fedora-security/audit fc6,1.248,1.249 fc7,1.81,1.82

[Tomas Hoger (thoger)]

Author: thoger

Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv1491/audit

Modified Files:
	fc6 fc7 
Log Message:
More issues from CVE mail.



Index: fc6
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc6,v
retrieving revision 1.248
retrieving revision 1.249
diff -u -r1.248 -r1.249
--- fc6	28 Aug 2007 07:21:53 -0000	1.248
+++ fc6	28 Aug 2007 09:02:09 -0000	1.249
@@ -65,6 +65,7 @@
 CVE-2007-2868 version (mozilla) #241840 [since FEDORA-2007-549]
 CVE-2007-2867 version (mozilla) #241840 [since FEDORA-2007-549]
 CVE-2007-2799 version (file, fixed 4.21) #241034 [since FEDORA-2007-538]
+CVE-2007-2797 version (xterm)
 CVE-2007-2453 version (kernel) [since FEDORA-2007-600]
 CVE-2007-2451 version (kernel, fixed 2.6.21.4) [since FEDORA-2007-600]
 CVE-2007-2445 backport (libpng) #239542 [since FEDORA-2007-529]


Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.81
retrieving revision 1.82
diff -u -r1.81 -r1.82
--- fc7	28 Aug 2007 07:21:53 -0000	1.81
+++ fc7	28 Aug 2007 09:02:09 -0000	1.82
@@ -9,10 +9,11 @@
 # Up to date FC7 as of 20070827
 
 CVE-2007-4559 VULNERABLE (python) tarfile module - directory traversal
-CVE-2007-4543 version (bugzilla, 3.0.1) #256021 [since FEDORA-2007-1853]
-CVE-2007-4539 version (bugzilla, 3.0.1) #256021 [since FEDORA-2007-1853]
-CVE-2007-4538 version (bugzilla, 3.0.1) #256021 [since FEDORA-2007-1853]
-CVE-2007-4510 VULNERABLE (clamav, 0.91.2) #253780
+CVE-2007-4543 version (bugzilla, fixed 3.0.1) #256021 [since FEDORA-2007-1853]
+CVE-2007-4542 VULNERABLE (mapserver, fixed 4.10.3) #256561
+CVE-2007-4539 version (bugzilla, fixed 3.0.1) #256021 [since FEDORA-2007-1853]
+CVE-2007-4538 version (bugzilla, fixed 3.0.1) #256021 [since FEDORA-2007-1853]
+CVE-2007-4510 VULNERABLE (clamav, fixed 0.91.2) #253780
 CVE-2007-4462 version (po4a) #253541 [since FEDORA-2007-1763]
 CVE-2007-4460 backport (id3lib) #253553 [since FEDORA-2007-1774]
 CVE-2007-4400 VULNERABLE (konversation) #253545
@@ -24,7 +25,7 @@
 CVE-2007-4229 ignore (kdebase) just an ASSERT fail
 CVE-2007-4225 backport (kdebase) [since FEDORA-2007-1700]
 CVE-2007-4224 backport (kdebase) [since FEDORA-2007-1700]
-CVE-2007-4211 version (dovecot, 1.0.3) #251008 [since FEDORA-2007-1485]
+CVE-2007-4211 version (dovecot, fixed 1.0.3) #251008 [since FEDORA-2007-1485]
 CVE-2007-4174 version (tor, fixed 0.1.2.16) [since FEDORA-2007-1674]
 GENERIC-MAP-NOMATCH version (tor, fixed 0.1.2.15) #249840 [since FEDORA-2007-1674]
 CVE-2007-4168 backport (libexif) #243892 [since FEDORA-2007-0414]
@@ -149,6 +150,7 @@
 CVE-2007-2821 version (wordpress, fixed 2.2) #245211 [since FEDORA-2007-0894]
 CVE-2007-2799 version (file, fixed 4.21) #241034 [since FEDORA-2007-0836]
 CVE-2007-2798 version (krb5, 1.6.1) [since FEDORA-2007-0740]
+CVE-2007-2797 version (xterm) fixed in fc5 and fc6 before f7 release
 CVE-2007-2768 ignore (openssh) needs pam OPIE which is not shipped.
 CVE-2007-2756 ignore (gd) DoS only
 CVE-2007-2754 backport (freetype) [since FEDORA-2007-0033]