#191089
fe4:CVE-2006-0841 VULNERABLE (mantis) bz#191089
fe4:CVE-2006-0840 VULNERABLE (mantis) bz#191089
fe4:CVE-2006-0665 VULNERABLE (mantis) bz#191089
fe4:CVE-2006-0664 VULNERABLE (mantis) bz#191089
fe5:CVE-2006-1577 VULNERABLE (mantis) bz#191089

The big question is how to fix the older versions or whether it's
possible to seamlessly upgrade them to something more recent.

  Releases and versions:
    3   0.18.3  2        /nas/redhat/mirror-extras/3/SRPMS/mantis-0.18.3-2.src.rpm
    4   0.19.4  1.fc4    /nas/redhat/mirror-extras/4/SRPMS/mantis-0.19.4-1.fc4.src.rpm
    5   1.0.1   1.fc5    /nas/redhat/mirror-extras/5/SRPMS/mantis-1.0.1-1.fc5.src.rpm

 - J<




More information about the fedora-extras-list mailing list