[Fedora-security-commits] fedora-security/audit f8, 1.95, 1.96 f9, 1.87, 1.88 fc7, 1.251, 1.252

[fedora-security-commits at redhat.com]

Author: thoger

Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv9059/audit

Modified Files:
	f8 f9 fc7 
Log Message:
scponly issues



Index: f8
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f8,v
retrieving revision 1.95
retrieving revision 1.96
diff -u -r1.95 -r1.96
--- f8	21 Jan 2008 16:26:28 -0000	1.95
+++ f8	22 Jan 2008 19:21:47 -0000	1.96
@@ -65,6 +65,7 @@
 CVE-2007-6422 VULNERABLE (httpd, fixed 2.2.7) #427982 
 CVE-2007-6421 VULNERABLE (httpd, fixed 2.2.7) #427982 
 CVE-2007-6420 ignore (httpd) wontfix by upstream
+CVE-2007-6415 VULNERABLE (scponly, fixed 4.8) #429732 
 CVE-2007-6388 VULNERABLE (httpd, fixed 2.2.7) #427982 
 CVE-2007-6337 VULNERABLE (clamav, fixed 0.92) #426212 [since FEDORA-2008-0115] 
 CVE-2007-6336 VULNERABLE (clamav, fixed 0.92) #426212 [since FEDORA-2008-0115] 
@@ -75,7 +76,7 @@
 CVE-2007-6353 VULNERABLE (exiv2) #425923
 CVE-2007-6352 fixed (libexif) #425631 [since FEDORA-2007-4667] 
 CVE-2007-6351 fixed (libexif) #425631 [since FEDORA-2007-4667] 
-CVE-2007-6350 VULNERABLE (scponly) rsync vector only
+CVE-2007-6350 VULNERABLE (scponly) #429731 rsync vector only
 CVE-2007-6348 ignore (squirrelmail) trojaned version was not shipped
 CVE-2007-6328 ignore (dosbox) design decision
 CVE-2007-6321 VULNERABLE (roundcubemail) #423291


Index: f9
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f9,v
retrieving revision 1.87
retrieving revision 1.88
diff -u -r1.87 -r1.88
--- f9	21 Jan 2008 16:26:28 -0000	1.87
+++ f9	22 Jan 2008 19:21:47 -0000	1.88
@@ -65,6 +65,7 @@
 CVE-2007-6422 VULNERABLE (httpd, fixed 2.2.7) #427984 
 CVE-2007-6421 VULNERABLE (httpd, fixed 2.2.7) #427984 
 CVE-2007-6420 ignore (httpd) wontfix by upstream
+CVE-2007-6415 VULNERABLE (scponly, fixed 4.8) 
 CVE-2007-6388 VULNERABLE (httpd, fixed 2.2.7) #427984 
 CVE-2007-6337 version (clamav, fixed 0.92) #426213 [since clamav-0.92-3.fc9]
 CVE-2007-6336 version (clamav, fixed 0.92) #426213 [since clamav-0.92-3.fc9]


Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.251
retrieving revision 1.252
diff -u -r1.251 -r1.252
--- fc7	21 Jan 2008 16:26:28 -0000	1.251
+++ fc7	22 Jan 2008 19:21:47 -0000	1.252
@@ -65,6 +65,7 @@
 CVE-2007-6422 VULNERABLE (httpd, fixed 2.2.7) #427983 
 CVE-2007-6421 VULNERABLE (httpd, fixed 2.2.7) #427983 
 CVE-2007-6420 ignore (httpd) wontfix by upstream
+CVE-2007-6415 VULNERABLE (scponly, fixed 4.8) #429731 
 CVE-2007-6388 VULNERABLE (httpd, fixed 2.2.7) #427983 
 CVE-2007-6337 VULNERABLE (clamav, fixed 0.92) #426211 [since FEDORA-2008-0170] 
 CVE-2007-6336 VULNERABLE (clamav, fixed 0.92) #426211 [since FEDORA-2008-0170] 
@@ -75,7 +76,7 @@
 CVE-2007-6353 fixed (exiv2) #425922 [since FEDORA-2007-4551] 
 CVE-2007-6352 fixed (libexif) #425621 [since FEDORA-2007-4608] 
 CVE-2007-6351 fixed (libexif) #425621 [since FEDORA-2007-4608] 
-CVE-2007-6350 VULNERABLE (scponly) rsync vector only
+CVE-2007-6350 VULNERABLE (scponly) #429731 rsync vector only
 CVE-2007-6348 ignore (squirrelmail) trojaned version was not shipped
 CVE-2007-6328 ignore (dosbox) design decision
 CVE-2007-6321 VULNERABLE (roundcubemail) #423281