[Fedora-security-commits] fedora-security/audit f8, 1.196, 1.197 f9, 1.186, 1.187 fc7, 1.352, 1.353

[fedora-security-commits at redhat.com]

Author: thoger

Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv27920/audit

Modified Files:
	f8 f9 fc7 
Log Message:
update comix



Index: f8
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f8,v
retrieving revision 1.196
retrieving revision 1.197
diff -u -r1.196 -r1.197
--- f8	15 Apr 2008 17:18:52 -0000	1.196
+++ f8	16 Apr 2008 07:35:22 -0000	1.197
@@ -6,6 +6,7 @@
 
 293031 fixed (nx) #293031 [since FEDORA-2008-2258] 
 249840 VULNERABLE (tor) 
+CVE-2008-1796 fixed (comix) [since FEDORA-2008-2981] 
 CVE-2008-1729 ignore (drupal) 6.x only
 CVE-2008-1720 VULNERABLE (rsync, fixed 3.0.2) #441690 
 CVE-2008-1688 ignore (m4, fixed 1.4.11) not really a security issue
@@ -19,7 +20,7 @@
 CVE-2008-1628 VULNERABLE (audit) [since audit-1.6.8-4.fc8]
 CVE-2008-1614 version (mod_suphp, fixed 0.6.3) [since FEDORA-2008-2868]
 CVE-2008-1612 VULNERABLE (squid, fixed 2.6.STABLE19) [since FEDORA-2008-2740] 
-CVE-2008-1568 VULNERABLE (comix) multiple issues tracked via bz#430635
+CVE-2008-1568 fixed (comix) improper shell escaping, bz#430635 [since FEDORA-2008-2981]
 CVE-2008-1567 VULNERABLE (phpmyadmin, fixed 2.11.5.1)
 CVE-2008-1563 fixed (wireshark, fixed 1.0) #435487 [since FEDORA-2008-3040] 
 CVE-2008-1562 fixed (wireshark, fixed 1.0) #435487 [since FEDORA-2008-3040] 


Index: f9
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f9,v
retrieving revision 1.186
retrieving revision 1.187
diff -u -r1.186 -r1.187
--- f9	15 Apr 2008 17:18:52 -0000	1.186
+++ f9	16 Apr 2008 07:35:22 -0000	1.187
@@ -6,6 +6,7 @@
 
 none version (swfdec, fixed 0.6.4) [since swfdec-0.6.4-1.fc9]
 249840 VULNERABLE (tor) 
+CVE-2008-1796 fixed (comix) [since comix-3.6.4-6.fc9] 
 CVE-2008-1729 version (drupal, fixed 6.2) [since drupal-6.2-1.fc9]
 CVE-2008-1720 VULNERABLE (rsync, fixed 3.0.2) [since rsync-3.0.2-0.fc9]
 CVE-2008-1688 ignore (m4, fixed 1.4.11) not really a security issue


Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.352
retrieving revision 1.353
diff -u -r1.352 -r1.353
--- fc7	15 Apr 2008 17:18:52 -0000	1.352
+++ fc7	16 Apr 2008 07:35:22 -0000	1.353
@@ -7,6 +7,7 @@
 
 293031 fixed (nx) #293031 [since FEDORA-2008-2258] 
 249840 version (tor, fixed 0.1.2.15) #249840 [since FEDORA-2007-1674] 
+CVE-2008-1796 fixed (comix) [since FEDORA-2008-2993] 
 CVE-2008-1729 ignore (drupal) 6.x only
 CVE-2008-1720 VULNERABLE (rsync, fixed 3.0.2) #441689 
 CVE-2008-1688 ignore (m4, fixed 1.4.11) not really a security issue
@@ -19,7 +20,7 @@
 CVE-2008-1628 ignore (audit) affected function not used by anything
 CVE-2008-1614 version (mod_suphp, fixed 0.6.3) [since FEDORA-2008-2815]
 CVE-2008-1612 backport (squid, fixed 2.6.STABLE19) [since FEDORA-2008-2729] 
-CVE-2008-1568 VULNERABLE (comix) multiple issues tracked via bz#430635
+CVE-2008-1568 fixed (comix) improper shell escaping, bz#430635 [since FEDORA-2008-2993]
 CVE-2008-1567 VULNERABLE (phpmyadmin, fixed 2.11.5.1)
 CVE-2008-1563 fixed (wireshark, fixed 1.0) #435485 [since FEDORA-2008-2941] 
 CVE-2008-1562 fixed (wireshark, fixed 1.0) #435485 [since FEDORA-2008-2941]