[Fedora-security-commits] fedora-security/audit f8, 1.166, 1.167 f9, 1.157, 1.158 fc7, 1.322, 1.323

[fedora-security-commits at redhat.com]

Author: lkundrak

Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv4042

Modified Files:
	f8 f9 fc7 
Log Message:
smarty embedded in various ... softwares


Index: f8
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f8,v
retrieving revision 1.166
retrieving revision 1.167
diff -u -r1.166 -r1.167
--- f8	19 Mar 2008 11:34:17 -0000	1.166
+++ f8	19 Mar 2008 11:41:29 -0000	1.167
@@ -37,6 +37,8 @@
 CVE-2008-1071 VULNERABLE (wireshark, fixed 0.99.8) #435485 
 CVE-2008-1070 VULNERABLE (wireshark, fixed 0.99.8) #435485 
 CVE-2008-1066 version (php-Smarty) #435811 [since FEDORA-2008-1911]
+CVE-2008-1066 VULNERABLE (gallery2) #438058 
+CVE-2008-1066 VULNERABLE (php-pear-PhpDocumentor) #438062 
 CVE-2008-0983 fixed (lighttpd) #435807 [since FEDORA-2008-2262] 
 CVE-2008-0947 VULNERABLE (krb5, fixed 1.6.4) #438023 
 CVE-2008-0932 fixed (sword) #433724 [since FEDORA-2008-1922] why? diatheke.pl is not shipped...


Index: f9
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/f9,v
retrieving revision 1.157
retrieving revision 1.158
diff -u -r1.157 -r1.158
--- f9	19 Mar 2008 11:34:17 -0000	1.157
+++ f9	19 Mar 2008 11:41:29 -0000	1.158
@@ -38,6 +38,8 @@
 CVE-2008-1071 VULNERABLE (wireshark, fixed 0.99.8) #435488 
 CVE-2008-1070 VULNERABLE (wireshark, fixed 0.99.8) #435488 
 CVE-2008-1066 version (php-Smarty) #435813 [since php-Smarty-2.6.19-1.fc9]
+CVE-2008-1066 VULNERABLE (gallery2) #438060 
+CVE-2008-1066 VULNERABLE (php-pear-PhpDocumentor) #438064 
 CVE-2008-0983 backport (lighttpd) #435809 [since lighttpd-1.4.18-6.fc9]
 CVE-2008-0947 backport (krb5, fixed 1.6.4) [since krb5-1.6.3-10.fc9] 
 CVE-2008-0932 backport (sword) #433726 [since sword-1.5.10-3.fc9] why? diatheke.pl is not shipped...


Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.322
retrieving revision 1.323
diff -u -r1.322 -r1.323
--- fc7	19 Mar 2008 11:34:17 -0000	1.322
+++ fc7	19 Mar 2008 11:41:29 -0000	1.323
@@ -38,6 +38,8 @@
 CVE-2008-1071 VULNERABLE (wireshark, fixed 0.99.8) #435487 
 CVE-2008-1070 VULNERABLE (wireshark, fixed 0.99.8) #435487 
 CVE-2008-1066 version (php-Smarty, fixed 2.6.19) #435812 [since FEDORA-2008-1928]
+CVE-2008-1066 VULNERABLE (gallery2) #438059 
+CVE-2008-1066 VULNERABLE (php-pear-PhpDocumentor) #438063 
 CVE-2008-0983 fixed (lighttpd) #435808 [since FEDORA-2008-2278] 
 CVE-2008-0947 VULNERABLE (krb5, fixed 1.6.4) #438022 
 CVE-2008-0932 fixed (sword) #433725 [since FEDORA-2008-1951] why? diatheke.pl is not shipped...