[Fedora-security-commits] fedora-security/audit f8, 1.14, 1.15 f9, 1.12, 1.13 fc7, 1.171, 1.172

Tue Nov 13 00:36:24 UTC 2007

Author: lkundrak

Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv32214

Modified Files:
	f8 f9 fc7 
Log Message:
New Pear MDB2 thing, updates for perl and tomboy



Index: f8
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f8,v
retrieving revision 1.14
retrieving revision 1.15
diff -u -r1.14 -r1.15

--- f8	12 Nov 2007 19:07:43 -0000	1.14
+++ f8	13 Nov 2007 00:36:22 -0000	1.15
@@ -7,6 +7,9 @@
 # Up to date CVE as of CVE email 20071030
 # Up to date F8 as of 20071029
 
+GENERIC-MAP-NOMATCH VULNERABLE (php-pear-MDB2) #379101
+GENERIC-MAP-NOMATCH VULNERABLE (php-pear-MDB2-Driver-mysql) #379131
+GENERIC-MAP-NOMATCH VULNERABLE (php-pear-MDB2-Driver-mysqli) #379161
 CVE-2007-5795 VULNERABLE (emacs) #367591
 CVE-2007-5770 backport (ruby) #373391 [since FEDORA-2007-2812]
 GENERIC-MAP-NOMATCH VULNERABLE (nx) #293031
@@ -18,7 +21,7 @@
 CVE-2007-5623 backport (nagios-plugins, not fixed 1.4.10) #348731 [since FEDORA-2007-2876] nagios-plugins-1.4.8-9.fc8
 CVE-2007-5589 VULNERABLE (phpMyAdmin, fixed 2.11.1.2) #333661 PMASA-2007-6
 CVE-2007-5461 VULNERABLE (tomcat5, not fixed 5.5.25) #363001
-CVE-2007-5395 VULNERABLE (link-grammar) #372351
+CVE-2007-5395 version (link-grammar) #372351 [since FEDORA-2007-3235]
 CVE-2007-5393 backport (xpdf) #372471 [since FEDORA-2007-3014]
 CVE-2007-5393 backport (cups) [since FEDORA-2007-2982]
 CVE-2007-5393 VULNERABLE (poppler) #372511
@@ -37,7 +40,7 @@
 CVE-2007-5198 VULNERABLE (nagios-plugins, fixed 1.4.10) #362891
 CVE-2007-5197 version (mono, fixed 1.2.5.1) #367541 [since FEDORA-2007-2969]
 CVE-2007-5162 version (ruby) [since FEDORA-2007-2812]
-CVE-2007-5116 VULNERABLE (perl) #378141
+CVE-2007-5116 backport (perl) #378141 [since FEDORA-2007-3218]
 CVE-2007-5079 VULNERABLE (gdm) #363021 Red Hat specific problem
 CVE-2007-5037 version (inotify-tools, fixed 3.11) #299771
 CVE-2007-5007 version (balsa, before 2.3.20) #297601
@@ -111,7 +114,7 @@
 CVE-2006-0987 ignore (bind) example config file only
 CVE-2006-0496 ignore (firefox) Feature, not a bug moz #324253
 CVE-2005-4809 ignore (firefox) Status bar can be modified anyways
-CVE-2005-4790 VULNERABLE (tomboy) #362951
+CVE-2005-4790 backport (tomboy) #362951 [since FEDORA-2007-3253]
 CVE-2005-3675 VULNERABLE (kernel) optack, no upstream fix -- TCP protocol weakness
 CVE-2003-1265 ignore (thunderbird) Stuff deleted from userspace is not guarranteed to go away physically moz#198442
 CVE-2003-1265 ignore (seamonkey) Stuff deleted from userspace is not guarranteed to go away physically moz#198442


Index: f9
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f9,v
retrieving revision 1.12
retrieving revision 1.13
diff -u -r1.12 -r1.13
--- f9	12 Nov 2007 16:11:24 -0000	1.12
+++ f9	13 Nov 2007 00:36:22 -0000	1.13
@@ -7,6 +7,9 @@
 # Up to date CVE as of CVE email 20071030
 # Up to date F9 as of 20071029
 
+GENERIC-MAP-NOMATCH VULNERABLE (php-pear-MDB2) #379111
+GENERIC-MAP-NOMATCH VULNERABLE (php-pear-MDB2-Driver-mysql) #379141
+GENERIC-MAP-NOMATCH VULNERABLE (php-pear-MDB2-Driver-mysqli) #379171
 CVE-2007-5795 backport (emacs) #367601 [since emacs-22.1-8.fc9]
 GENERIC-MAP-NOMATCH VULNERABLE (nx) #293031
 CVE-2007-5770 backport (ruby) #373401 needs verification


Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.171
retrieving revision 1.172
diff -u -r1.171 -r1.172
--- fc7	12 Nov 2007 19:07:43 -0000	1.171
+++ fc7	13 Nov 2007 00:36:22 -0000	1.172
@@ -8,6 +8,9 @@
 # Up to date CVE as of CVE email 20071030
 # Up to date FC7 as of 20071029
 
+GENERIC-MAP-NOMATCH VULNERABLE (php-pear-MDB2) #379091
+GENERIC-MAP-NOMATCH VULNERABLE (php-pear-MDB2-Driver-mysql) #379121
+GENERIC-MAP-NOMATCH VULNERABLE (php-pear-MDB2-Driver-mysqli) #379151
 CVE-2007-5795 VULNERABLE (emacs) #367581
 CVE-2007-5770 backport (ruby) #373381 [since FEDORA-2007-2685] really fixed?
 CVE-2007-5751 backport (liferea, fixed 1.4.6) #360641 [since FEDORA-2007-2725]
@@ -65,7 +68,7 @@
 CVE-2007-5159 backport (ntfs-3g) #298651 [since FEDORA-2007-2295]
 CVE-2007-5137 backport (tk, fixed 8.4.16) #332061 [since FEDORA-2007-2564]
 CVE-2007-5135 backport (openssl, fixed 0.9.8d) [since FEDORA-2007-2530]
-CVE-2007-5116 VULNERABLE (perl) #378131
+CVE-2007-5116 backport (perl) #378131 [since FEDORA-2007-3255]
 CVE-2007-5106 ignore (wordpress) affects old 2.0.x versions
 CVE-2007-5105 ignore (wordpress) affects old 2.0.x versions
 CVE-2007-5079 VULNERABLE (gdm) #363011


