fedora-security/audit fc7,1.5,1.6

Kevin Fenzi (kevin) fedora-extras-commits at redhat.com
Wed Jun 13 02:28:18 UTC 2007 

Author: kevin

Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv19805

Modified Files:
	fc7 
Log Message:
Process openssh



Index: fc7
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc7,v
retrieving revision 1.5
retrieving revision 1.6
diff -u -r1.5 -r1.6
--- fc7	12 Jun 2007 20:40:54 -0000	1.5
+++ fc7	13 Jun 2007 02:28:16 -0000	1.6
@@ -23,7 +23,7 @@
 *CVE-2007-2843 ignore (konqueror) safari specific
 *CVE-2007-2821 VULNERABLE (wordpress, fixed 2.2) #240970
 *CVE-2007-2799 (file)
-*CVE-2007-2768 (openssh)
+CVE-2007-2768 VULNERABLE (openssh)
 *CVE-2007-2756 ignore (gd) DoS only
 *CVE-2007-2754 (freetype)
 *CVE-2007-2721 patch (jasper, fixed 1.900.1-2) #240397
@@ -54,7 +54,7 @@
 *CVE-2007-2356 (gimp)
 *CVE-2007-2353 (axis)
 *CVE-2007-2245 VULNERABLE (phpMyAdmin, fixed 2.10.1) #237882
-*CVE-2007-2243 (openssh)
+CVE-2007-2243 VULNERABLE (openssh, fixed 4.6) 
 *CVE-2007-2241 (bind)
 *CVE-2007-2176 ignore (firefox) only affects the java quicktime interaction
 *CVE-2007-2172 (kernel)
@@ -395,7 +395,7 @@
 *CVE-2006-5848 version (trac, fixed 0.10.1) #215077
 *CVE-2006-5823 version (kernel, fixed 2.6.19.2) [since FEDORA-2007-058] was backport since FEDORA-2006-1223
 *CVE-2006-5815 version (proftpd, fixed 1.3.0a) #214820
-*CVE-2006-5794 backport (openssh, fixed 4.5) #214641 [since FEDORA-2006-1215]
+CVE-2006-5794 version (openssh, fixed 4.5) #214641 [since FEDORA-2006-1215]
 *CVE-2006-5793 version (libpng10, fixed 1.0.21) #216263
 *CVE-2006-5793 ignore (libpng, fixed 1.2.13) just a client crash
 *CVE-2006-5783 ignore (firefox) disputed
@@ -449,7 +449,7 @@
 *CVE-2006-5297 backport (mutt) [since FEDORA-2006-1063]
 *CVE-2006-5295 version (clamav, fixed 0.88.5) #210973
 *CVE-2006-5276 VULNERABLE (snort) #229265
-*CVE-2006-5229 ignore (openssh) not reproduced
+CVE-2006-5229 ignore (openssh) not reproduced
 *CVE-2006-5215 VULNERABLE (xorg-x11-xinit) #212167
 *CVE-2006-5215 version (xorg-x11-xdm)
 *CVE-2006-5215 ignore (kdebase) #212166 links to xinit Xsession
@@ -466,8 +466,8 @@
 *CVE-2006-5129 version (moodle, fixed 1.6.3) #206516
 *CVE-2006-5111 version (libksba, fixed 0.9.14)
 *CVE-2006-5072 backport (mono)
-*CVE-2006-5052 VULNERABLE (openssh, fixed 4.4)
-*CVE-2006-5051 backport (openssh, fixed 4.4)
+CVE-2006-5052 version (openssh, fixed 4.4)
+CVE-2006-5051 version (openssh, fixed 4.4) #208459
 *CVE-2006-4997 version (kernel, fixed 2.6.18)
 *CVE-2006-4980 version (python, fixed 2.4.4 at least) [since FEDORA-2006-1050] was backport since GA
 *CVE-2006-4976 ** (php-adodb) #208299
@@ -480,8 +480,8 @@
 *CVE-2006-4937 version (moodle, fixed 1.6.3) #206516
 *CVE-2006-4936 version (moodle, fixed 1.6.3) #206516
 *CVE-2006-4935 version (moodle, fixed 1.6.3) #206516
-*CVE-2006-4925 ignore (openssh) client crash only
-*CVE-2006-4924 backport (openssh, fixed 4.4)
+CVE-2006-4925 ignore (openssh) client crash only
+CVE-2006-4924 version (openssh, fixed 4.4) #207957
 *CVE-2006-4842 ignore (nspr) Nothing setuid links with nspr
 *CVE-2006-4816 (php)
 *CVE-2006-4814 version (kernel, fixed 2.6.19.2) [since FEDORA-2007-058]
@@ -982,7 +982,7 @@
 *CVE-2006-0987 (bind)
 *CVE-2006-0903 version (mysql, 4.1.19)
 *CVE-2006-0884 version (thunderbird, fixed 1.5.0.2)
-*CVE-2006-0883 (openssh)
+CVE-2006-0883 version (openssh, fixed 3.8.1p1)
 *CVE-2006-0855 patch (zoo, patched in OpenSUSE "upstream", fixed 2.10-7)
 *CVE-2006-0847 version (python-cherrypy, fixed 2.1.1)
 *CVE-2006-0841 version (mantis, fixed 1.0.1)
@@ -1066,7 +1066,7 @@
 *CVE-2006-0292 version (firefox, fixed 1.5.1)
 *CVE-2006-0254 version (tomcat5, fixed 5.5.16)
 *CVE-2006-0236 ignore (thunderbird) windows only
-*CVE-2006-0225 version (openssh, fixed 4.3p2)
+CVE-2006-0225 version (openssh, fixed 4.3p2) #168167
 *CVE-2006-0208 version (php, fixed 5.1.2)
 *CVE-2006-0207 version (php, fixed 5.1.2)
 *CVE-2006-0200 version (php, fixed 5.1.2)
@@ -1295,8 +1295,8 @@
 *CVE-2005-2811 version (net-snmp) not upstream, gentoo only
 *CVE-2005-2801 version (kernel, fixed 2.6.11)
 *CVE-2005-2800 version (kernel, fixed 2.6.12.6)
-*CVE-2005-2798 version (openssh, fixed 4.2)
-*CVE-2005-2797 version (openssh, fixed 4.2)
+CVE-2005-2798 version (openssh, fixed 4.2)
+CVE-2005-2797 version (openssh, fixed 4.2)
 *CVE-2005-2796 version (squid, fixed 2.5.STABLE11)
 *CVE-2005-2794 version (squid, fixed 2.5.STABLE11)
 *CVE-2005-2728 version (httpd, not 2.2)
@@ -1319,7 +1319,7 @@
 *CVE-2005-2700 version (httpd, not 2.2)
 *CVE-2005-2693 backport (cvs) cvs-1.11.19-tmp.patch
 *CVE-2005-2672 version (lm_sensors, fixed 2.9.2)
-*CVE-2005-2666 version (openssh, fixed 4.0p1)
+CVE-2005-2666 version (openssh, fixed 4.0p1)
 *CVE-2005-2642 version (mutt) openbsd only
 *CVE-2005-2641 version (nss_ldap, fixed pam_ldap:180)
 *CVE-2005-2629 (helixplayer)
@@ -1751,7 +1751,7 @@
 *CVE-2004-2136 ignore (dm-crypt) design
 *CVE-2004-2135 ignore (kernel) design
 CVE-2004-2093 ignore (rsync) not a security issue (rsync is not setuid)
-*CVE-2004-2069 version (openssh, not 4)
+CVE-2004-2069 version (openssh, not 4)
 *CVE-2004-2014 version (wget, fixed 1.10.1)
 *CVE-2004-2013 version (kernel, not 2.6)
 *CVE-2004-2004 version (configuration) SUSE only
@@ -1761,7 +1761,7 @@
 *CVE-2004-1772 version (sharutils, not 4.6)
 *CVE-2004-1761 version (wireshark, fixed 0.10.3)
 *CVE-2004-1689 version (sudo, fixed 1.6.8p1)
-*CVE-2004-1653 ignore (openssh)
+CVE-2004-1653 ignore (openssh)
 *CVE-2004-1639 version (firefox)
 *CVE-2004-1617 ignore (lynx) not able to verify flaw
 *CVE-2004-1488 version (wget, fixed 1.10.1)
@@ -2082,7 +2082,7 @@
 *CVE-2004-0178 version (kernel, not 2.6)
 *CVE-2004-0177 version (kernel, fixed 2.6.6)
 *CVE-2004-0176 version (wireshark, fixed 0.10.3)
-*CVE-2004-0175 version (openssh, fixed 3.4p1)
+CVE-2004-0175 version (openssh, fixed 3.4p1)
 *CVE-2004-0175 backport (krb5) krb5-1.3.3-rcp-markus.patch
 *CVE-2004-0174 version (httpd, not 2.2)
 *CVE-2004-0173 version (httpd, not 2.2)
@@ -2193,8 +2193,8 @@
 *CVE-2003-0792 version (fetchmail, 6.2.4 only)
 *CVE-2003-0789 version (httpd, not 2.2)
 *CVE-2003-0788 version (cups, fixed 1.1.19)
-*CVE-2003-0787 version (openssh, fixed 3.7.1p2)
-*CVE-2003-0786 version (openssh, fixed 3.7.1p2)
+CVE-2003-0787 version (openssh, fixed 3.7.1p2)
+CVE-2003-0786 version (openssh, fixed 3.7.1p2)
 *CVE-2003-0780 version (mysql, not 4.1)
 *CVE-2003-0778 version (sane-backends, fixed 1.0.10)
 *CVE-2003-0777 version (sane-backends, fixed 1.0.10)
@@ -2206,15 +2206,15 @@
 *CVE-2003-0730 version (XFree86, fixed after 4.3.0)
 *CVE-2003-0700 version (kernel, not 2.6)
 *CVE-2003-0699 version (kernel, not 2.6)
-*CVE-2003-0695 version (openssh, fixed 3.7.1)
+CVE-2003-0695 version (openssh, fixed 3.7.1)
 *CVE-2003-0694 version (sendmail, fixed 8.12.10)
-*CVE-2003-0693 version (openssh, fixed 3.7)
+CVE-2003-0693 version (openssh, fixed 3.7)
 *CVE-2003-0692 version (kde, fixed after 3.1.3)
 *CVE-2003-0690 version (kde, fixed after 3.1.3)
 *CVE-2003-0689 version (glibc, fixed 2.3.2 at least)
 *CVE-2003-0688 version (sendmail, fixed 8.12.9)
 *CVE-2003-0686 version (pam_smb, fixed 1.1.7)
-*CVE-2003-0682 version (openssh, fixed 4.0p1 at least)
+CVE-2003-0682 version (openssh, fixed 4.0p1 at least)
 *CVE-2003-0681 version (sendmail, fixed 8.12.10)
 *CVE-2003-0655 version (cdrtools, fixed 2.01a18)
 *CVE-2003-0644 version (kdbg, not after 1.2.8)
@@ -2260,7 +2260,7 @@
 *CVE-2003-0427 backport (mikmod) from changelog
 *CVE-2003-0418 version (kernel, not 2.6)
 *CVE-2003-0388 version (pam, fixed 0.78)
-*CVE-2003-0386 version (openssh, fixed after 3.6.1)
+CVE-2003-0386 version (openssh, fixed after 3.6.1)
 *CVE-2003-0370 version (kde, fixed 3.0)
 *CVE-2003-0367 backport (gzip) gzip-1.3.5-openbsd-owl-tmp.patch
 *CVE-2003-0364 version (kernel, not 2.6)
@@ -2291,7 +2291,7 @@
 *CVE-2003-0195 version (cups, fixed 1.1.19)
 *CVE-2003-0194 version (tcpdump, not upstream)
 *CVE-2003-0192 version (httpd, not 2.2)
-*CVE-2003-0190 version (openssh, fixed 3.6.1p1)
+CVE-2003-0190 version (openssh, fixed after 3.6.1p1)
 *CVE-2003-0189 version (httpd, not 2.2)
 *CVE-2003-0188 version (lv, fixed 4.51 at least)
 *CVE-2003-0187 version (kernel, not 2.6)
@@ -2520,10 +2520,10 @@
 *CVE-2002-0655 version (openssl097a, not 0.9.7)
 *CVE-2002-0653 version (mod_ssl, not httpd 2.2)
 *CVE-2002-0651 version (bind, not 9)
-*CVE-2002-0640 version (openssh, fixed after 3.3)
-*CVE-2002-0639 version (openssh, fixed after 3.3)
+CVE-2002-0640 version (openssh, fixed after 3.3)
+CVE-2002-0639 version (openssh, fixed after 3.3)
 *CVE-2002-0638 version (util-linux, fixed 2.13 at least)
-*CVE-2002-0575 version (openssh, fixed 3.2.1)
+CVE-2002-0575 version (openssh, fixed 3.2.1)
 *CVE-2002-0570 ignore (kernel) not a vulnerability
 *CVE-2002-0517 version (XFree86) didn't affect Linux
 *CVE-2002-0516 version (squirrelmail, fixed 1.2.6)
@@ -2573,7 +2573,7 @@
 *CVE-2002-0129 ignore (efax) not setuid root
 *CVE-2002-0121 version (php, fixed after 4.1.1)
 *CVE-2002-0092 version (cve, fixed 1.10.8)
-*CVE-2002-0083 version (openssh, fixed 3.1)
+CVE-2002-0083 version (openssh, fixed 3.1)
 *CVE-2002-0082 version (mod_ssl, not httpd 2.2)
 *CVE-2002-0081 version (php, not 4.2+)
 CVE-2002-0080 version (rsync, fixed 2.5.3)

-- 
fedora-extras-commits mailing list
fedora-extras-commits at redhat.com
https://www.redhat.com/mailman/listinfo/fedora-extras-commits

More information about the Fedora-security-list mailing list