/[fedora]/fedora-security/audit/fc4
ViewVC logotype

Contents of /fedora-security/audit/fc4

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.352 - (show annotations) (download)
Mon Aug 14 08:30:46 2006 UTC (3 years, 3 months ago) by mjc
Branch: MAIN
CVS Tags: HEAD
Changes since 1.351: +4 -0 lines
Note that this file is no longer maintained
1 Up to date CVE as of CVE email 20060730
2 Up to date FC4 as of 20060730
3
4 This list is no longer maintained by the Red Hat security
5 response team as of 7th August 2006 (the release date of
6 Fedora Core 6 Test 2)
7
8 ** are items that need attention
9
10 CVE-2006-3918 ** httpd, fixed 2.0.58
11 CVE-2006-3879 version (mikmod, not 3.1.6)
12 CVE-2006-3835 VULNERABLE (tomcat, fixed 5.5.17)
13 CVE-2006-3812 ** firefox/seamonkey/thunderbird
14 CVE-2006-3811 ** firefox/seamonkey/thunderbird
15 CVE-2006-3810 ** firefox/seamonkey/thunderbird
16 CVE-2006-3809 ** firefox/seamonkey/thunderbird
17 CVE-2006-3808 ** firefox/seamonkey/thunderbird
18 CVE-2006-3807 ** firefox/seamonkey/thunderbird
19 CVE-2006-3806 ** firefox/seamonkey/thunderbird
20 CVE-2006-3805 ** firefox/seamonkey/thunderbird
21 CVE-2006-3804 ** firefox/seamonkey/thunderbird
22 CVE-2006-3803 ** firefox/seamonkey/thunderbird
23 CVE-2006-3802 ** firefox/seamonkey/thunderbird
24 CVE-2006-3801 ** firefox/seamonkey/thunderbird
25 CVE-2006-3747 backport (httpd, fixed 2.0.59) [since FEDORA-2006-862]
26 CVE-2006-3746 version (gnupg, fixed 1.4.5) #200904 [since FEDORA-2006-867]
27 CVE-2006-3731 ignore (firefox) just a user complicit crash
28 CVE-2006-3694 backport (ruby, fixed 1.8.5) #199538 #199543 [since FEDORA-2006-842]
29 CVE-2006-3677 ** firefox/seamonkey
30 CVE-2006-3672 ignore (konqueror) just a crash
31 CVE-2006-3665 ignore (squirrelmail) don't enable register_globals!
32 CVE-2006-3634 ignore (kernel, fixed 2.6.17.8) s390 only
33 CVE-2006-3632 VULNERABLE (ethereal, fixed wireshark-0.99.2)
34 CVE-2006-3631 VULNERABLE (ethereal, fixed wireshark-0.99.2)
35 CVE-2006-3630 VULNERABLE (ethereal, fixed wireshark-0.99.2)
36 CVE-2006-3629 VULNERABLE (ethereal, fixed wireshark-0.99.2)
37 CVE-2006-3628 VULNERABLE (ethereal, fixed wireshark-0.99.2)
38 CVE-2006-3627 VULNERABLE (ethereal, fixed wireshark-0.99.2)
39 CVE-2006-3626 VULNERABLE (kernel, fixed 2.6.17.6)
40 CVE-2006-3619 ** gcc/fastjar
41 CVE-2006-3486 ignore (mysql) not exploitable
42 CVE-2006-3469 VULNERABLE (mysql)
43 CVE-2006-3468 VULNERABLE (kernel)
44 CVE-2006-3467 VULNERABLE (freetype)
45 CVE-2006-3465 backport (libtiff) [since FEDORA-2006-878]
46 CVE-2006-3464 backport (libtiff) [since FEDORA-2006-878]
47 CVE-2006-3463 backport (libtiff) [since FEDORA-2006-878]
48 CVE-2006-3462 backport (libtiff) [since FEDORA-2006-878]
49 CVE-2006-3461 backport (libtiff) [since FEDORA-2006-878]
50 CVE-2006-3460 backport (libtiff) [since FEDORA-2006-878]
51 CVE-2006-3459 backport (libtiff) [since FEDORA-2006-878]
52 CVE-2006-3404 version (gimp, fixed 2.2.12) #198270 [since FEDORA-2006-795]
53 CVE-2006-3403 version (samba, fixed 3.0.23) #198297 [since FEDORA-2006-808]
54 CVE-2006-3378 ignore (shadow-utils) we don't ship passwd from shadow-utils
55 CVE-2006-3376 backport (libwmf) #198291 [since FEDORA-2006-804]
56 CVE-2006-3352 ignore (firefox) not a vulnerability
57 CVE-2006-3334 ignore (libpng, fixed 1.2.12) not exploitable
58 CVE-2006-3242 backport (mutt) #197152 [since FEDORA-2006-761]
59 CVE-2006-3174 version (squirrelmail, fixed 1.4.7) #197369 [since FEDORA-2006-789]
60 CVE-2006-3145 VULNERABLE (netpbm, fixed 10.34)
61 CVE-2006-3117 backport (openoffice.org, fixed 2.0.3) [since FEDORA-2006-764]
62 CVE-2006-3085 version (kernel, fixed 2.6.16.21, fixed 2.6.17.1) [since FEDORA-2006-736]
63 CVE-2006-3082 version (gnupg, fixed 1.4.4) #195946 [since FEDORA-2006-757]
64 CVE-2006-3081 version (mysql, fixed 5.1.18) [since FEDORA-2006-703]
65 CVE-2006-3057 version (dhcdbd, fixed 1.14) [since FEDORA-2006-435]
66 CVE-2006-3018 VULNERABLE (php, fixed 5.1.3)
67 CVE-2006-3017 VULNERABLE (php, fixed 5.1.3) #197379
68 CVE-2006-3016 VULNERABLE (php, fixed 5.1.3)
69 CVE-2006-3011 VULNERABLE (php)
70 CVE-2006-2936 VULNERABLE (kernel, fixed 2.6.16.27, fixed 2.6.17.7)
71 CVE-2006-2935 VULNERABLE (kernel)
72 CVE-2006-2934 version (kernel, fixed 2.6.17.3) [since FEDORA-2006-769]
73 CVE-2006-2933 version (kde, not 3.2+)
74 CVE-2006-2916 ignore (arts) not shipped setuid
75 CVE-2006-2906 VULNERABLE (gd) #194520
76 CVE-2006-2894 VULNERABLE (firefox)
77 CVE-2006-2894 VULNERABLE (mozilla)
78 CVE-2006-2842 version (squirrelmail, fixed 1.4.6) #194286 [since FEDORA-2006-668]
79 CVE-2006-2789 VULNERABLE (evolution, fixed 2.4.X) #194108
80 CVE-2006-2788 VULNERABLE (firefox) (note, issue caught by fc glibc)
81 CVE-2006-2787 VULNERABLE (firefox)
82 CVE-2006-2787 VULNERABLE (thunderbird)
83 CVE-2006-2787 VULNERABLE (mozilla)
84 CVE-2006-2786 VULNERABLE (firefox)
85 CVE-2006-2786 VULNERABLE (thunderbird)
86 CVE-2006-2786 VULNERABLE (mozilla)
87 CVE-2006-2785 VULNERABLE (firefox)
88 CVE-2006-2785 VULNERABLE (mozilla)
89 CVE-2006-2784 VULNERABLE (firefox)
90 CVE-2006-2784 VULNERABLE (mozilla)
91 CVE-2006-2783 VULNERABLE (firefox)
92 CVE-2006-2783 VULNERABLE (thunderbird)
93 CVE-2006-2783 VULNERABLE (mozilla)
94 CVE-2006-2782 VULNERABLE (firefox)
95 CVE-2006-2781 VULNERABLE (thunderbird) (note, issue caught by fc glibc)
96 CVE-2006-2780 VULNERABLE (firefox)
97 CVE-2006-2780 VULNERABLE (thunderbird)
98 CVE-2006-2780 VULNERABLE (mozilla)
99 CVE-2006-2779 VULNERABLE (firefox)
100 CVE-2006-2779 VULNERABLE (thunderbird)
101 CVE-2006-2779 VULNERABLE (mozilla)
102 CVE-2006-2778 VULNERABLE (firefox)
103 CVE-2006-2778 VULNERABLE (thunderbird)
104 CVE-2006-2778 VULNERABLE (mozilla)
105 CVE-2006-2777 VULNERABLE (firefox)
106 CVE-2006-2777 VULNERABLE (thunderbird)
107 CVE-2006-2777 VULNERABLE (mozilla)
108 CVE-2006-2776 VULNERABLE (firefox)
109 CVE-2006-2776 VULNERABLE (thunderbird)
110 CVE-2006-2776 VULNERABLE (mozilla)
111 CVE-2006-2775 VULNERABLE (firefox)
112 CVE-2006-2775 VULNERABLE (thunderbird)
113 CVE-2006-2775 VULNERABLE (mozilla)
114 CVE-2006-2754 ignore (openldap) This issue is not exploitable
115 CVE-2006-2753 verson (mysql, fixed 4.1.20) #193828 [since FEDORA-2006-703]
116 CVE-2006-2723 ignore (firefox) disputed
117 CVE-2006-2661 VULNERABLE (freetype, fixed 2.2.1) #183677
118 CVE-2006-2660 ignore (php) #195539 see the bug
119 CVE-2006-2656 backport (libtiff) [since FEDORA-2006-591]
120 CVE-2006-2629 ignore (kernel) couldn't be reproduced on FC
121 CVE-2006-2613 ignore (firefox) This isn't an issue on FC
122 CVE-2006-2607 backport (vixie-cron) #178431
123 CVE-2006-2563 ignore (php) safe mode isn't safe
124 CVE-2006-2480 backport (dia) #192538 [since FEDORA-2006-580]
125 CVE-2006-2453 backport (dia) #192538 [since FEDORA-2006-580]
126 CVE-2006-2452 version (gdm, 2.8.X >= X < 2.15)
127 CVE-2006-2451 version (kernel, fixed 2.6.17.4) [since FEDORA-2006-801]
128 CVE-2006-2449 backport (kdebase) [since FEDORA-2006-725]
129 CVE-2006-2448 version (kernel, fixed 2.6.16.21, fixed 2.6.17) [since FEDORA-2006-736]
130 CVE-2006-2447 version (spamassassin, fixed 3.0.6) #194290 [since FEDORA-2006-658]
131 CVE-2006-2445 version (kernel, fixed 2.6.16.21, fixed 2.6.17) [since FEDORA-2006-736]
132 CVE-2006-2444 version (kernel, fixed 2.6.16.18) [since FEDORA-2006-697]
133 CVE-2006-2440 backport (ImageMagick) #192279 [since FEDORA-2006-587]
134 CVE-2006-2414 version (dovecot, fixed 1.0.beta8) 1.X only
135 CVE-2006-2369 backport (vnc, fixed 4.1.2) #191692 [since FEDORA-2006-557]
136 CVE-2006-2366 VULNERABLE (openobex) #192087
137 CVE-2006-2362 ignore (binutils) minor crash (not exploitable)
138 CVE-2006-2332 ignore (firefox) disputed
139 CVE-2006-2314 version (postgresql, fixed 8.0.8) [since FEDORA-2006-579]
140 CVE-2006-2313 version (postgresql, fixed 8.0.8) [since FEDORA-2006-579]
141 CVE-2006-2276 version (quagga) #191377 [since FEDORA-2006-843]
142 CVE-2006-2275 version (kernel, fixed 2.6.16.15) [since FEDORA-2006-573]
143 CVE-2006-2274 version (kernel, fixed 2.6.16.15) [since FEDORA-2006-573]
144 CVE-2006-2272 version (kernel, fixed 2.6.16.15) [since FEDORA-2006-573]
145 CVE-2006-2271 version (kernel, fixed 2.6.16.15) [since FEDORA-2006-573]
146 CVE-2006-2224 version (quagga, fixed 0.98.6) #191085 [since FEDORA-2006-843]
147 CVE-2006-2223 version (quagga, fixed 0.98.6) #191081 [since FEDORA-2006-843]
148 CVE-2006-2199 backport (openoffice.org, fixed 2.0.3) [since FEDORA-2006-764]
149 CVE-2006-2198 backport (openoffice.org, fixed 2.0.3) [since FEDORA-2006-764]
150 CVE-2006-2194 ignore (ppp) winbind pluging not shipped
151 CVE-2006-2193 VULNERABLE (libtiff) #194363
152 CVE-2006-2120 backport (libtiff) #189976 [since FEDORA-2006-473]
153 CVE-2006-2073 VULNERABLE (bind)
154 CVE-2006-2083 version (rsync, fixed 2.6.8) #190208 [since FEDORA-2006-601]
155 CVE-2006-2071 version (kernel, fixed 2.6.16.6) [since FEDORA-2006-423]
156 CVE-2006-2057 ignore (firefox) not Linux
157 CVE-2006-2026 backport (libtiff, fixed 3.8.1) #189934 [since FEDORA-2006-474]
158 CVE-2006-2025 backport (libtiff, fixed 3.8.1) #189934 [since FEDORA-2006-474]
159 CVE-2006-2024 backport (libtiff, fixed 3.8.1) #189934 [since FEDORA-2006-474]
160 CVE-2006-1993 version (firefox, 1.5 only)
161 CVE-2006-1991 VULNERABLE (php) #190034
162 CVE-2006-1990 VULNERABLE (php) #190034
163 CVE-2006-1942 VULNERABLE (firefox, fixed 1.5.0.4)
164 CVE-2006-1940 version (ethereal, fixed 0.99.0) #189909 [since FEDORA-2006-461]
165 CVE-2006-1939 version (ethereal, fixed 0.99.0) #189909 [since FEDORA-2006-461]
166 CVE-2006-1938 version (ethereal, fixed 0.99.0) #189909 [since FEDORA-2006-461]
167 CVE-2006-1937 version (ethereal, fixed 0.99.0) #189909 [since FEDORA-2006-461]
168 CVE-2006-1936 version (ethereal, fixed 0.99.0) #189909 [since FEDORA-2006-461]
169 CVE-2006-1935 version (ethereal, fixed 0.99.0) #189909 [since FEDORA-2006-461]
170 CVE-2006-1934 version (ethereal, fixed 0.99.0) #189909 [since FEDORA-2006-461]
171 CVE-2006-1933 version (ethereal, fixed 0.99.0) #189909 [since FEDORA-2006-461]
172 CVE-2006-1932 version (ethereal, fixed 0.99.0) #189909 [since FEDORA-2006-461]
173 CVE-2006-1931 version (ruby, fixed 1.8.3) #189540
174 CVE-2006-1902 ignore (gcc) not a vulnerability
175 CVE-2006-1864 version (kernel, fixed 2.6.16.14) [since FEDORA-2006-517]
176 CVE-2006-1863 version (kernel, fixed 2.6.16.11) [since FEDORA-2006-500]
177 CVE-2006-1862 version (kernel) not upstream kernels, only RHEL
178 CVE-2006-1861 VULNERABLE (freetype, fixed 2.2.1) #191771
179 CVE-2006-1860 version (kernel, fixed 2.6.16.16) [since FEDORA-2006-573]
180 CVE-2006-1859 version (kernel, fixed 2.6.16.16) [since FEDORA-2006-573]
181 CVE-2006-1858 version (kernel, fixed 2.6.16.17) [since FEDORA-2006-573]
182 CVE-2006-1857 version (kernel, fixed 2.6.16.17) [since FEDORA-2006-573]
183 CVE-2006-1856 version (kernel, fixed 2.6.16.12) [since FEDORA-2006-500]
184 CVE-2006-1855 version (kernel, fixed 2.6.11.12) [since FEDORA-2005-906] was backport since GA
185 CVE-2006-1790 version (firefox, fixed 1.0.8) [since FEDORA-2006-410]
186 CVE-2006-1790 version (thunderbird, fixed 1.0.8) [since FEDORA-2006-489]
187 CVE-2006-1790 version (mozilla, fixed 1.7.13) [since FEDORA-2006-488]
188 CVE-2006-1742 version (thunderbird, fixed 1.0.8) [since FEDORA-2006-489]
189 CVE-2006-1742 version (mozilla, fixed 1.7.13) [since FEDORA-2006-488]
190 CVE-2006-1742 version (firefox, fixed 1.0.8) [since FEDORA-2006-410]
191 CVE-2006-1741 version (thunderbird, fixed 1.0.8) [since FEDORA-2006-489]
192 CVE-2006-1741 version (mozilla, fixed 1.7.13) [since FEDORA-2006-488]
193 CVE-2006-1741 version (firefox, fixed 1.0.8) [since FEDORA-2006-410]
194 CVE-2006-1740 version (mozilla, fixed 1.7.13) [since FEDORA-2006-488]
195 CVE-2006-1740 version (firefox, fixed 1.0.8) [since FEDORA-2006-410]
196 CVE-2006-1739 version (thunderbird, fixed 1.0.8) [since FEDORA-2006-489]
197 CVE-2006-1739 version (mozilla, fixed 1.7.13) [since FEDORA-2006-488]
198 CVE-2006-1739 version (firefox, fixed 1.0.8) [since FEDORA-2006-410]
199 CVE-2006-1738 version (thunderbird, fixed 1.0.8) [since FEDORA-2006-489]
200 CVE-2006-1738 version (mozilla, fixed 1.7.13) [since FEDORA-2006-488]
201 CVE-2006-1738 version (firefox, fixed 1.0.8) [since FEDORA-2006-410]
202 CVE-2006-1737 version (thunderbird, fixed 1.0.8) [since FEDORA-2006-489]
203 CVE-2006-1737 version (mozilla, fixed 1.7.13) [since FEDORA-2006-488]
204 CVE-2006-1737 version (firefox, fixed 1.0.8) [since FEDORA-2006-410]
205 CVE-2006-1736 version (mozilla, fixed 1.7.13) [since FEDORA-2006-488]
206 CVE-2006-1736 VULNERABLE (firefox, fixed 1.0.8)
207 CVE-2006-1735 version (mozilla, fixed 1.7.13) [since FEDORA-2006-488]
208 CVE-2006-1735 version (thunderbird, fixed 1.0.8) [since FEDORA-2006-489]
209 CVE-2006-1735 version (firefox, fixed 1.0.8) [since FEDORA-2006-410]
210 CVE-2006-1734 version (mozilla, fixed 1.7.13) [since FEDORA-2006-488]
211 CVE-2006-1734 version (thunderbird, fixed 1.0.8) [since FEDORA-2006-489]
212 CVE-2006-1734 version (firefox, fixed 1.0.8) [since FEDORA-2006-410]
213 CVE-2006-1733 version (mozilla, fixed 1.7.13) [since FEDORA-2006-488]
214 CVE-2006-1733 version (thunderbird, fixed 1.0.8) [since FEDORA-2006-489]
215 CVE-2006-1733 version (firefox, fixed 1.0.8) [since FEDORA-2006-410]
216 CVE-2006-1732 version (mozilla, fixed 1.7.13) [since FEDORA-2006-488]
217 CVE-2006-1732 version (thunderbird, fixed 1.0.8) [since FEDORA-2006-489]
218 CVE-2006-1732 version (firefox, fixed 1.0.8) [since FEDORA-2006-410]
219 CVE-2006-1731 version (mozilla, fixed 1.7.13) [since FEDORA-2006-488]
220 CVE-2006-1731 version (thunderbird, fixed 1.0.8) [since FEDORA-2006-489]
221 CVE-2006-1731 version (firefox, fixed 1.0.8) [since FEDORA-2006-410]
222 CVE-2006-1730 version (mozilla, fixed 1.7.13) [since FEDORA-2006-488]
223 CVE-2006-1730 version (thunderbird, fixed 1.0.8) [since FEDORA-2006-489]
224 CVE-2006-1730 version (firefox, fixed 1.0.8) [since FEDORA-2006-410]
225 CVE-2006-1729 version (mozilla, fixed 1.7.13) [since FEDORA-2006-488]
226 CVE-2006-1729 version (firefox, fixed 1.0.8) [since FEDORA-2006-410]
227 CVE-2006-1728 version (thunderbird, fixed 1.0.8) [since FEDORA-2006-489]
228 CVE-2006-1728 version (mozilla, fixed 1.7.13) [since FEDORA-2006-488]
229 CVE-2006-1728 VULNERABLE (firefox, fixed 1.0.8)
230 CVE-2006-1727 version (thunderbird, fixed 1.0.8) [since FEDORA-2006-489]
231 CVE-2006-1727 version (mozilla, fixed 1.7.13) [since FEDORA-2006-488]
232 CVE-2006-1727 VULNERABLE (firefox, fixed 1.0.8)
233 CVE-2006-1726 version (firefox, fixed 1.5.0.2) 1.5 only
234 CVE-2006-1726 version (thunderbird, fixed 1.5.0.2) 1.5 only
235 CVE-2006-1725 version (firefox, fixed 1.5.0.2) 1.5 only
236 CVE-2006-1724 version (thunderbird, fixed 1.0.8) [since FEDORA-2006-489]
237 CVE-2006-1724 version (mozilla, fixed 1.7.13) [since FEDORA-2006-488]
238 CVE-2006-1724 version (firefox, fixed 1.0.8) [since FEDORA-2006-410]
239 CVE-2006-1723 version (thunderbird, fixed 1.0.8) [since FEDORA-2006-489]
240 CVE-2006-1723 VULNERABLE (firefox, fixed 1.0.8)
241 CVE-2006-1721 backport (cyrus-sasl, fixd 2.1.21) #189815 [since FEDORA-2006-515]
242 CVE-2006-1712 version (mailman, only 2.1.7)
243 CVE-2006-1650 ignore (firefox) a number of reports don't confirm this
244 CVE-2006-1646 ignore (ipsec-tools) KAME racoon, not ipsec-tools racoon
245 CVE-2006-1624 ignore (sysklogd) Silly configuration is not a security issue
246 CVE-2006-1608 ignore (php) safe mode isn't safe
247 CVE-2006-1550 backport (dia) #187402 [since FEDORA-2006-261]
248 CVE-2006-1549 ignore (php) this is not a security issue
249 CVE-2006-1548 VULNERABLE (struts, fixed 1.2.9) #187544
250 CVE-2006-1547 VULNERABLE (struts, fixed 1.2.9) #187544
251 CVE-2006-1546 VULNERABLE (struts, fixed 1.2.9) #187544
252 CVE-2006-1542 backport (python) #169046 [since FEDORA-2006-707]
253 CVE-2006-1531 version (thunderbird, fixed 1.0.8) [since FEDORA-2006-489]
254 CVE-2006-1531 VULNERABLE (firefox, fixed 1.0.8)
255 CVE-2006-1530 version (thunderbird, fixed 1.0.8) [since FEDORA-2006-489]
256 CVE-2006-1530 VULNERABLE (firefox, fixed 1.0.8)
257 CVE-2006-1529 version (thunderbird, fixed 1.0.8) [since FEDORA-2006-489]
258 CVE-2006-1529 VULNERABLE (firefox, fixed 1.0.8)
259 CVE-2006-1528 version (kernel, fixed 2.6.13) [since FEDORA-2006-131]
260 CVE-2006-1527 version (kernel, fixed 2.6.16.13, fixed 2.6.17-rc4) [since FEDORA-2006-500]
261 CVE-2006-1526 backport (xorg-x11) #189802 [since FEDORA-2006-484]
262 CVE-2006-1525 version (kernel, fixed 2.6.16.8) [since FEDORA-2006-423]
263 CVE-2006-1524 version (kernel, fixed 2.6.16.7) [since FEDORA-2006-423]
264 CVE-2006-1523 version (kernel, fixed 2.6.16.4) [since FEDORA-2006-423]
265 CVE-2006-1522 version (kernel, fixed 2.6.16.3) [since FEDORA-2006-423]
266 CVE-2006-1518 ignore (mysql) 5.x only [since FEDORA-2006-554]
267 CVE-2006-1517 version (mysql, fixed 4.1.19) #190868 [since FEDORA-2006-554]
268 CVE-2006-1516 version (mysql, fixed 4.1.19) #190866 [since FEDORA-2006-554]
269 CVE-2006-1494 VULNERABLE (php) #189592
270 CVE-2006-1490 VULNERABLE (php, fixed 5.1.4)
271 CVE-2006-1470 VULNERABLE (openldap) #197278
272 CVE-2006-1368 version (kernel, fixed 2.6.16) [since FEDORA-2006-245]
273 CVE-2006-1354 VULNERABLE (freeradius) #186084
274 CVE-2006-1343 version (kernel, fixed 2.6.16.19) [since FEDORA-2006-697]
275 CVE-2006-1342 version (kernel, not 2.6) not vulnerable
276 CVE-2006-1273 ignore (firefox) This is an IE only issue
277 CVE-2006-1244 ignore (xpdf) duplicate of other cve named issues
278 CVE-2006-1242 version (kernel, fixed 2.6.16.1) [since FEDORA-2006-245]
279 CVE-2006-1174 version (shadow-utils, fixed 4.0.3)
280 CVE-2006-1173 version (sendmail, fixed 8.13.7) [since FEDORA-2006-836]
281 CVE-2006-1168 VULNERABLE (ncompress) #201919
282 CVE-2006-1095 ignore (mod_python, 3.2.7 only)
283 CVE-2006-1079 ignore (httpd) not a vulnerability
284 CVE-2006-1078 ignore (httpd) not a vulnerability
285 CVE-2006-1066 version (kernel, fixed 2.6.16) [since FEDORA-2006-245]
286 CVE-2006-1061 version (curl, 7.15.0 - 7.15.2 only)
287 CVE-2006-1059 version (samba)
288 CVE-2006-1058 backport (busybox) #187386 [since FEDORA-2006-511]
289 CVE-2006-1057 VULNERABLE (gdm, fixed 2.14.1) #188303
290 CVE-2006-1056 version (kernel, fixed 2.6.16.9) [since FEDORA-2006-423]
291 CVE-2006-1055 version (kernel, fixed 2.6.17-rc1) [since FEDORA-2006-423]
292 CVE-2006-1052 version (kernel, fixed 2.6.16) [since FEDORA-2006-423] was backport since FEDORA-2006-245
293 CVE-2006-1045 version (thunderbird, fixed 1.0.8) [since FEDORA-2006-489]
294 CVE-2006-1015 ignore (php) safe mode isn't safe
295 CVE-2006-1014 ignore (php) safe mode isn't safe
296 CVE-2006-0996 VULNERABLE (php) #187511
297 CVE-2006-0903 version (mysql, fixed 4.1.19) #183261 [since FEDORA-2006-554]
298 CVE-2006-0884 version (thunderbird, fixed 1.0.8) [since FEDORA-2006-489]
299 CVE-2006-0836 version (thunderbird, 1.5 only)
300 CVE-2006-0749 version (thunderbird, fixed 1.0.8) [since FEDORA-2006-489]
301 CVE-2006-0749 version (mozilla, fixed 1.7.13) [since FEDORA-2006-488]
302 CVE-2006-0749 version (firefox, fixed 1.0.8) [since FEDORA-2006-410]
303 CVE-2006-0748 version (thunderbird, fixed 1.0.8) [since FEDORA-2006-489]
304 CVE-2006-0748 version (mozilla, fixed 1.7.13) [since FEDORA-2006-488]
305 CVE-2006-0748 VULNERABLE (firefox, fixed 1.0.8)
306 CVE-2006-0747 VULNERABLE (freetype, fixed 2.2.1) #183677
307 CVE-2006-0746 VULNERABLE (kpdf) #184308
308 CVE-2006-0745 version (xorg-x11) not fc4
309 CVE-2006-0744 version (kernel, fixed 2.6.16.5) [since FEDORA-2006-423]
310 CVE-2006-0742 version (kernel, fixed 2.6.16) patch-2.6.16-rc6 [since FEDORA-2006-245]
311 CVE-2006-0741 version (kernel, fixed 2.6.15.5) [since FEDORA-2006-245] was backport since FEDORA-2006-131
312 CVE-2006-0730 version (dovecot, 1.0beta[12] only)
313 CVE-2006-0678 version (postgresql, 8.1 only)
314 CVE-2006-0670 VULNERABLE (bluez-hcidump)
315 CVE-2006-0645 backport (gnutls) [since FEDORA-2006-107]
316 CVE-2006-0591 version (postgresql, fixed 8.0.6) #180537 [since FEDORA-2005-021]
317 CVE-2006-0576 VULNERABLE (oprofile) #180724
318 CVE-2006-0558 version (kernel, fixed 2.6.16) [since FEDORA-2006-245]
319 CVE-2006-0557 version (kernel, fixed 2.6.15.5) [since FEDORA-2006-245] was backport since FEDORA-2006-131
320 CVE-2006-0555 version (kernel, fixed 2.6.15.5) [since FEDORA-2006-245] was backport since FEDORA-2006-131
321 CVE-2006-0554 version (kernel, fixed 2.6.15.5) [since FEDORA-2006-245] was backport since FEDORA-2006-131
322 CVE-2006-0553 version (postgresql, 8.1 only)
323 CVE-2006-0528 version (evolution, 2.3 and above)
324 CVE-2006-0496 VULNERABLE (mozilla)
325 CVE-2006-0496 VULNERABLE (firefox)
326 CVE-2006-0482 ignore (kernel) sparc only
327 CVE-2006-0481 version (libpng, 1.2.7 only)
328 CVE-2006-0459 version (flex) by inspection
329 CVE-2006-0457 version (kernel, fixed 2.6.15.5) [since FEDORA-2006-245] was backport since FEDORA-2006-131
330 CVE-2006-0456 ignore (kernel, s390 only)
331 CVE-2006-0455 version (gnupg, fixed 1.4.2.1) [since FEDORA-2006-116]
332 CVE-2006-0454 version (kernel, fixed 2.6.15.3) [since FEDORA-2006-423] was backport since FEDORA-2006-102
333 CVE-2006-0405 version (libtiff, 3.8.0 only)
334 CVE-2006-0377 version (squirrelmail, fixed 1.4.6) [since FEDORA-2006-133]
335 CVE-2006-0369 ignore (mysql) this is not a security issue
336 CVE-2006-0321 version (fetchmail, fixed 6.3.2) 6.3.X only affected
337 CVE-2006-0301 version (poppler, fixed 0.4.5) [since FEDORA-2006-103]
338 CVE-2006-0301 backport (xpdf) [since FEDORA-2006-104]
339 CVE-2006-0301 version (kdegraphics, fixed 3.5.2) [since FEDORA-2006-385] was backport since FEDORA-2006-105
340 CVE-2006-0300 VULNERABLE (tar) #181773
341 CVE-2006-0299 version (thunderbird, 1.5 only)
342 CVE-2006-0299 version (mozilla, 1.8 branch only)
343 CVE-2006-0299 version (firefox, 1.5 only)
344 CVE-2006-0298 version (thunderbird, 1.5 only)
345 CVE-2006-0298 version (mozilla, 1.8 branch only)
346 CVE-2006-0298 version (firefox, 1.5 only)
347 CVE-2006-0297 version (thunderbird, 1.5 only)
348 CVE-2006-0297 version (mozilla, 1.8 branch only)
349 CVE-2006-0297 version (firefox, 1.5 only)
350 CVE-2006-0296 backport (mozilla) [since FEDORA-2006-075]
351 CVE-2006-0296 backport (firefox) [since FEDORA-2006-076]
352 CVE-2006-0296 version (thunderbird, fixed 1.0.8) [since FEDORA-2006-489]
353 CVE-2006-0295 version (thunderbird, 1.5 only)
354 CVE-2006-0295 version (mozilla, 1.8 branch only)
355 CVE-2006-0295 version (firefox, 1.5 only)
356 CVE-2006-0294 version (thunderbird, 1.5 only)
357 CVE-2006-0294 version (mozilla, 1.8 branch only)
358 CVE-2006-0294 version (firefox, 1.5 only)
359 CVE-2006-0293 version (thunderbird, 1.5 only)
360 CVE-2006-0293 version (mozilla, 1.8 branch only)
361 CVE-2006-0293 version (firefox, 1.5 only)
362 CVE-2006-0292 backport (mozilla) [since FEDORA-2006-075]
363 CVE-2006-0292 backport (firefox) [since FEDORA-2006-076]
364 CVE-2006-0292 version (thunderbird, fixed 1.0.8) [since FEDORA-2006-489]
365 CVE-2006-0254 VULNERABLE (tomcat5, fixed 5.5.16) #178178
366 CVE-2006-0236 ignore (thunderbird) windows only flaw
367 CVE-2006-0225 backport (openssh) #168167 [since FEDORA-2006-056]
368 CVE-2006-0208 VULNERABLE (php) #178036
369 CVE-2006-0207 VULNERABLE (php) #178044
370 CVE-2006-0200 version (php, 5.1.0 5.1.1 only)
371 CVE-2006-0197 ignore (xorg-x11) not an issue
372 CVE-2006-0195 version (squirrelmail, fixed 1.4.6) [since FEDORA-2006-133]
373 CVE-2006-0188 version (squirrelmail, fixed 1.4.6) [since FEDORA-2006-133]
374 CVE-2006-0097 ignore (php) Windows only
375 CVE-2006-0096 ignore (kernel) minor and requires root
376 CVE-2006-0095 version (kernel, fixed 2.6.15.5) [since FEDORA-2006-245] was backport since FEDORA-2006-102
377 CVE-2006-0082 version (ImageMagick, not 6.2.2.0)
378 CVE-2006-0058 version (sendmail, fixed 8.13.6) [since FEDORA-2006-194]
379 CVE-2006-0052 version (mailman, fixed 2.1.6) #187421 [since FEDORA-2006-534]
380 CVE-2006-0049 version (gnupg, fixed 1.4.2.2) [since FEDORA-2006-147]
381 CVE-2006-0040 VULNERABLE (gtkhtml)
382 CVE-2006-0039 version (kernel, fixed 2.6.16.17) [since FEDORA-2006-573]
383 CVE-2006-0037 version (kernel, fixed 2.6.15.5, only 2.6.14 and 2.6.15) [since FEDORA-2006-245] was backport since FEDORA-2006-077
384 CVE-2006-0036 version (kernel, fixed 2.6.15.5, only 2.6.14 and 2.6.15) [since FEDORA-2006-245] was backport since FEDORA-2006-077
385 CVE-2006-0035 version (kernel, fixed 2.6.15.5) [since FEDORA-2006-245] was backport since FEDORA-2006-077
386 CVE-2006-0019 version (kdelibs, fixed 3.5.1) [since FEDORA-2006-090] was backport since FEDORA-2006-050
387 CVE-2005-4798 version (kernel, not 2.6)
388 CVE-2005-4784 ignore (glibc) struct dirent is big enough
389 CVE-2005-4746 version (freeradius) we don't build vulnerable bits
390 CVE-2005-4745 version (freeradius) we don't build vulnerable bits
391 CVE-2005-4744 VULNERABLE (freeradius, fixed 1.0.5) #167677
392 CVE-2005-4720 VULNERABLE (thunderbird)
393 CVE-2005-4720 VULNERABLE (mozilla)
394 CVE-2005-4720 VULNERABLE (firefox)
395 CVE-2005-4703 ignore (tomcat) windows only
396 CVE-2005-4685 VULNERABLE (mozilla)
397 CVE-2005-4685 VULNERABLE (firefox)
398 CVE-2005-4684 VULNERABLE (kdebase) not fixed upstream
399 CVE-2005-4667 backport (unzip) [since FEDORA-2006-098] #178961
400 CVE-2005-4639 version (kernel, fixed 2.6.15) [since FEDORA-2006-077]
401 CVE-2005-4636 version (openoffice.org, fixed 2.0.1)
402 CVE-2005-4635 version (kernel, fixed 2.6.15) [since FEDORA-2006-077] was backport since FEDORA-2006-013
403 CVE-2005-4618 version (kernel, fixed 2.6.15) [since FEDORA-2006-077] was backport since FEDORA-2006-013
404 CVE-2005-4605 version (kernel, fixed 2.6.15) [since FEDORA-2006-077] was backport since FEDORA-2006-013
405 CVE-2005-4585 version (ethereal, fixed 0.10.14) [since FEDORA-2006-006]
406 CVE-2005-4442 version (openldap) gentoo only
407 CVE-2005-4348 version (fetchmail, fixed 6.2.5.5) #176267 [since FEDORA-2005-1187]
408 CVE-2005-4268 blocked (cpio) #172669 by FORTIFY_SOURCE
409 CVE-2005-4158 backport (sudo) [since FEDORA-2005-1147] was ignore only env_reset will properly clean the environment
410 CVE-2005-4154 ignore (php) don't install untrusted pear packages
411 CVE-2005-4153 version (mailman) [since FEDORA-2006-534]
412 CVE-2005-4134 backport (mozilla) [since FEDORA-2006-075]
413 CVE-2005-4134 backport (firefox) [since FEDORA-2006-076]
414 CVE-2005-4130 ignore (HelixPlayer) not verified
415 CVE-2005-4126 ignore (HelixPlayer) not verified
416 CVE-2005-4077 backport (curl) [since FEDORA-2005-1137]
417 CVE-2005-3964 backport (openmotif) #174815 [since FEDORA-2006-854]
418 CVE-2005-3962 backport (perl) [since FEDORA-2005-1144]
419 CVE-2005-3912 backport (perl) [since FEDORA-2005-1144]
420 CVE-2005-3896 ignore (mozilla) recoverable DoS only
421 CVE-2005-3883 VULNERABLE (php)
422 CVE-2005-3858 version (kernel, fixed 2.6.13) [since FEDORA-2005-949]
423 CVE-2005-3857 version (kernel, fixed 2.6.15) [since FEDORA-2006-077]
424 CVE-2005-3848 version (kernel, fixed 2.6.13) [since FEDORA-2005-949]
425 CVE-2005-3847 version (kernel, fixed 2.6.12.6) [since FEDORA-2005-949] was backport since [FEDORA-2005-906]
426 CVE-2005-3810 version (kernel, fixed 2.6.15) [since FEDORA-2006-077] was backport since FEDORA-2005-1104 affects 2.6.14 only [vulnerable since FEDORA-2005-1067]
427 CVE-2005-3809 version (kernel, fixed 2.6.15) [since FEDORA-2006-077] was backport since FEDORA-2005-1104 affects 2.6.14 only [vulnerable since FEDORA-2005-1067]
428 CVE-2005-3808 version (kernel, fixed 2.6.15) was backport since FEDORA-2005-1104
429 CVE-2005-3807 version (kernel, fixed 2.6.15) was backport since FEDORA-2005-1104
430 CVE-2005-3806 version (kernel, fixed 2.6.14) [since FEDORA-2005-1067]
431 CVE-2005-3805 version (kernel, fixed 2.6.14) [since FEDORA-2005-1067]
432 CVE-2005-3784 version (kernel, fixed 2.6.15) [since FEDORA-2006-077] was backport since FEDORA-2005-3784
433 CVE-2005-3783 version (kernel, fixed 2.6.14.2) [since FEDORA-2006-077] was backport since FEDORA-2005-1104
434 CVE-2005-3753 version (kernel, fixed 2.6.14) also not a vuln
435 CVE-2005-3745 ignore (struts, fixed 1.2.8) but not through tomcat
436 CVE-2005-3732 VULNERABLE (ipsec-tools, fixed 0.6.3) #173842
437 CVE-2005-3675 VULNERABLE (kernel) optack
438 CVE-2005-3671 version (openswan, fixed 2.4.4) [since FEDORA-2005-1093]
439 CVE-2005-3662 version (netpbm)
440 CVE-2005-3656 backport (mod_auth_pgsql, fixed 2.0.3) [since FEDORA-2006-015]
441 CVE-2005-3651 version (ethereal, fixed 0.10.14) [since FEDORA-2006-006]
442 CVE-2005-3632 version (netpbm)
443 CVE-2005-3631 version (udev)
444 CVE-2005-3629 VULNERABLE (initscripts, fixed 8.29 at least)
445 CVE-2005-3628 version (poppler, fixed 0.4.4) [since FEDORA-2005-026] was backport since FEDORA-2005-1171
446 CVE-2005-3628 version (kdegraphics, fixed 3.5.1) [since FEDORA-2006-088] was backport since FEDORA-2005-1160
447 CVE-2005-3628 backport (xpdf) [since FEDORA-2005-1169]
448 CVE-2005-3628 backport (tetex) [since FEDORA-2005-1126]
449 CVE-2005-3628 backport (cups) [since FEDORA-2005-1142]
450 CVE-2005-3627 version (poppler, fixed 0.4.4) [since FEDORA-2005-026]
451 CVE-2005-3627 version (kdegraphics, fixed 3.5.1) [since FEDORA-2006-088] was backport since FEDORA-2005-1160
452 CVE-2005-3627 backport (xpdf) [since FEDORA-2005-027]
453 CVE-2005-3627 backport (tetex) [since FEDORA-2006-028]
454 CVE-2005-3627 backport (cups) [since FEDORA-2006-010]
455 CVE-2005-3626 version (poppler, fixed 0.4.4) [since FEDORA-2005-026]
456 CVE-2005-3626 version (kdegraphics, fixed 3.5.1) [since FEDORA-2006-088] was backport since FEDORA-2005-1160
457 CVE-2005-3626 backport (xpdf) [since FEDORA-2005-027]
458 CVE-2005-3626 backport (tetex) [since FEDORA-2006-028]
459 CVE-2005-3626 backport (cups) [since FEDORA-2006-010]
460 CVE-2005-3625 version (poppler, fixed 0.4.4) [since FEDORA-2005-026]
461 CVE-2005-3625 version (kdegraphics, fixed 3.5.1) [since FEDORA-2006-088] was backport since FEDORA-2005-1160
462 CVE-2005-3625 backport (xpdf) [since FEDORA-2005-027]
463 CVE-2005-3625 backport (tetex) [since FEDORA-2006-028]
464 CVE-2005-3625 backport (cups) [since FEDORA-2006-010]
465 CVE-2005-3624 version (poppler, fixed 0.4.4) [since FEDORA-2005-026]
466 CVE-2005-3624 version (kdegraphics, fixed 3.5.1) [since FEDORA-2006-088] was backport since FEDORA-2005-1160
467 CVE-2005-3624 backport (xpdf) [since FEDORA-2005-027]
468 CVE-2005-3624 backport (tetex) [since FEDORA-2006-028]
469 CVE-2005-3624 backport (cups) [since FEDORA-2006-010]
470 CVE-2005-3623 version (kernel, fixed 2.6.14.5) [since FEDORA-2006-077] was backport since FEDORA-2006-013
471 CVE-2005-3582 version (ImageMagick) gentoo only
472 CVE-2005-3573 version (mailman, fixed 2.1.7) #173140 [since FEDORA-2006-534]
473 CVE-2005-3527 version (kernel, fixed 2.6.14 at least) [since FEDORA-2005-1067]
474 CVE-2005-3402 ignore (thunderbird) mozilla say by design
475 CVE-2005-3392 ignore (php) safe mode isn't safe
476 CVE-2005-3391 ignore (php) safe mode isn't safe
477 CVE-2005-3390 backport (php, fixed 5.1.2 at least) [since FEDORA-2005-1062]
478 CVE-2005-3389 backport (php) [since FEDORA-2005-1062]
479 CVE-2005-3388 backport (php) [since FEDORA-2005-1062]
480 CVE-2005-3359 version (kernel, fixed 2.6.14) [since FEDORA-2005-1067]
481 CVE-2005-3358 version (kernel, fixed 2.6.11)
482 CVE-2005-3357 backport (httpd, fixed 2.0.56) [since FEDORA-2006-052]
483 CVE-2005-3356 version (kernel, fixed 2.6.16) [since FEDORA-2006-245] was backport since FEDORA-2006-077
484 CVE-2005-3353 backport (php) [since FEDORA-2005-1062]
485 CVE-2005-3352 backport (httpd, fixed 2.0.56) [since FEDORA-2006-052]
486 CVE-2005-3351 version (spamassassin, fixed 3.0.5) [since FEDORA-2006-545] was backport since FEDORA-2005-1066
487 CVE-2005-3350 version (libungif, fixed 4.1.3) [since FEDORA-2005-1046]
488 CVE-2005-3322 version (squid, not upstream) SUSE only
489 CVE-2005-3319 ignore (mod_php) no security consequence
490 CVE-2005-3313 version (ethereal, fixed 0.10.14) [since FEDORA-2006-006]
491 CVE-2005-3276 version (kernel, fixed 2.6.12.4) [since FEDORA-2005-949] was backport since FEDORA-2005-820
492 CVE-2005-3275 version (kernel, fixed 2.6.13) [since FEDORA-2005-949] was backport since FEDORA-2005-820
493 CVE-2005-3274 version (kernel, fixed 2.6.13) [since FEDORA-2005-949]
494 CVE-2005-3273 version (kernel, fixed 2.6.12) [since FEDORA-2005-510]
495 CVE-2005-3272 version (kernel, fixed 2.6.13) [since FEDORA-2005-949]
496 CVE-2005-3271 version (kernel, fixed 2.6.9) since GA
497 CVE-2005-3258 version (squid, fixed 2.5.STABLE12) [since FEDORA-2006-150] was backport since FEDORA-2005-1009
498 CVE-2005-3257 version (kernel, fixed 2.6.15) [since FEDORA-2006-077] was backport since FEDORA-2005-1138
499 CVE-2005-3249 version (ethereal, fixed 0.10.13) [since FEDORA-2005-1011]
500 CVE-2005-3248 version (ethereal, fixed 0.10.13) [since FEDORA-2005-1011]
501 CVE-2005-3247 version (ethereal, fixed 0.10.13) [since FEDORA-2005-1011]
502 CVE-2005-3246 version (ethereal, fixed 0.10.13) [since FEDORA-2005-1011]
503 CVE-2005-3245 version (ethereal, fixed 0.10.13) [since FEDORA-2005-1011]
504 CVE-2005-3244 version (ethereal, fixed 0.10.13) [since FEDORA-2005-1011]
505 CVE-2005-3243 version (ethereal, fixed 0.10.13) [since FEDORA-2005-1011]
506 CVE-2005-3242 version (ethereal, fixed 0.10.13) [since FEDORA-2005-1011]
507 CVE-2005-3241 version (ethereal, fixed 0.10.13) [since FEDORA-2005-1011]
508 CVE-2005-3193 version (poppler, fixed 0.4.4) [since FEDORA-2005-026] was backport since FEDORA-2005-1171
509 CVE-2005-3193 version (kdegraphics, fixed 3.5.1) [since FEDORA-2006-088] was backport since FEDORA-2005-1160
510 CVE-2005-3193 backport (xpdf) [since FEDORA-2005-1169]
511 CVE-2005-3193 backport (tetex) [since FEDORA-2005-1126]
512 CVE-2005-3193 backport (cups) [since FEDORA-2005-1142]
513 CVE-2005-3192 version (poppler, fixed 0.4.4) [since FEDORA-2005-026] was backport since FEDORA-2005-1171
514 CVE-2005-3192 version (kdegraphics, fixed 3.5.1) [since FEDORA-2006-088] was backport since FEDORA-2005-1160
515 CVE-2005-3192 backport (xpdf) [since FEDORA-2005-1169]
516 CVE-2005-3192 backport (tetex) [since FEDORA-2005-1126]
517 CVE-2005-3192 backport (cups) [since FEDORA-2005-1142]
518 CVE-2005-3191 version (poppler, fixed 0.4.4) [since FEDORA-2005-026] was backport since FEDORA-2005-1171
519 CVE-2005-3191 version (kdegraphics, fixed 3.5.1) [since FEDORA-2006-088] was backport since FEDORA-2005-1160
520 CVE-2005-3191 backport (xpdf) [since FEDORA-2005-1169]
521 CVE-2005-3191 backport (tetex) [since FEDORA-2005-1126]
522 CVE-2005-3191 backport (cups) [since FEDORA-2005-1142]
523 CVE-2005-3186 backport (gtk2) [since FEDORA-2005-1088]
524 CVE-2005-3186 backport (gdk-pixbuf) [since FEDORA-2005-1085]
525 CVE-2005-3185 blocked (wget) by FORTIFY_SOURCE
526 CVE-2005-3185 backport (curl) [since FEDORA-2005-1129] was blocked (curl) by FORTIFY_SOURCE
527 CVE-2005-3184 version (ethereal, fixed 0.10.13) [since FEDORA-2005-1011]
528 CVE-2005-3183 backport (w3c-libwww) #159597 [since FEDORA-2005-952]
529 CVE-2005-3181 version (kernel, fixed 2.6.13.4 at least) [since FEDORA-2005-1067] was backport since FEDORA-2005-1013
530 CVE-2005-3180 version (kernel, fixed 2.6.13.4 at least) [since FEDORA-2005-1067] was backport since FEDORA-2005-1013
531 CVE-2005-3179 version (kernel, fixed 2.6.13.4 at least) [since FEDORA-2005-1067] was backport since FEDORA-2005-1013
532 CVE-2005-3164 version (tomcat, not 5)
533 CVE-2005-3120 backport (lynx) [since FEDORA-2005-994]
534 CVE-2005-3119 version (kernel, fixed 2.6.13.4 at least) [since FEDORA-2005-1067] was backport since FEDORA-2005-1013
535 CVE-2006-3113 ** firefox/seamonkey/thunderbird
536 CVE-2005-3110 version (kernel, fixed 2.6.12) [since FEDORA-2005-510]
537 CVE-2005-3109 version (kernel, fixed 2.6.12) [since FEDORA-2005-510]
538 CVE-2005-3108 version (kernel, fixed 2.6.12) [since FEDORA-2005-510]
539 CVE-2005-3107 version (kernel, fixed 2.6.11)
540 CVE-2005-3106 version (kernel, fixed 2.6.11)
541 CVE-2005-3105 version (kernel, fixed 2.6.12) [since FEDORA-2005-510]
542 CVE-2005-3089 version (firefox, fixed 1.0.7) [since FEDORA-2005-926]
543 CVE-2005-3088 ignore (fetchmail) fetchmailconf not shipped
544 CVE-2005-3055 version (kernel, fixed 2.6.14 at least) [since FEDORA-2005-1067]
545 CVE-2005-3054 ignore (php) see #169857
546 CVE-2005-3053 version (kernel) [since FEDORA-2005-949] was backport since FEDORA-2005-820
547 CVE-2005-3044 version (kernel, fixed 2.6.13.2) [since FEDORA-2005-1067] was backport since FEODRA-2005-949
548 CVE-2005-3011 backport (texinfo) #169585 [since FEDORA-2005-991]
549 CVE-2005-2991 ignore (ncompress) don't ship zdiff or zcmp scripts
550 CVE-2005-2978 version (netpbm, fixed 10.25)
551 CVE-2005-2977 backport (pam) [since FEDORA-2005-1031]
552 CVE-2005-2976 backport (gdk-pixbuf) [since FEDORA-2005-1085]
553 CVE-2005-2975 backport (gtk2) [since FEDORA-2005-1088]
554 CVE-2005-2975 backport (gdk-pixbuf) [since FEDORA-2005-1085]
555 CVE-2005-2974 version (libungif, fixed 4.1.3) [since FEDORA-2005-1046]
556 CVE-2005-2973 version (kernel, 2.6.14 at least) [since FEODRA-2005-1067]
557 CVE-2005-2970 backport (httpd) #171759 [since FEDORA-2006-052]
558 CVE-2005-2969 backport (openssl097a, fixed 0.9.7h) [since FEDORA-2005-986]
559 CVE-2005-2969 backport (openssl, fixed 0.9.7h) [since FEDORA-2005-986]
560 CVE-2005-2968 version (thunderbird) [since FEDORA-2005-963]
561 CVE-2005-2968 version (mozilla, not 1.7.10) +we include a different mozilla sh
562 CVE-2005-2968 version (firefox) [since FEDORA-2005-926]
563 CVE-2005-2959 ignore (sudo) not a vulnerability
564 CVE-2005-2946 VULNERABLE (openssl, fixed 0.9.8) (as it uses md5 md)
565 CVE-2005-2933 backport (libc-client) [since FEDORA-2005-1115]
566 CVE-2005-2933 VULNERABLE (uw-imap) #171345
567 CVE-2005-2929 backport (lynx) [since FEDORA-2005-1079]
568 CVE-2005-2922 version (HelixPlayer, fixed 1.0.6) [since FEDORA-2005-940]
569 CVE-2005-2917 version (squid, fixed 2.5.STABLE11) [since FEDORA-2005-913]
570 CVE-2005-2876 backport (util-linux, fixed 2.12r) [since FEDORA-2005-887]
571 CVE-2005-2874 version (cups, fixed 1.1.23)
572 CVE-2005-2873 VULNERABLE (kernel) not upstream fixed
573 CVE-2005-2872 version (kernel, fixed 2.6.12) [since FEDORA-2005-510]
574 CVE-2005-2871 version (thunderbird) (moderate only) [since FEDORA-2005-963]
575 CVE-2005-2871 version (mozilla, fixed 1.7.12) [since FEDORA-2005-927] was backport [since FEDORA-2005-873]
576 CVE-2005-2871 version (firefox, fixed 1.0.7) [since FEDORA-2005-926] was backport [since FEDORA-2005-871]
577 CVE-2005-2811 version (net-snmp, not upstream) gentoo only
578 CVE-2005-2801 version (kernel, fixed 2.6.11)
579 CVE-2005-2800 version (kernel, fixed 2.6.12.6) [since FEDORA-2005-949] was backport since FEDORA-2005-906
580 CVE-2005-2798 version (openssh, fixed 4.2) [since FEDORA-2005-860]
581 CVE-2005-2797 version (openssh, fixed 4.2) [since FEDORA-2005-860]
582 CVE-2005-2796 version (squid, fixed 2.5.STABLE11) [since FEDORA-2005-913] was backport since FEDORA-2005-851
583 CVE-2005-2794 version (squid, fixed 2.5.STABLE11) [since FEDORA-2005-913] was backport since FEDORA-2005-851
584 CVE-2005-2728 backport (httpd, fixed 2.0.55-dev) [since FEDORA-2005-849]
585 CVE-2005-2710 version (helixplayer, fixed 1.0.6) [since FEDORA-2005-940]
586 CVE-2005-2709 version (kernel, fixed 2.6.14.3) [since FEDORA-2006-077] was backport since FEDORA-2005-1104
587 CVE-2005-2708 ignore (kernel) not reproducable on x86_64
588 CVE-2005-2707 version (thunderbird) [since FEDORA-2005-963]
589 CVE-2005-2707 version (mozilla, fixed 1.7.12) [since FEDORA-2005-927]
590 CVE-2005-2707 version (firefox, fixed 1.0.7) [since FEDORA-2005-926]
591 CVE-2005-2706 version (thunderbird) [since FEDORA-2005-963]
592 CVE-2005-2706 version (mozilla, fixed 1.7.12) [since FEDORA-2005-927]
593 CVE-2005-2706 version (firefox, fixed 1.0.7) [since FEDORA-2005-926]
594 CVE-2005-2705 version (thunderbird) [since FEDORA-2005-963]
595 CVE-2005-2705 version (mozilla, fixed 1.7.12) [since FEDORA-2005-927]
596 CVE-2005-2705 version (firefox, fixed 1.0.7) [since FEDORA-2005-926]
597 CVE-2005-2704 version (thunderbird) [since FEDORA-2005-963]
598 CVE-2005-2704 version (mozilla, fixed 1.7.12) [since FEDORA-2005-927]
599 CVE-2005-2704 version (firefox, fixed 1.0.7) [since FEDORA-2005-926]
600 CVE-2005-2703 version (thunderbird) [since FEDORA-2005-963]
601 CVE-2005-2703 version (mozilla, fixed 1.7.12) [since FEDORA-2005-927]
602 CVE-2005-2703 version (firefox, fixed 1.0.7) [since FEDORA-2005-926]
603 CVE-2005-2702 version (thunderbird) [since FEDORA-2005-963]
604 CVE-2005-2702 version (mozilla, fixed 1.7.12) [since FEDORA-2005-927]
605 CVE-2005-2702 version (firefox, fixed 1.0.7) [since FEDORA-2005-926]
606 CVE-2005-2701 version (mozilla, fixed 1.7.12) [since FEDORA-2005-927]
607 CVE-2005-2701 version (firefox, fixed 1.0.7) [since FEDORA-2005-926]
608 CVE-2005-2700 backport (httpd, fixed 2.0.55-dev) [since FEDORA-2005-849]
609 CVE-2005-2693 backport (cvs) [since FEDORA-2005-790]
610 CVE-2005-2672 backport (lm_sensors) [since FEDORA-2005-1053]
611 CVE-2005-2666 VULNERABLE (openssh) #162681
612 CVE-2005-2642 version (mutt, openbsd only)
613 CVE-2005-2641 VULNERABLE (pam_ldap) #166164
614 CVE-2005-2629 version (helixplayer, fixed 1.0.6) [since FEDORA-2005-940]
615 CVE-2005-2617 version (kernel, fixed 2.6.12.5) [since FEDORA-2005-820]
616 CVE-2005-2602 ignore (thunderbird) probably
617 CVE-2005-2602 ignore (firefox) https://bugzilla.mozilla.org/show_bug.cgi?id=237085
618 CVE-2005-2558 version (mysql, fixed 4.1.13) [since FEDORA-2005-974]
619 CVE-2005-2558 ignore (mysql) not an issue
620 CVE-2005-2555 version (kernel, fixed 2.6.12.6pre) [since FEDORA-2005-949] was backport since FEDORA-2005-820
621 CVE-2005-2553 version (kernel, not 2.6)
622 CVE-2005-2550 backport (evolution) [since FEDORA-2005-743]
623 CVE-2005-2549 backport (evolution) [since FEDORA-2005-743]
624 CVE-2005-2548 version (kernel, fixed 2.6.9) only affected 2.6.8
625 CVE-2005-2547 version (bluez-pin, fixed 2.19) not before 2.16
626 CVE-2005-2541 ignore (tar) is documented behaviour
627 CVE-2005-2500 version (kernel, fixed 2.6.13) <2.6.13 was not vulnerable either
628 CVE-2005-2499 backport (slocate) [since FEDORA-2005-770]
629 CVE-2005-2498 version (php, fixed 1.4.0) [since FEDORA-2005-810]
630 CVE-2005-2496 backport (ntp, fixed 4.2.0b) ...0a-20040617-ntpd_guid.patch
631 CVE-2005-2495 backport (xorg-x11) [since FEDORA-2005-894]
632 CVE-2005-2494 version (kdebase, fixed after 3.4.2) #166997 [since FEDORA-2005-1152]
633 CVE-2005-2492 version (kernel, fixed 2.6.13.1) [since FEDORA-2005-949] was backport since FEDORA-2005-906
634 CVE-2005-2491 ignore (python, fc4 python does not contain pcre)
635 CVE-2005-2491 ignore (php, pcre uses system pcre)
636 CVE-2005-2491 ignore (httpd, pcre uses system pcre)
637 CVE-2005-2491 backport (pcre, fixed 6.2) [since FEDORA-2005-803]
638 CVE-2005-2490 version (kernel, fixed 2.6.13.1) [since FEDORA-2005-949] was backport since FEDORA-2005-906
639 CVE-2005-2475 VULNERABLE (unzip) #164928
640 CVE-2005-2471 version (netpbm, 10.31 at least) [since FEDORA-2005-000**] was backport since FEDORA-2005-728
641 CVE-2005-2459 ignore (kernel, fixed 2.6.12.5) dropped as code path not possible
642 CVE-2005-2458 version (kernel, fixed 2.6.12.5) [since FEDORA-2005-820]
643 CVE-2005-2457 ignore (kernel, fixed 2.6.12.5) this is just a bug
644 CVE-2005-2456 version (kernel, fixed 2.6.12.5) [since FEDORA-2005-820]
645 CVE-2005-2452 version (libtiff, fixed 3.7.0)
646 CVE-2005-2448 version (kdenetwork, fixed 3.4.2) [since FEDORA-2005-670] was backport since FEDORA-2005-624
647 CVE-2005-2414 ignore (mozilla) not being fixed upstream, just a crash
648 CVE-2005-2410 version (NetworkManager, fixed 5.0) [since FEDORA-2005-1027] was backport since FEDORA-2005-680
649 CVE-2005-2395 ignore (firefox) https://bugzilla.mozilla.org/show_bug.cgi?id=281851
650 CVE-2005-2370 version (kdenetwork, fixed 3.4.2) [since FEDORA-2005-670] was backport since FEDORA-2005-624
651 CVE-2005-2370 version (gaim, fixed 1.5.0) [since FEDORA-2005-751]
652 CVE-2005-2369 version (kdenetwork, fixed 3.4.2) [since FEDORA-2005-670] was backport since FEDORA-2005-624
653 CVE-2005-2368 version (vim, fixed 6.3.086 at least) [since FEDORA-2005-737]
654 CVE-2005-2367 version (ethereal, fixed 0.10.12) [since FEDORA-2005-655]
655 CVE-2005-2366 version (ethereal, fixed 0.10.12) [since FEDORA-2005-655]
656 CVE-2005-2365 version (ethereal, fixed 0.10.12) [since FEDORA-2005-655]
657 CVE-2005-2364 version (ethereal, fixed 0.10.12) [since FEDORA-2005-655]
658 CVE-2005-2363 version (ethereal, fixed 0.10.12) [since FEDORA-2005-655]
659 CVE-2005-2362 version (ethereal, fixed 0.10.12) [since FEDORA-2005-655]
660 CVE-2005-2361 version (ethereal, fixed 0.10.12) [since FEDORA-2005-655]
661 CVE-2005-2360 version (ethereal, fixed 0.10.12) [since FEDORA-2005-655]
662 CVE-2005-2353 ignore (thunderbird) debug mode only
663 CVE-2005-2337 version (ruby, fixed 1.8.3) [since FEDORA-2005-936]
664 CVE-2005-2335 version (fetchmail, fixed 6.2.5.2) [since FEDORA-2005-1108] was backport since FEDORA-2005-613
665 CVE-2005-2270 version (thunderbird, fixed 1.0.5) [since FEDORA-2005-606]
666 CVE-2005-2270 version (mozilla, fixed 1.7.9) [since FEDORA-2005-619]
667 CVE-2005-2270 version (firefox, fixed 1.0.5) [since FEDORA-2005-605]
668 CVE-2005-2269 version (thunderbird, fixed 1.0.5) [since FEDORA-2005-606]
669 CVE-2005-2269 version (mozilla, fixed 1.7.9) [since FEDORA-2005-619]
670 CVE-2005-2269 version (firefox, fixed 1.0.5) [since FEDORA-2005-605]
671 CVE-2005-2268 version (mozilla, fixed 1.7.9) [since FEDORA-2005-619]
672 CVE-2005-2268 version (firefox, fixed 1.0.5) [since FEDORA-2005-605]
673 CVE-2005-2267 version (mozilla, fixed 1.7.9) [since FEDORA-2005-619]
674 CVE-2005-2267 version (firefox, fixed 1.0.5) [since FEDORA-2005-605]
675 CVE-2005-2266 version (thunderbird, fixed 1.0.5) [since FEDORA-2005-606]
676 CVE-2005-2266 version (mozilla, fixed 1.7.9) [since FEDORA-2005-619]
677 CVE-2005-2266 version (firefox, fixed 1.0.5) [since FEDORA-2005-605]
678 CVE-2005-2265 version (thunderbird, fixed 1.0.5) [since FEDORA-2005-606]
679 CVE-2005-2265 version (mozilla, fixed 1.7.9) [si [since FEDORA-2005-619]
680 CVE-2005-2265 version (firefox, fixed 1.0.5) [since FEDORA-2005]
681 CVE-2005-2264 version (firefox, fixed 1.0.5) [since FEDORA-2005-605]
682 CVE-2005-2263 version (mozilla, fixed 1.7.9) [since FEDORA-2005-619]
683 CVE-2005-2263 version (firefox, fixed 1.0.5) [since FEDORA-2005-605]
684 CVE-2005-2262 version (firefox, fixed 1.0.5) [since FEDORA-2005-605]
685 CVE-2005-2261 version (thunderbird, fixed 1.0.5) [since FEDORA-2005-606]
686 CVE-2005-2261 version (mozilla, fixed 1.7.9) [since FEDORA-2005-619]
687 CVE-2005-2261 version (firefox, fixed 1.0.5) [since FEDORA-2005-605]
688 CVE-2005-2260 version (mozilla, fixed 1.7.9) [since FEDORA-2005-619]
689 CVE-2005-2260 version (firefox, fixed 1.0.5) [since FEDORA-2005-605]
690 CVE-2005-2177 version (net-snmp, fixed 5.2.1.2) [since FEDORA-2005-561]
691 CVE-2005-2114 version (mozilla, fixed 1.7.9) [since FEDORA-2005-619]
692 CVE-2005-2114 version (firefox, fixed 1.0.5) [since FEDORA-2005-605]
693 CVE-2005-2104 version (sysreport, fixed 1.4.1-5) [since FEDORA-2005-1071]
694 CVE-2005-2103 version (gaim, fixed 1.5.0) [since FEDORA-2005-751]
695 CVE-2005-2102 version (gaim, fixed 1.5.0) [since FEDORA-2005-751]
696 CVE-2005-2101 version (kdeedu, fixed after 3.4.2) [since FEDORA-2005-1158] was backport since FEDORA-2005-744
697 CVE-2005-2100 version (kernel, not upstream) only RHEL4
698 CVE-2005-2099 version (kernel, fixed 2.6.12.5) [since FEDORA-2005-820]
699 CVE-2005-2098 version (kernel, fixed 2.6.12.5) [since FEDORA-2005-820]
700 CVE-2005-2097 version (xpdf, fixed 3.0.1) [since FEDORA-2005-755] was backport since FEDORA-2005-729
701 CVE-2005-2097 backport (cups) [since FEDORA-2005-732]
702 CVE-2005-2096 backport (zlib) [since FEDORA-2005-523]
703 CVE-2005-2096 backport (rpm) [since FEDORA-2005-565]
704 CVE-2005-2095 version (squirrelmail, fixed 1.4.5) since [FEDORA-2005-780]
705 CVE-2005-2088 backport (httpd) [since FEDORA-2005-639]
706 CVE-2005-2069 backport (openldap) [since FEDORA-2005-992]
707 CVE-2005-2069 VULNERABLE (nss_ldap) http://bugzilla.padl.com/attachment.cgi?id=10&action=view
708 CVE-2005-2023 version (gnupg, fixed 1.9.15)
709 CVE-2005-1993 backport (sudo, fixed 1.6.8p9) [since FEDORA-2005-472]
710 CVE-2005-1992 version (ruby, fixed 1.8.3 at least) [since FEDORA-2005-936] was backport since FEDORA-2005-475
711 CVE-2005-1937 version (mozilla, fixed 1.7.9) [since FEDORA-2005-619]
712 CVE-2005-1937 version (firefox, fixed 1.0.5) [since FEDORA-2005-605]
713 CVE-2005-1934 version (gaim, fixed 1.3.1) [since FEDORA-2005-411]
714 CVE-2005-1921 version (php, fixed xml_rpm 1.3.1) [since FEDORA-2005-518]
715 CVE-2005-1920 version (kdelibs, fixed 3.4.1) [since FEDORA-2005-437]
716 CVE-2005-1918 version (tar)
717 CVE-2005-1913 version (kernel, fixed 2.6.12.2) [since FEDORA-2005-510]
718 CVE-2005-1852 version (kdenetwork, fixed 3.4.2) [since FEDORA-2005-670] was backport since FEDORA-2005-624
719 CVE-2005-1849 backport (zlib, fixed 1.2.3) [since FEDORA-2005-626]
720 CVE-2005-1831 ignore (sudo) unsubstantiated report
721 CVE-2005-1769 version (squirrelmail, fixed 1.4.5) since [FEDORA-2005-780]
722 CVE-2005-1768 version (kernel, fixed 2.6.6)
723 CVE-2005-1767 version (kernel, fixed 2.6.7)
724 CVE-2005-1766 version (HelixPlayer, fixed 1.0.5) [since FEDORA-2005-483]
725 CVE-2005-1765 version (kernel, fixed 2.6.12) [since FEDORA-2005-510]
726 CVE-2005-1764 version (kernel, fixed 2.6.12) [since FEDORA-2005-510]
727 CVE-2005-1763 version (kernel, fixed 2.6.12) [since FEDORA-2005-510]
728 CVE-2005-1762 version (kernel, fixed 2.6.12) [since FEDORA-2005-510]
729 CVE-2005-1761 version (kernel, fixed 2.6.12.2) [since FEDORA-2005-510]
730 CVE-2005-1760 VULNERABLE (sysreport)
731 CVE-2005-1759 ignore (php) dead code path
732 CVE-2005-1759 ignore (openldap, fixed shtool 2.0.2) flawed code path not used
733 CVE-2005-1751 ignore (openldap, fixed shtool 2.0.2) flawed code path not used
734 CVE-2005-1751 ignore (ncpfs) part of shtool in ncpfs is not vulnerable
735 CVE-2005-1751 VULNERABLE (nmap, fixed shtool 2.0.2) #158996
736 CVE-2005-1740 backport (net-snmp, not fixed)
737 CVE-2005-1739 backport (ImageMagick, fixed 6.2.2.3) [since re0526.1]
738 CVE-2005-1705 backport (gdb) [since FEDORA-2005-1033]
739 CVE-2005-1704 backport (gdb) [since FEDORA-2005-1033]
740 CVE-2005-1704 backport (binutils) ...eadelf-overflows.patch [since FEDORA-2005-498]
741 CVE-2005-1704 ** elfutils #159891
742 CVE-2005-1689 backport (krb5) [since FEDORA-2005-553]
743 CVE-2005-1686 ignore (gedit, not a vulnerability)
744 CVE-2005-1636 version (mysql, fixed 4.1.12) [since FEDORA-2005-557]
745 CVE-2005-1589 version (kernel, fixed 2.6.11.10) [since FEDORA-2005-510] was backport...2-rc4-git5 since re0522.0
746 CVE-2005-1571 version (php, fixed shtool 2.0.2) [since FEDORA-2005-518]
747 CVE-2005-1544 version (libtiff, fixed 3.7.1 at least)
748 CVE-2005-1532 version (thunderbird) [since FEDORA-2005-606]
749 CVE-2005-1532 version (mozilla, fixed 1.7.8) [since re0522.0]
750 CVE-2005-1532 version (firefox, fixed 1.0.4) [since re0522.0]
751 CVE-2005-1531 version (mozilla, fixed 1.7.8) [since re0522.0]
752 CVE-2005-1531 version (firefox, fixed 1.0.4) [since re0522.0]
753 CVE-2005-1519 version (squid, fixed 2.5.STABLE10) [since FEDORA-2005-913] was backport since GA (re0522.0)
754 CVE-2005-1470 version (ethereal, fixed 0.10.11)
755 CVE-2005-1469 version (ethereal, fixed 0.10.11)
756 CVE-2005-1468 version (ethereal, fixed 0.10.11)
757 CVE-2005-1467 version (ethereal, fixed 0.10.11)
758 CVE-2005-1466 version (ethereal, fixed 0.10.11)
759 CVE-2005-1465 version (ethereal, fixed 0.10.11)
760 CVE-2005-1464 version (ethereal, fixed 0.10.11)
761 CVE-2005-1463 version (ethereal, fixed 0.10.11)
762 CVE-2005-1462 version (ethereal, fixed 0.10.11)
763 CVE-2005-1461 version (ethereal, fixed 0.10.11)
764 CVE-2005-1460 version (ethereal, fixed 0.10.11)
765 CVE-2005-1459 version (ethereal, fixed 0.10.11)
766 CVE-2005-1458 version (ethereal, fixed 0.10.11)
767 CVE-2005-1457 version (ethereal, fixed 0.10.11)
768 CVE-2005-1456 version (ethereal, fixed 0.10.11)
769 CVE-2005-1455 version (freeradius, fixed 1.0.3) [since FEDORA-2005-602]
770 CVE-2005-1454 version (freeradius, fixed 1.0.3) [since FEDORA-2005-602]
771 CVE-2005-1431 version (gnutls, fixed 1.0.25)
772 CVE-2005-1410 version (postgresql, fixed 8.0.2)
773 CVE-2005-1409 version (postgresql, fixed 8.0.1)
774 CVE-2005-1369 version (kernel, fixed 2.6.12) [since FEDORA-2005-510] was backport in patch-2.6.12-rc3
775 CVE-2005-1368 version (kernel, fixed 2.6.12) [since FEDORA-2005-510] was backport in patch-2.6.12-rc3
776 CVE-2005-1345 version (squid, fixed 2.5.STABLE10) [since FEDORA-2005-913] was backport since GA
777 CVE-2005-1344 ignore (httpd) not a vulnerability
778 CVE-2005-1281 version (ethereal, fixed 0.10.11)
779 CVE-2005-1280 backport (tcpdump, not fixed in 3.8.3) in srpm
780 CVE-2005-1279 backport (tcpdump, not fixed in 3.8.3) in srpm
781 CVE-2005-1278 backport (tcpdump, not fixed in 3.8.3) in srpm
782 CVE-2005-1277 ignore (dupe)
783 CVE-2005-1275 version (ImageMagick, fixed 6.2.2)
784 CVE-2005-1269 version (gaim, fixed 1.3.1) [since FEDORA-2005-411]
785 CVE-2005-1268 backport (httpd) [since FEDORA-2005-639]
786 CVE-2005-1267 backport (tcpdump) [since FEDORA-2005-407]
787 CVE-2005-1266 version (spamassassin, fixed 3.0.4) [since FEDORA-2005-428]
788 CVE-2005-1265 version (kernel, fixed 2.6.12-rc5) [since FEDORA-2005-510] was backport since GA
789 CVE-2005-1264 version (kernel, fixed 2.6.11.10) [since FEDORA-2005-510] was backport since GA
790 CVE-2005-1263 version (kernel) [since FEDORA-2005-510] was patch-2.6.12-rc4-git5 since re0522.0
791 CVE-2005-1262 version (gaim, fixed 1.3.0) [since re0522.0]
792 CVE-2005-1261 version (gaim, fixed 1.3.0) [since re0522.0]
793 CVE-2005-1260 backport (bzip2) in srpm [since re0522.0]
794 CVE-2005-1229 backport (cpio) from srpm [since re0522.0]
795 CVE-2005-1228 backport (gzip) from srpm
796 CVE-2005-1194 backport (nasm) from srpm
797 CVE-2005-1184 ignore (kernel) expected to not be an issue
798 CVE-2005-1175 backport (krb5) [since FEDORA-2005-553]
799 CVE-2005-1174 backport (krb5) [since FEDORA-2005-553]
800 CVE-2005-1160 version (thunderbird) [since FEDORA-2005-606]
801 CVE-2005-1160 version (firefox)
802 CVE-2005-1160 version (mozilla)
803 CVE-2005-1159 version (thunderbird) [since FEDORA-2005-606]
804 CVE-2005-1159 version (firefox)
805 CVE-2005-1159 version (mozilla)
806 CVE-2005-1158 version (firefox, fixed 1.0.3)
807 CVE-2005-1157 version (firefox)
808 CVE-2005-1157 version (mozilla)
809 CVE-2005-1156 version (firefox)
810 CVE-2005-1156 version (mozilla)
811 CVE-2005-1155 version (firefox)
812 CVE-2005-1155 version (mozilla)
813 CVE-2005-1154 version (firefox)
814 CVE-2005-1154 version (mozilla)
815 CVE-2005-1153 version (firefox)
816 CVE-2005-1153 version (mozilla)
817 CVE-2005-1111 backport (cpio) from srpm
818 CVE-2005-1065 version (tetex, not upstream)
819 CVE-2005-1061 version (logwatch, in 4.3.2 at least)
820 CVE-2005-1046 version (kdelibs, fixed after 3.4.0) [since FEDORA-2005-437] was backport....delibs-kimgio-fixed.diff
821 CVE-2005-1043 version (php, fixed 4.3.11)
822 CVE-2005-1042 version (php, fixed 4.3.11)
823 CVE-2005-1041 version (kernel, fixed 2.6.12) was backport in patch-2.6.12-rc3
824 CVE-2005-1039 ignore (coreutils) not fixed upstream, not a real issue
825 CVE-2005-1038 backport (cron) from srpm
826 CVE-2005-0990 backport (sharutils) from srpm
827 CVE-2005-0989 version (thunderbird) [since FEDORA-2005-606]
828 CVE-2005-0989 version (mozilla, fixed 1.7.7)
829 CVE-2005-0989 version (firefox, fixed 1.0.3)
830 CVE-2005-0988 backport (gzip) from srpm
831 CVE-2005-0977 version (kernel, fixed 2.6.11)
832 CVE-2005-0967 version (gaim, fixed 1.2.1)
833 CVE-2005-0966 version (gaim, fixed 1.2.1)
834 CVE-2005-0965 version (gaim, fixed 1.2.1)
835 CVE-2005-0953 backport (bzip2) in srpm [since re0522.0]
836 CVE-2005-0941 version (ooffice, fixed 1.9 m95)
837 CVE-2005-0937 version (kernel, fixed 2.6.11)
838 CVE-2005-0916 version (kernel, fixed 2.6.12) was backport in patch-2.6.12-rc3
839 CVE-2005-0891 version (gtk2, fixed 2.2.4)
840 CVE-2005-0867 version (kernel, fixed 2.6.11)
841 CVE-2005-0866 version (cdrecord, DEBUG isn't enabled anyway)
842 CVE-2005-0839 version (kernel, fixed 2.6.11)
843 CVE-2005-0815 version (kernel, fixed 2.6.11.6) [since FEDORA-2005-510] was backport in patch-2.6.12-rc3
844 CVE-2005-0808 version (tomcat, fixed 5.x)
845 CVE-2005-0806 version (evolution, fixed 2.0.4)
846 CVE-2005-0799 version (mysql, not linux)
847 CVE-2005-0767 version (kernel, fixed 2.6.11)
848 CVE-2005-0766 version (ethereal, fixed after 0.10.9)
849 CVE-2005-0765 version (ethereal, fixed after 0.10.9)
850 CVE-2005-0763 version (mc, fixed 4.6.0)
851 CVE-2005-0762 version (ImageMagick, fixed 6.0)
852 CVE-2005-0761 version (ImageMagick, fixed 6.1.8)
853 CVE-2005-0760 version (ImageMagick, fixed 6.0)
854 CVE-2005-0759 version (ImageMagick, fixed 6.0)
855 CVE-2005-0758 version (gzip, fixed 1.3.5)
856 CVE-2005-0758 VULNERABLE (bzip2) by inspection #159819
857 CVE-2005-0757 version (kernel, not 2.6)
858 CVE-2005-0756 version (kernel, fixed 2.6.12) [since FEDORA-2005-510] was backport since GA
859 CVE-2005-0755 version (HelixPlayer, fixed 10.0.4)
860 CVE-2005-0754 version (kdewebdev, fixed after 3.4.0) [since FEDORA-2005-437] was backport since GA
861 CVE-2005-0753 backport (cvs, fixed 1.12.12) in cvs-1.11.17-CAN-2005-0753.patch
862 CVE-2005-0752 version (firefox, fixed 1.0.3)
863 CVE-2005-0750 version (kernel, fixed 2.6.11.6) was backport in patch-2.6.12-rc3
864 CVE-2005-0749 version (kernel, fixed 2.6.11.6) was backport in patch-2.6.12-rc3
865 CVE-2005-0739 version (ethereal, fixed after 0.10.9)
866 CVE-2005-0736 version (kernel, fixed 2.6.11)
867 CVE-2005-0718 version (squid, fixed 2.5.STABLE8)
868 CVE-2005-0711 version (mysql, fixed 4.1.11)
869 CVE-2005-0710 version (mysql, fixed 4.1.11)
870 CVE-2005-0709 version (mysql, fixed 4.1.11)
871 CVE-2005-0705 version (ethereal, fixed after 0.10.9)
872 CVE-2005-0704 version (ethereal, fixed after 0.10.9)
873 CVE-2005-0698 version (ethereal, fixed after 0.10.9)
874 CVE-2005-0664 version (libexif, fixed 0.6.12)
875 CVE-2005-0654 ignore (gimp, not fixed 2.2) upstream considers harmless
876 CVE-2005-0627 version (qt, fixed 3.3.4)
877 CVE-2005-0626 version (squid, fixed 2.5.STABLE10) [since FEDORA-2005-913] was backport since GA
878 CVE-2005-0611 version (HelixPlayer, fixed 1.0.3)
879 CVE-2005-0605 backport (xorg-x11) ...-fix-CAN-2005-0605.patch
880 CVE-2005-0605 ** openmotif
881 CVE-2005-0602 VULNERABLE (unzip, fixed 5.52) not in srpm
882 CVE-2005-0596 version (php, fixed 5.0)
883 CVE-2005-0593 version (firefox)
884 CVE-2005-0593 version (mozilla)
885 CVE-2005-0592 version (firefox)
886 CVE-2005-0592 version (mozilla)
887 CVE-2005-0591 version (firefox, fixed 1.0.1)
888 CVE-2005-0590 version (openswan, fixed 2.1.4)
889 CVE-2005-0590 version (firefox)
890 CVE-2005-0590 version (mozilla)
891 CVE-2005-0590 version (thunderbird)
892 CVE-2005-0589 version (firefox, fixed 1.0.1)
893 CVE-2005-0588 version (firefox)
894 CVE-2005-0588 version (mozilla)
895 CVE-2005-0587 version (firefox)
896 CVE-2005-0587 version (mozilla)
897 CVE-2005-0586 version (firefox)
898 CVE-2005-0586 version (mozilla)
899 CVE-2005-0585 version (firefox)
900 CVE-2005-0585 version (mozilla)
901 CVE-2005-0584 version (firefox)
902 CVE-2005-0584 version (mozilla)
903 CVE-2005-0578 version (firefox)
904 CVE-2005-0578 version (mozilla)
905 CVE-2005-0565 version (kernel, not 2.6)
906 CVE-2005-0532 version (kernel, fixed 2.6.11)
907 CVE-2005-0531 version (kernel, fixed 2.6.11)
908 CVE-2005-0530 version (kernel, fixed 2.6.11)
909 CVE-2005-0529 version (kernel, fixed 2.6.11)
910 CVE-2005-0527 version (mozilla, fixed 1.7.6)
911 CVE-2005-0527 version (firefox, fixed 1.0.1)
912 CVE-2005-0525 version (php, fixed 5.0.4)
913 CVE-2005-0524 version (php, fixed 5.0.4)
914 CVE-2005-0504 version (kernel, doesn't build in 2.6)
915 CVE-2005-0490 version (curl, fixed 7.13.1)
916 CVE-2005-0489 version (kernel, not 2.6)
917 CVE-2005-0488 backport (telnet) since ga
918 CVE-2005-0488 backport (krb5) [since FEDORA-2005-553]
919 CVE-2005-0473 version (gaim, fixed 1.1.3)
920 CVE-2005-0472 version (gaim, fixed 1.1.3)
921 CVE-2005-0469 version (krb5, fixed 1.4.1) [since FEDORA-2005-553] was backport since GA
922 CVE-2005-0469 backport (telnet) telnet-0.17-CAN-2005-468_469.patch
923 CVE-2005-0468 version (krb5, fixed 1.4.1) [since FEDORA-2005-553] was backport since GA
924 CVE-2005-0468 backport (telnet) telnet-0.17-CAN-2005-468_469.patch
925 CVE-2005-0455 version (HelixPlayer, fixed 1.0.3)
926 CVE-2005-0449 version (kernel, fixed 2.6.11)
927 CVE-2005-0448 version (perl, fixed 5.8.6) #173793
928 CVE-2005-0446 version (squid, fixed 2.5.STABLE9)
929 CVE-2005-0404 ignore (kde) won't fix http://bugs.kde.org/show_bug.cgi?id=96020
930 CVE-2005-0403 version (kernel, not upstream)
931 CVE-2005-0402 version (firefox, fixed 1.0.2)
932 CVE-2005-0401 version (mozilla, fixed 1.7.7)
933 CVE-2005-0401 version (firefox, fixed 1.0.2)
934 CVE-2005-0400 version (kernel, fixed in bk since 20050325, therefore 2.6.11.6) [since FEDORA-2005-510] was backport
935 CVE-2005-0399 version (mozilla)
936 CVE-2005-0399 verison (firefox)
937 CVE-2005-0399 version (thunderbird)
938 CVE-2005-0398 version (ipsec-tools, fixed 0.5)
939 CVE-2005-0397 version (ImageMagick, fixed 6.0.2.5)
940 CVE-2005-0396 version (kdelibs, fixed 3.4.0)
941 CVE-2005-0384 version (kernel, fixed 2.6.11.4)
942 CVE-2005-0372 version (gftp, fixed in 2.0.18 at least by inspection)
943 CVE-2005-0365 version (kdelibs, not 3.4)
944 CVE-2005-0337 version (postfix, not 2.2)
945 CVE-2005-0255 version (thunderbird, fixed 1.0.2)
946 CVE-2005-0255 version (mozilla, fixed 1.7.6)
947 CVE-2005-0255 version (firefox, fixed 1.0.1)
948 CVE-2005-0247 version (postgresql, fixed after 8.0)
949 CVE-2005-0246 version (postgresql, fixed 8.0.1)
950 CVE-2005-0245 version (postgresql, fixed 8.0.1)
951 CVE-2005-0244 version (postgresql, fixed 8.0.1)
952 CVE-2005-0241 version (squid, fixed 2.5.STABLE8)
953 CVE-2005-0238 version (epiphany, fixed since mozilla 1.7.6)
954 CVE-2005-0237 version (kdelibs, fixed 3.4.0)
955 CVE-2005-0233 version (mozilla, fixed 1.7.6)
956 CVE-2005-0233 version (firefox, fixed 1.0.1)
957 CVE-2005-0232 version (mozilla, fixed 1.7.6)
958 CVE-2005-0232 version (firefox, fixed 1.0.1)
959 CVE-2005-0231 version (mozilla, fixed 1.7.6)
960 CVE-2005-0231 version (firefox, fixed 1.0.1)
961 CVE-2005-0230 version (thunderbird, fixed 1.0.2)
962 CVE-2005-0230 version (mozilla, fixed 1.7.6)
963 CVE-2005-0230 version (firefox, fixed 1.0.1)
964 CVE-2005-0227 version (postgresql, fixed 8.0.1)
965 CVE-2005-0215 version (mozilla)
966 CVE-2005-0211 version (squid, fixed 2.5.STABLE8)
967 CVE-2005-0210 version (kernel, fixed 2.6.11)
968 CVE-2005-0209 version (kernel, fixed 2.6.11)
969 CVE-2005-0208 version (gaim, fixed 1.1.4)
970 CVE-2005-0207 version (kernel, fixed 2.6.11)
971 CVE-2005-0206 version (xpdf, only bad patch for 2004-0888)
972 CVE-2005-0205 version (kdenetwork, not 3.3 onwards)
973 CVE-2005-0204 version (kernel, didn't affect upstream)
974 CVE-2005-0202 version (mailman, fixed 2.1.6) [since FEDORA-2006-534] was backport since GA
975 CVE-2005-0201 backport (dbus) [since FEDORA-2005-822]
976 CVE-2005-0194 version (squid, fixed 2.5.STABLE8)
977 CVE-2005-0180 version (kernel, fixed 2.6.11)
978 CVE-2005-0179 version (kernel, fixed 2.6.11)
979 CVE-2005-0178 version (kernel, fixed 2.6.11)
980 CVE-2005-0177 version (kernel, fixed 2.6.11)
981 CVE-2005-0176 version (kernel, only affected 2.6.9)
982 CVE-2005-0175 version (squid, fixed 2.5.STABLE8)
983 CVE-2005-0174 version (squid, fixed 2.5.STABLE8)
984 CVE-2005-0173 version (squid, fixed 2.5.STABLE8)
985 CVE-2005-0162 version (openswan, fixed 2.3.0)
986 CVE-2005-0156 backport (perl, not 5.8.6) perl-5.8.5-CAN-2005-0155+0156.patch
987 CVE-2005-0155 backport (perl, not 5.8.6) perl-5.8.5-CAN-2005-0155+0156.patch
988 CVE-2005-0152 version (squirrelmail, not 1.4)
989 CVE-2005-0150 version (firefox, fixed 1.0)
990 CVE-2005-0149 version (mozilla)
991 CVE-2005-0149 version (firefox)
992 CVE-2005-0147 version (mozilla)
993 CVE-2005-0147 version (firefox)
994 CVE-2005-0146 version (mozilla)
995 CVE-2005-0146 version (firefox)
996 CVE-2005-0145 version (firefox, fixed 1.0)
997 CVE-2005-0144 version (mozilla)
998 CVE-2005-0144 version (firefox)
999 CVE-2005-0143 version (mozilla)
1000 CVE-2005-0143 version (firefox)
1001 CVE-2005-0142 version (mozilla)
1002 CVE-2005-0142 version (firefox)
1003 CVE-2005-0142 version (thunderbird)
1004 CVE-2005-0141 version (mozilla)
1005 CVE-2005-0141 version (firefox)
1006 CVE-2005-0137 version (kernel, not 2.6)
1007 CVE-2005-0136 version (kernel, fixed 2.6.11)
1008 CVE-2005-0135 version (kernel, fixed 2.6.11)
1009 CVE-2005-0124 version (kernel, fixed 2.6.11)
1010 CVE-2005-0109 backport (openssl097a) [since FEDORA-2005-986]
1011 CVE-2005-0109 backport (openssl) [since FEDORA-2005-986]
1012 CVE-2005-0104 version (squirrelmail, fixed 1.4.4)
1013 CVE-2005-0103 version (squirrelmail, fixed 1.4.4)
1014 CVE-2005-0102 version (evolution-data-server, fixed 1.2.2 at least)
1015 CVE-2005-0100 version (emacs, fixed 21.4 at least)
1016 CVE-2005-0097 version (squid, fixed 2.5.STABLE8)
1017 CVE-2005-0096 version (squid, fixed 2.5.STABLE8)
1018 CVE-2005-0095 version (squid, fixed 2.5.STABLE8)
1019 CVE-2005-0094 version (squid, fixed 2.5.STABLE8)
1020 CVE-2005-0092 version (kernel, not affected)
1021 CVE-2005-0091 version (kernel, not affected)
1022 CVE-2005-0090 version (kernel, not affected)
1023 CVE-2005-0089 version (python, fixed 2.4.1 at least)
1024 CVE-2005-0088 version (mod_python, fixed after 2.7.8)
1025 CVE-2005-0087 version (alsa-lib, fixed 1.0.9) [since FEDORA-2005-470] was backport alsa-lib-mixer.patch since GA
1026 CVE-2005-0086 version (less, didn't affect upstream)
1027 CVE-2005-0085 version (htdig, fixed 3.1.6-r7)
1028 CVE-2005-0084 version (ethereal, fixed 0.10.9)
1029 CVE-2005-0080 version (mailman, not upstream)
1030 CVE-2005-0078 version (kde, fixed 3.0.5)
1031 CVE-2005-0077 version (perl-DBI, fixed in 1.48 at least)
1032 CVE-2005-0075 version (squirrelmail, fixed 1.4.4)
1033 CVE-2005-0069 backport (vim) in vim-6.3-tmpfile.patch
1034 CVE-2005-0064 version (xpdf, fixed 3.0.1) [since FEDORA-2005-775] was backport since GA
1035 CVE-2005-0064 version (tetex, fixed 3.0)
1036 CVE-2005-0064 version (kpdf, not 3.4)
1037 CVE-2005-0064 backport (cups) patch in SRPM
1038 CVE-2005-0039 ignore (kernel) don't do this says the rfc
1039 CVE-2005-0034 version (bind, fixed after 9.3.0)
1040 CVE-2005-0033 version (bind, not 9)
1041 CVE-2005-0023 ignore (libvte) not a security risk
1042 CVE-2005-0014 backport (ncpfs) ncpfs-2.2.4-overflow2.patch [since re0522.0]
1043 CVE-2005-0013 backport (ncpfs) in srpm
1044 CVE-2005-0011 version (kdeedu, not 3.4)
1045 CVE-2005-0010 version (ethereal, fixed 0.10.9)
1046 CVE-2005-0009 version (ethereal, fixed 0.10.9)
1047 CVE-2005-0008 version (ethereal, fixed 0.10.9)
1048 CVE-2005-0007 version (ethereal, fixed 0.10.9)
1049 CVE-2005-0006 version (ethereal, fixed 0.10.9)
1050 CVE-2005-0005 version (ImageMagick, fixed after 6.1.7)
1051 CVE-2005-0004 version (mysql, fixed 4.1.10)
1052 CVE-2005-0003 version (kernel, fixed 2.6.10)
1053 CVE-2005-0001 version (kernel, fixed 2.6.10)
1054 CVE-2004-2660 version (kernel, fixed 2.6.10)
1055 CVE-2004-2657 ignore (firefox) windows only
1056 CVE-2004-2655 version (xscreensaver)
1057 CVE-2004-2654 version (squid, fixed 2.6STABLE6)
1058 CVE-2004-2607 version (kernel, fixed 2.6.5)
1059 CVE-2004-2589 version (gaim, fixed 0.82)
1060 CVE-2004-2546 version (samba, fixed 3.0.6)
1061 CVE-2004-2541 blocked (cscope) by FORTIFY_SOURCE
1062 CVE-2004-2536 version (kernel, fixed 2.6.7)
1063 CVE-2004-2531 version (gnutls, fixed 1.0.17)
1064 CVE-2004-2502 version (iiimf, fixed 11.4-46.1)
1065 CVE-2004-2480 ignore (squid) #166523, not reproducable
1066 CVE-2004-2479 version (squid, fixed 2.5.STABLE8)
1067 CVE-2004-2396 version (passwd, fixed 0.69) verified in source
1068 CVE-2004-2395 version (passwd, fixed 0.69) verified in source
1069 CVE-2004-2394 version (passwd, fixed 0.69) verified in source
1070 CVE-2004-2392 version (libuser, fixed 0.51.10)
1071 CVE-2004-2343 ignore (httpd) not a security issue
1072 CVE-2004-2302 version (kernel, fixed 2.6.10)
1073 CVE-2004-2259 version (vsftpd, fixed 1.2.2)
1074 CVE-2004-2228 version (firefox, fixed 1.0)
1075 CVE-2004-2227 version (firefox, fixed 1.0)
1076 CVE-2004-2225 version (firefox, fixed 0.10.1)
1077 CVE-2004-2154 version (cups, fixed 1.2.21rc1)
1078 CVE-2004-2149 version (mysql, fixed 4.1.5)
1079 CVE-2004-2136 ignore (dm-crypt) design
1080 CVE-2004-2135 ignore (kernel) design
1081 CVE-2004-2093 ignore (rsync, not security issue)
1082 CVE-2004-2069 version (openssh, not 4)
1083 CVE-2004-2014 version (wget, fixed 1.10.1) [since FEDORA-2005-882]
1084 CVE-2004-2013 ignore (kernel, not 2.6, also not exploitable)
1085 CVE-2004-2004 ignore (openssh) SUSE LiveCD configuration only
1086 CVE-2004-1880 version (openldap, fixed 2.2.21)
1087 CVE-2004-1834 version (httpd, fixed 2.0.50)
1088 CVE-2004-1773 backport (sharutils) from srpm
1089 CVE-2004-1772 backport (sharutils) from srpm
1090 CVE-2004-1761 version (ethereal, fixed 0.10.3)
1091 CVE-2004-1689 version (sudo, fixed 1.6.8p1)
1092 CVE-2004-1653 ignore (openssh)
1093 CVE-2004-1639 version (mozilla)
1094 CVE-2004-1639 version (firefox)
1095 CVE-2004-1617 ignore (lynx) not able to verify flaw
1096 CVE-2004-1614 version (mozilla, fixed 1.7.5)
1097 CVE-2004-1613 version (mozilla, fixed 1.7.5)
1098 CVE-2004-1488 version (wget, fixed 1.10.1) [since FEDORA-2005-882]
1099 CVE-2004-1471 version (cvs, fixed 1.12.9)
1100 CVE-2004-1453 version (glibc, fixed 2.3.5)
1101 CVE-2004-1452 version (tomcat, fixed 5.0.27-r3)
1102 CVE-2004-1451 version (mozilla)
1103 CVE-2004-1451 version (firefox)
1104 CVE-2004-1451 version (thunderbird)
1105 CVE-2004-1450 version (mozilla)
1106 CVE-2004-1450 version (firefox)
1107 CVE-2004-1450 version (thunderbird)
1108 CVE-2004-1449 version (mozilla)
1109 CVE-2004-1449 version (firefox)
1110 CVE-2004-1449 verison (thunderbird)
1111 CVE-2004-1392 version (php, fixed 5.0.4)
1112 CVE-2004-1382 version (glibc, not 2.3.5)
1113 CVE-2004-1381 version (firefox)
1114 CVE-2004-1381 version (mozilla)
1115 CVE-2004-1380 version (firefox)
1116 CVE-2004-1380 version (mozilla)
1117 CVE-2004-1377 backport (a2ps, fixed 4.13?) patch included in srpm
1118 CVE-2004-1337 version (kernel, fixed 2.6.11)
1119 CVE-2004-1336 version (tetex, fixed 3.0) at least, checked source
1120 CVE-2004-1335 version (kernel, fixed 2.6.10)
1121 CVE-2004-1334 version (kernel, fixed 2.6.10)
1122 CVE-2004-1333 version (kernel, fixed 2.6.10)
1123 CVE-2004-1316 version (thunderbird, fixed 0.9)
1124 CVE-2004-1316 version (mozilla, fixed 1.7.5)
1125 CVE-2004-1308 version (libtiff, fixed in 3.7.1 at least)
1126 CVE-2004-1307 version (libtiff, was already fixed with 0886)
1127 CVE-2004-1304 version (file, fixed 4.12)
1128 CVE-2004-1296 backport (groff) from srpm
1129 CVE-2004-1287 backport (nasm) from srpm
1130 CVE-2004-1270 version (cups, fixed 1.1.23)
1131 CVE-2004-1269 version (cups, fixed 1.1.23)
1132 CVE-2004-1268 version (cups, fixed 1.1.23)
1133 CVE-2004-1267 version (cups, fixed 1.1.23)
1134 CVE-2004-1237 version (kernel, not upstream)
1135 CVE-2004-1235 version (kernel, fixed 2.6.11)
1136 CVE-2004-1234 version (kernel, not 2.6)
1137 CVE-2004-1224 version (mtr, fixed after 0.65)
1138 CVE-2004-1200 ignore (firefox, mozilla) not a security issue
1139 CVE-2004-1191 version (kernel, fixed 2.6.9)
1140 CVE-2004-1190 version (kernel, fixed 2.6.10)
1141 CVE-2004-1189 version (krb5, fixed 1.4)
1142 CVE-2004-1186 backport (enscript) in srpm
1143 CVE-2004-1185 backport (enscript) in srpm
1144 CVE-2004-1184 backport (enscript) in srpm
1145 CVE-2004-1183 backport (libtiff) libtiff-3.5.7-dump.patch
1146 CVE-2004-1180 version (rwho, fixed 0.17)
1147 CVE-2004-1177 version (mailman, fixed 2.1.6) [since FEDORA-2006-534] was backport since GA
1148 CVE-2004-1176 version (mc, fixed 4.6.0)
1149 CVE-2004-1175 version (mc, fixed 4.6.0)
1150 CVE-2004-1174 version (mc, fixed 4.6.0)
1151 CVE-2004-1171 version (kdelibs, not 3.4)
1152 CVE-2004-1170 backport (a2ps) fixed 4.13b-40 from srpm
1153 CVE-2004-1165 version (kdelibs, not 3.4)
1154 CVE-2004-1158 version (kdelibs, not 3.4)
1155 CVE-2004-1156 version (Mozilla, firefox)
1156 CVE-2004-1154 version (samba, fixed 3.0.10)
1157 CVE-2004-1151 version (kernel, fixed 2.6.10)
1158 CVE-2004-1145 version (kde, not 3.4)
1159 CVE-2004-1144 version (kernel, not 2.6)
1160 CVE-2004-1143 version (mailman, fixed 2.1.5)
1161 CVE-2004-1142 version (ethereal, fixed 0.10.8)
1162 CVE-2004-1141 version (ethereal, fixed 0.10.8)
1163 CVE-2004-1140 version (ethereal, fixed 0.10.8)
1164 CVE-2004-1139 version (ethereal, fixed 0.10.8)
1165 CVE-2004-1138 version (vim, fixed 6.3)
1166 CVE-2004-1137 version (kernel, fixed 2.6.10)
1167 CVE-2004-1125 version (xpdf, fixed 3.0.1) [since FEDORA-2005-775] was backport since ga
1168 CVE-2004-1125 version (tetex, at least 3.0)
1169 CVE-2004-1125 version (kdegraphics, not 3.4)
1170 CVE-2004-1096 version (perl-Archive-Zip, fixed 1.14)
1171 CVE-2004-1093 version (mc, fixed 4.6.0)
1172 CVE-2004-1092 version (mc, fixed 4.6.0)
1173 CVE-2004-1091 version (mc, fixed 4.6.0)
1174 CVE-2004-1090 version (mc, fixed 4.6.0)
1175 CVE-2004-1079 backport (ncpfs) from srpm
1176 CVE-2004-1074 version (kernel, fixed 2.6.10)
1177 CVE-2004-1073 version (kernel, fixed 2.6.10)
1178 CVE-2004-1072 version (kernel, fixed 2.6.10)
1179 CVE-2004-1071 version (kernel, fixed 2.6.10)
1180 CVE-2004-1070 version (kernel, fixed 2.6.10)
1181 CVE-2004-1069 version (kernel, fixed 2.6.10)
1182 CVE-2004-1068 version (kernel, fixed 2.6.10)
1183 CVE-2004-1065 version (php, fixed after 5.0.2)
1184 CVE-2004-1064 version (php, fixed after 5.0.2)
1185 CVE-2004-1063 version (php, fixed after 5.0.2)
1186 CVE-2004-1060 version (kernel, all verifies sequence number)
1187 CVE-2004-1058 version (kernel, fixed 2.6.9)
1188 CVE-2004-1057 version (kernel, fixed 2.6.10)
1189 CVE-2004-1056 version (kernel, fixed 2.6.10)
1190 CVE-2004-1051 version (sudo, fixed 1.6.8p2)
1191 CVE-2004-1036 version (squirrelmail, fixed 1.4.4)
1192 CVE-2004-1026 backport (imlib) imlib-1.9.14-bounds.patch
1193 CVE-2004-1025 backport (imlib) imlib-1.9.14-bounds.patch
1194 CVE-2004-1020 version (php, fixed after 5.0.2)
1195 CVE-2004-1019 version (php, fixed after 5.0.2)
1196 CVE-2004-1018 version (php, fixed after 5.0.2)
1197 CVE-2004-1017 version (kernel, fixed 2.6.10)
1198 CVE-2004-1016 version (kernel, fixed 2.6.10)
1199 CVE-2004-1014 version (nfs-utils, fixed 1.0.7)
1200 CVE-2004-1009 version (mc, fixed 4.6.0)
1201 CVE-2004-1006 version (dhcp, not 3)
1202 CVE-2004-1005 version (mc, fixed 4.6.0)
1203 CVE-2004-1004 version (mc, fixed 4.6.0)
1204 CVE-2004-1002 ignore (ppp) not a security issue
1205 CVE-2004-0997 version (kernel, not 2.6)
1206 CVE-2004-0996 backport (cscope, not fixed in 15.5)
1207 CVE-2004-0990 VULNERABLE (gd)
1208 CVE-2004-0989 version (libxml2, fixed 2.6.15)
1209 CVE-2004-0986 version (iptables, fixed 1.2.12)
1210 CVE-2004-0983 version (ruby, fixed 1.8.2)
1211 CVE-2004-0981 version (ImageMagick, fixed 6.1.0)
1212 CVE-2004-0977 version (postgresql, fixed after 7.4.6)
1213 CVE-2004-0976 backport (perl) [since FEDORA-2005-1077]
1214 CVE-2004-0975 version (openssl, fixed 0.9.7f)
1215 CVE-2004-0975 backport (openssl097a, fixed 0.9.7f) from srpm
1216 CVE-2004-0974 version (netatalk, fixed 2.0.1 says netatalk ChangeLog)
1217 CVE-2004-0972 version (lvm2, fixed 2.2.01.8 at least)
1218 CVE-2004-0971 backport (krb5, see bug 136307) fixed by patch in SRPM
1219 CVE-2004-0970 version (gzip) gzip-1.3.5-openbsd-owl-tmp.patch
1220 CVE-2004-0969 version (groff, fixed 1.18.1.1)
1221 CVE-2004-0968 version (glibc, fixed in 2.3.5 at least)
1222 CVE-2004-0967 backport (ghostscript) srpm
1223 CVE-2004-0966 version (gettext, fixed in 0.14.3 at least)
1224 CVE-2004-0961 version (freeradius, fixed 1.0.1)
1225 CVE-2004-0960 version (freeradius, fixed 1.0.1)
1226 CVE-2004-0959 version (php, fixed 4.3.9)
1227 CVE-2004-0958 version (php, fixed 4.3.9)
1228 CVE-2004-0957 version (mysql, fixed 4.0.21)
1229 CVE-2004-0956 version (mysql, fixed 4.0.20)
1230 CVE-2004-0946 version (nfs-utils, fixed 1.0.6-r6)
1231 CVE-2004-0942 version (httpd, fixed 2.0.53)
1232 CVE-2004-0941 VULNERABLE (gd) seems wasn't fixed upstream #175414
1233 CVE-2004-0940 version (httpd, not 2.0)
1234 CVE-2004-0938 version (freeradius, fixed 1.0.1)
1235 CVE-2004-0930 version (samba, fixed 3.0.8)
1236 CVE-2004-0929 verison (libtiff, fixed 3.7.0)
1237 CVE-2004-0923 version (cups, fixed 1.2.22)
1238 CVE-2004-0918 version (squid, fixed 2.4.STABLE7)
1239 CVE-2004-0914 version (xorg-x11, fixed after 6.8.1)
1240 CVE-2004-0914 ** openmotif
1241 CVE-2004-0909 version (mozilla)
1242 CVE-2004-0909 version (thunderbird)
1243 CVE-2004-0909 version (firefox)
1244 CVE-2004-0908 version (mozilla, fixed 1.7.3) #133021
1245 CVE-2004-0907 version (mozilla)
1246 CVE-2004-0907 version (thunderbird)
1247 CVE-2004-0907 version (firefox)
1248 CVE-2004-0906 version (mozilla)
1249 CVE-2004-0906 version (thunderbird)
1250 CVE-2004-0906 version (firefox)
1251 CVE-2004-0905 version (mozilla, fixed 1.7.3) #133012
1252 CVE-2004-0904 version (mozilla, fixed 1.7.3) #133014
1253 CVE-2004-0903 version (mozilla, fixed 1.7.3) #133016
1254 CVE-2004-0902 version (mozilla, fixed 1.7.3) #133023
1255 CVE-2004-0891 version (gaim, fixed 1.0.2)
1256 CVE-2004-0889 version (xpdf, fixed 3.0.1) [since FEDORA-2005-775] was backport since ga
1257 CVE-2004-0888 version (xpdf, fixed 3.0.1) [since FEDORA-2005-775] was backport since ga
1258 CVE-2004-0888 version (tetex, fixed 3.0)
1259 CVE-2004-0888 version (kpdegraphics, not 3.4)
1260 CVE-2004-0888 backport (cups) patch in SRPM
1261 CVE-2004-0887 version (kernel, fixed 2.6.10)
1262 CVE-2004-0886 version (libtiff, fixed 3.7.1 at least)
1263 CVE-2004-0886 version (kdegraphics, fixed by Update on 20041109)
1264 CVE-2004-0885 version (httpd, fixed after 2.0.52)
1265 CVE-2004-0884 version (cyrus-sasl, fixed 2.1.20)
1266 CVE-2004-0883 version (kernel, fixed 2.6.11)
1267 CVE-2004-0883 version (kernel, fixed 2.6.11)
1268 CVE-2004-0882 version (samba, fixed 3.0.8)
1269 CVE-2004-0871 ignore (mozilla, unfixed upstream with no patch)
1270 CVE-2004-0870 ignore (kde) upstream won't fix
1271 CVE-2004-0867 version (firefox, after 0.9.2)
1272 CVE-2004-0837 version (mysql, fixed 4.0.21)
1273 CVE-2004-0836 version (mysql, fixed 4.0.21)
1274 CVE-2004-0835 version (mysql, fixed 4.1.2)
1275 CVE-2004-0832 version (squid, fixed 2.5.STABLE7)
1276 CVE-2004-0829 version (samba, fixed 2.2.11)
1277 CVE-2004-0827 version (ImageMagick, fixed 6.0.6.2)
1278 CVE-2004-0823 version (openldap, fixed after 2.1.19)
1279 CVE-2004-0817 version (imlib, fixed at least by 2.1.20)
1280 CVE-2004-0816 version (kernel, fixed 2.6.8)
1281 CVE-2004-0815 version (samba, fixed 3.0.2a)
1282 CVE-2004-0814 version (kernel, fixed 2.6.9)
1283 CVE-2004-0813 version (kernel, fixed 2.6.8)
1284 CVE-2004-0812 version (kernel, not 2.6)
1285 CVE-2004-0811 version (httpd, fixed 2.0.52)
1286 CVE-2004-0809 version (httpd, fixed 2.0.51)
1287 CVE-2004-0808 version (samba, fixed 3.0.7)
1288 CVE-2004-0807 version (samba, fixed 3.0.7)
1289 CVE-2004-0806 version (cdrtools, fixed 2.0.1)
1290 CVE-2004-0804 version (libtiff, fixed after 3.6.1)
1291 CVE-2004-0804 version (kdegraphics)
1292 CVE-2004-0803 version (libtiff, fixed after 3.6.1)
1293 CVE-2004-0803 version (kdegraphics)
1294 CVE-2004-0802 version (imlib, fixed 1.1.2)
1295 CVE-2004-0801 version (foomatic, fixed 3.0.2)
1296 CVE-2004-0797 version (zlib, fixed in 1.2.2.2 at least)
1297 CVE-2004-0797 version (zlib)
1298 CVE-2004-0796 version (spamassassin, fixed 2.64)
1299 CVE-2004-0792 version (rsync, fixed 2.6.3)
1300 CVE-2004-0791 version (kernel, fixed 2.6.9)
1301 CVE-2004-0790 version (kernel) doesn't affect linux 2.4, 2.6
1302 CVE-2004-0788 version (gtk2, fixed 2.6.7 at least by inspection)
1303 CVE-2004-0788 version (gdk-pixbuf, fixed 0.22)
1304 CVE-2004-0786 version (apr-util, fixed 2.0.51)
1305 CVE-2004-0785 version (gaim, fixed 0.82)
1306 CVE-2004-0784 version (gaim, fixed 0.82)
1307 CVE-2004-0783 version (gtk2, fixed 2.6.7 at least by inspection)
1308 CVE-2004-0783 version (gdk-pixbuf, fixed 0.22)
1309 CVE-2004-0782 version (gtk2, fixed 2.6.7 at least by inspection)
1310 CVE-2004-0782 version (gdk-pixbuf, fixed 0.22)
1311 CVE-2004-0779 version (mozilla)
1312 CVE-2004-0779 version (firefox)
1313 CVE-2004-0779 version (thunderbird)
1314 CVE-2004-0778 version (cvs, fixed 1.11.17)
1315 CVE-2004-0772 version (krb5, fixed after 1.2.8)
1316 CVE-2004-0771 backport (lha, changelog)
1317 CVE-2004-0769 backport (lha, changelog)
1318 CVE-2004-0768 version (libpng, fixed 1.2.6)
1319 CVE-2004-0765 version (mozilla, fixed 1.7) #234058
1320 CVE-2004-0764 version (mozilla, fixed 1.7) #244965
1321 CVE-2004-0763 version (mozilla, fixed 1.7.2) #253121
1322 CVE-2004-0762 version (mozilla, fixed 1.7) #162020
1323 CVE-2004-0761 version (mozilla, fixed 1.7) #240053
1324 CVE-2004-0760 version (mozilla, fixed 1.7.2) #250906
1325 CVE-2004-0759 version (mozilla, fixed 1.7) #241924
1326 CVE-2004-0758 version (mozilla, fixed 1.7.2)
1327 CVE-2004-0757 version (mozilla, fixed 1.7) #229374
1328 CVE-2004-0755 version (ruby, fixed 1.8.1)
1329 CVE-2004-0754 version (gaim, fixed 0.82)
1330 CVE-2004-0753 version (gtk2, fixed after 2.2.4)
1331 CVE-2004-0753 version (gdk-pixbuf, fixed 0.22)
1332 CVE-2004-0752 version (openoffice.org, fixed after 1.1.2)
1333 CVE-2004-0751 version (httpd, fixed 2.0.51)
1334 CVE-2004-0750 version (system-config-nfs, fixed 1.0.13)
1335 CVE-2004-0749 version (subversion, fixed 1.0.8)
1336 CVE-2004-0748 version (httpd, fixed 2.0.51)
1337 CVE-2004-0747 version (httpd, fixed 2.0.51)
1338 CVE-2004-0746 version (kde, fixed 3.3)
1339 CVE-2004-0745 backport (lha, changelog)
1340 CVE-2004-0722 version (mozilla, fixed 1.7) #236618
1341 CVE-2004-0721 version (kdelibs, fixed 3.3)
1342 CVE-2004-0718 version (mozilla, fixed 1.7) #246448
1343 CVE-2004-0700 version (httpd, not 2.0)
1344 CVE-2004-0694 backport (lha, changelog)
1345 CVE-2004-0693 version (qt, fixed 3.3.3)
1346 CVE-2004-0692 version (qt, fixed 3.3.3)
1347 CVE-2004-0691 version (qt, fixed 3.3.3)
1348 CVE-2004-0690 version (kdelibs, fixed after 3.2.3)
1349 CVE-2004-0689 version (kdelibs, fixed 3.3.0)
1350 CVE-2004-0688 version (openmotif)
1351 CVE-2004-0687 version (openmotif)
1352 CVE-2004-0686 version (samba, fixed 3.0.6)
1353 CVE-2004-0685 version (kernel, not 2.6)
1354 CVE-2004-0658 ignore (kernel) not a security issue
1355 CVE-2004-0648 version (mozilla)
1356 CVE-2004-0648 version (firefox)
1357 CVE-2004-0648 version (thunderbird)
1358 CVE-2004-0644 version (krb5, fixed after 1.3.4)
1359 CVE-2004-0643 version (krb5, fixed after 1.3.1)
1360 CVE-2004-0642 version (krb5, fixed after 1.3.4)
1361 CVE-2004-0639 version (squirrelmail, fixed after 1.2.10)
1362 CVE-2004-0635 version (ethereal, fixed 0.10.5)
1363 CVE-2004-0634 version (ethereal, fixed 0.10.5)
1364 CVE-2004-0633 version (ethereal, fixed 0.10.5)
1365 CVE-2004-0628 version (mysql, fixed 4.1.3)
1366 CVE-2004-0627 version (mysql, fixed 4.1.3)
1367 CVE-2004-0626 version (kernel, fixed 2.6.8)
1368 CVE-2004-0619 version (kernel, no driver)
1369 CVE-2004-0607 version (racoon, note RHSA-2004:308 has wrong text)
1370 CVE-2004-0603 backport (gzip) gzip-1.3.5-openbsd-owl-tmp.patch
1371 CVE-2004-0600 version (samba, fixed 3.0.6)
1372 CVE-2004-0599 version (mozilla, fixed 1.7.2)
1373 CVE-2004-0599 version (libpng10, fixed 1.0.16)
1374 CVE-2004-0599 version (libpng, fixed 1.2.6)
1375 CVE-2004-0598 version (libpng10, fixed 1.0.16)
1376 CVE-2004-0598 version (libpng, fixed 1.2.6)
1377 CVE-2004-0597 version (mozilla, fixed 1.7.2)
1378 CVE-2004-0597 version (libpng10, fixed 1.0.16)
1379 CVE-2004-0597 version (libpng, fixed 1.2.6)
1380 CVE-2004-0595 version (php, fixed 4.3.8)
1381 CVE-2004-0594 version (php, fixed 4.3.8)
1382 CVE-2004-0592 version (kernel, not upstream flaw)
1383 CVE-2004-0587 version (kernel, not upstream flaw)
1384 CVE-2004-0558 version (cups, fixed 1.1.21)
1385 CVE-2004-0557 version (sox, fixed after 12.17.4)
1386 CVE-2004-0554 version (kernel, fixed 2.6.7)
1387 CVE-2004-0548 ignore (aspell, not fixed 0.50.5) not a security issue
1388 CVE-2004-0547 version (postgresql, fixed 7.2.1)
1389 CVE-2004-0541 version (squid)
1390 CVE-2004-0535 version (kernel, fixed 2.6.6)
1391 CVE-2004-0527 version (konqueror, not 3+)
1392 CVE-2004-0523 version (krb5, fixed 1.3.4)
1393 CVE-2004-0521 version (squirrelmail, fixed 1.4.3a)
1394 CVE-2004-0520 version (squirrelmail, fixed 1.4.3a)
1395 CVE-2004-0519 version (squirrelmail, fixed 1.4.3a)
1396 CVE-2004-0507 version (ethereal, fixed 0.10.4)
1397 CVE-2004-0506 version (ethereal, fixed 0.10.4)
1398 CVE-2004-0505 version (ethereal, fixed 0.10.4)
1399 CVE-2004-0504 version (ethereal, fixed 0.10.4)
1400 CVE-2004-0500 version (gaim, fixed 0.82)
1401 CVE-2004-0497 version (kernel, fixed 2.6.8)
1402 CVE-2004-0496 version (kernel, fixed 2.6.8)
1403 CVE-2004-0495 version (kernel, fixed 2.6.8)
1404 CVE-2004-0494 version (mc, fixed 4.6.1)
1405 CVE-2004-0493 version (httpd, fixed 2.0.50)
1406 CVE-2004-0492 version (httpd, not 2.0)
1407 CVE-2004-0491 version (kernel, not upstream)
1408 CVE-2004-0488 version (httpd, fixed 2.0.50)
1409 CVE-2004-0478 ignore (mozilla) not a security issue
1410 CVE-2004-0461 version (dhcp, fixed after 3.0.1rc13)
1411 CVE-2004-0460 version (dhcp, fixed after 3.0.1rc13)
1412 CVE-2004-0457 version (mysql, fixed after 4.0.20)
1413 CVE-2004-0452 backport (perl, not 5.8.6)
1414 CVE-2004-0447 version (kernel, fixed 2.6.5)
1415 CVE-2004-0427 version (kernel, fixed 2.6.6)
1416 CVE-2004-0426 version (rsync, fixed 2.6.1)
1417 CVE-2004-0424 version (kernel, fixed 2.6.4)
1418 CVE-2004-0421 version (libpng10, fixed 1.0.16)
1419 CVE-2004-0421 version (libpng, fixed 1.0.16)
1420 CVE-2004-0419 version (xorg-x11, fixed 6.8.2 at least)
1421 CVE-2004-0418 version (cvs, fixed 1.11.17)
1422 CVE-2004-0417 version (cvs, fixed 1.11.17)
1423 CVE-2004-0416 version (cvs, fixed 1.11.17)
1424 CVE-2004-0415 version (kernel, fixed 2.6.8)
1425 CVE-2004-0414 version (cvs, fixed 1.11.17)
1426 CVE-2004-0413 version (subversion, fixed 1.0.5)
1427 CVE-2004-0412 version (mailman, fixed 2.1.5)
1428 CVE-2004-0411 version (kdelibs, fixed 3.3)
1429 CVE-2004-0409 version (xchat, fixed after 2.0.8)
1430 CVE-2004-0405 version (cvs, fixed 1.11)
1431 CVE-2004-0403 version (racoon, fixed 20040408a)
1432 CVE-2004-0398 version (neon, fixed 0.24.6)
1433 CVE-2004-0397 version (subversion, fixed 1.0.1)
1434 CVE-2004-0396 version (cvs, fixed 1.12.8)
1435 CVE-2004-0394 version (kernel, not 2.6 and not a vuln)
1436 CVE-2004-0392 version (racoon, fixed 20040407b)
1437 CVE-2004-0388 version (mysql, 4.1.11 is okay at least)
1438 CVE-2004-0381 version (mysql, 4.1.11 is okay at least)
1439 CVE-2004-0367 version (ethereal, fixed 0.10.3)
1440 CVE-2004-0365 version (ethereal, fixed 0.10.3)
1441 CVE-2004-0263 version (php, fixed 4.3.5)
1442 CVE-2004-0256 version (libtool, fixed 1.5.2)
1443 CVE-2004-0235 backport (lha, changelog)
1444 CVE-2004-0234 backport (lha, changelog)
1445 CVE-2004-0233 version (utempter, fixed 0.5.5)
1446 CVE-2004-0232 version (mc, fixed 4.6.0)
1447 CVE-2004-0231 version (mc, fixed 4.6.0)
1448 CVE-2004-0229 version (kernel, fixed 2.6.6)
1449 CVE-2004-0228 version (kernel, fixed 2.6.6)
1450 CVE-2004-0226 version (mc, fixed 4.6.0)
1451 CVE-2004-0191 version (Mozilla, fixed 1.4.2)
1452 CVE-2004-0189 version (squid, fixed 2.5.STABLE5)
1453 CVE-2004-0186 version (samba, not 3.0.2a)
1454 CVE-2004-0184 version (tcpdump, fixed 3.8.2)
1455 CVE-2004-0183 version (tcpdump, fixed 3.8.2)
1456 CVE-2004-0182 version (mailman, only affected Red Hat packages)
1457 CVE-2004-0181 version (kernel, fixed 2.6.5)
1458 CVE-2004-0180 version (cvs, fixed 1.11.15)
1459 CVE-2004-0179 version (openoffice.org)
1460 CVE-2004-0179 version (neon, fixed 0.24.5)
1461 CVE-2004-0178 version (kernel, not 2.6)
1462 CVE-2004-0177 version (kernel, fixed 2.6.6)
1463 CVE-2004-0176 version (ethereal, fixed 0.10.3)
1464 CVE-2004-0175 version (openssh, fixed 3.4p1)
1465 CVE-2004-0175 backport (krb5) [since FEDORA-2005-553]
1466 CVE-2004-0174 version (httpd, fixed 2.0.49)
1467 CVE-2004-0173 version (httpd, fixed 2.0.49)
1468 CVE-2004-0164 version (racoon)
1469 CVE-2004-0155 version (racoon)
1470 CVE-2004-0154 version (nfs-utils, fixed 1.0.6)
1471 CVE-2004-0150 version (python, fixed 2.2.2)
1472 CVE-2004-0138 version (kernel, fixed 2.6.0)
1473 CVE-2004-0133 version (kernel, 2.6.4)
1474 CVE-2004-0113 version (httpd, fixed 2.0.49)
1475 CVE-2004-0112 version (openssl, fixed 0.9.7d)
1476 CVE-2004-0112 backport (openssl097a, fixed 0.9.7d) from srpm
1477 CVE-2004-0111 version (gdk-pixbuf, fixed 0.20)
1478 CVE-2004-0110 version (libxml2, fixed 2.6.6)
1479 CVE-2004-0109 version (kernel, fixed 2.6.6)
1480 CVE-2004-0108 version (sysstat)
1481 CVE-2004-0107 version (sysstat, fixed after 4.0.7)
1482 CVE-2004-0106 version (XFree86)
1483 CVE-2004-0098 version (php)
1484 CVE-2004-0097 version (pwlib, fixed 1.6.0)
1485 CVE-2004-0096 version (mod_python, fixed after 2.7.9)
1486 CVE-2004-0094 version (XFree86, fixed 4.3.0)
1487 CVE-2004-0093 version (XFree86, fixed 4.3.0)
1488 CVE-2004-0084 version (XFree86)
1489 CVE-2004-0083 version (XFree86)
1490 CVE-2004-0082 version (samba, fixed 3.0.2)
1491 CVE-2004-0081 version (openssl097a, fixed 0.9.6d)
1492 CVE-2004-0081 version (openssl, fixed 0.9.6d)
1493 CVE-2004-0080 version (util-linux, fixed after 2.11f)
1494 CVE-2004-0079 version (openssl, fixed 0.9.7c)
1495 CVE-2004-0079 backport (openssl097a, fixed 0.9.7c) in srpm
1496 CVE-2004-0078 version (mutt, fixed 1.4.2)
1497 CVE-2004-0077 version (kernel, fixed 2.6.3)
1498 CVE-2004-0075 version (kernel, not 2.6)
1499 CVE-2004-0057 version (tcpdump, fixed 3.8.2)
1500 CVE-2004-0055 version (tcpdump, fixed 3.8.2)
1501 CVE-2004-0042 ignore (vsftpd) disputed
1502 CVE-2004-0010 version (kernel, not 2.6)
1503 CVE-2004-0008 version (gaim, fixed 0.75)
1504 CVE-2004-0007 version (gaim, fixed 0.75)
1505 CVE-2004-0006 version (gaim, fixed 0.76)
1506 CVE-2004-0005 version (gaim, fixed 0.76)
1507 CVE-2004-0003 version (kernel, not 2.6)
1508 CVE-2004-0001 version (kernel, not 2.6)
1509 CVE-2003-1303 version (php, fixed 4.3.3)
1510 CVE-2003-1302 version (php, fixed 4.3.1)
1511 CVE-2003-1295 version (xscreensaver)
1512 CVE-2003-1294 version (xscreensaver, fixed 4.15)
1513 CVE-2003-1265 VULNERABLE (mozilla)
1514 CVE-2003-1265 VULNERABLE (firefox)
1515 CVE-2003-1232 version (emacs, fixed 21.3)
1516 CVE-2003-1201 version (openldap, not 2.2)
1517 CVE-2003-1161 version (kernel, not released version)
1518 CVE-2003-1138 backport (httpd, Red Hat only) contains /+ now
1519 CVE-2003-1029 version (tcpdump, fixed after 3.8.1)
1520 CVE-2003-1023 version (mc, 4.6.1)
1521 CVE-2003-1013 version (ethereal, fixed 0.10.0)
1522 CVE-2003-1012 version (ethereal, fixed 0.10.0)
1523 CVE-2003-0993 version (httpd, not 2.0)
1524 CVE-2003-0992 version (mailman, fixed 2.1.4)
1525 CVE-2003-0992 version (mailman, fixed 2.1.3)
1526 CVE-2003-0991 version (mailman, fixed 2.0.14)
1527 CVE-2003-0990 version (squirrelmail, fixed after 1.4.0)
1528 CVE-2003-0989 version (tcpdump, fixed 3.8.1)
1529 CVE-2003-0989 version (tcpdump, fixed 3.8.1)
1530 CVE-2003-0988 version (kdepim, fixed 3.1.5)
1531 CVE-2003-0988 version (kde, fixed 3.1.5)
1532 CVE-2003-0987 version (httpd, not 2.0)
1533 CVE-2003-0986 version (kernel, fixed 2.6.2)
1534 CVE-2003-0985 version (kernel, not 2.6)
1535 CVE-2003-0984 version (kernel, fixed 2.4.23)
1536 CVE-2003-0977 version (cvs, fixed 1.11.10)
1537 CVE-2003-0973 version (mod_python, fixed 3.0.4)
1538 CVE-2003-0972 version (screen, fixed after 4.0.1)
1539 CVE-2003-0971 version (gnupg, fixed after 1.0.2)
1540 CVE-2003-0968 version (freeradius, fixed after 0.9.3)
1541 CVE-2003-0967 version (freeradius, fixed after 0.9.2)
1542 CVE-2003-0965 version (mailman, fixed 2.1.4)
1543 CVE-2003-0963 version (lftp, fixed after 2.6.9)
1544 CVE-2003-0962 version (rsync, fixed 2.5.7)
1545 CVE-2003-0961 version (kernel, fixed 2.4.23)
1546 CVE-2003-0959 version (kernel, fixed 2.4.21)
1547 CVE-2003-0956 version (kernel, fixed 2.4.22)
1548 CVE-2003-0935 version (netsnmp, fixed 5.0.9)
1549 CVE-2003-0927 version (ethereal, fixed 0.9.16)
1550 CVE-2003-0926 version (ethereal, fixed 0.9.16)
1551 CVE-2003-0925 version (ethereal, fixed 0.9.16)
1552 CVE-2003-0924 version (netpbm, fixed 9.26)
1553 CVE-2003-0914 version (bind, not 9)
1554 CVE-2003-0901 version (postgresql, not 8)
1555 CVE-2003-0900 version (perl, only 5.8.1)
1556 CVE-2003-0885 version (xscreensaver, fixed 4.15)
1557 CVE-2003-0865 version (tomcat, fixed after 4.0.3)
1558 CVE-2003-0863 ignore (php, not a bug) http://lists.nyphp.org/pipermail/talk/2003-November/006392.html
1559 CVE-2003-0861 version (php, fixed 4.3.3)
1560 CVE-2003-0860 version (php, fixed 4.3.3)
1561 CVE-2003-0859 version (glibc, checked source)
1562 CVE-2003-0858 version (quagga, fixed 0.95)
1563 CVE-2003-0856 version (iproute)
1564 CVE-2003-0854 version (coreutils, fixed 5.1.3)
1565 CVE-2003-0853 version (coreutils, fixed 5.1.3)
1566 CVE-2003-0851 version (openssl097a, not 0.9.7)
1567 CVE-2003-0851 version (openssl, not 0.9.7)
1568 CVE-2003-0848 backport (slocate, changelog)
1569 CVE-2003-0795 version (quagga, fixed 0.96.4)
1570 CVE-2003-0794 version (gdm, fixed 2.4.1.7)
1571 CVE-2003-0793 version (gdm, fixed 2.4.1.7)
1572 CVE-2003-0792 version (fetchmail, 6.2.4 only)
1573 CVE-2003-0791 version (mozilla, not after 1.4)
1574 CVE-2003-0789 version (httpd, fixed 2.0.48)
1575 CVE-2003-0788 version (cups, fixed 1.1.19)
1576 CVE-2003-0787 version (openssh, fixed 3.7.1p2)
1577 CVE-2003-0786 version (openssh, fixed 3.7.1p2)
1578 CVE-2003-0780 version (mysql, not 4.1)
1579 CVE-2003-0778 version (sane-backends, fixed 1.0.10)
1580 CVE-2003-0777 version (sane-backends, fixed 1.0.10)
1581 CVE-2003-0776 version (sane-backends, fixed 1.0.10)
1582 CVE-2003-0775 version (sane-backends, fixed 1.0.10)
1583 CVE-2003-0774 version (sane-backends, fixed 1.0.10)
1584 CVE-2003-0773 version (sane-backends, fixed 1.0.10)
1585 CVE-2003-0740 version (stunnel, fixed 3.26)
1586 CVE-2003-0730 version (xfree86, fixed after 4.3.0)
1587 CVE-2003-0700 version (kernel, not 2.6)
1588 CVE-2003-0699 version (kernel, not 2.6)
1589 CVE-2003-0695 version (openssh, fixed 3.7.1)
1590 CVE-2003-0694 version (sendmail, fixed 8.12.10)
1591 CVE-2003-0693 version (openssh, fixed 3.7)
1592 CVE-2003-0692 version (kde, fixed after 3.1.3)
1593 CVE-2003-0690 version (kde, fixed after 3.1.3)
1594 CVE-2003-0689 version (glibc, fixed at least in 2.3.2) by inspection
1595 CVE-2003-0688 version (sendmail, fixed 8.12.9)
1596 CVE-2003-0686 version (pam_smb, fixed 1.1.7)
1597 CVE-2003-0682 version (openssh, fixed at least in 4.0p1) by inspection
1598 CVE-2003-0681 version (sendmail, fixed 8.12.10)
1599 CVE-2003-0655 version (cdrtools, fixed 2.01a18)
1600 CVE-2003-0644 version (kdbg, not after 1.2.8)
1601 CVE-2003-0643 version (kernel, not 2.6)
1602 CVE-2003-0619 version (kernel, not 2.6)
1603 CVE-2003-0618 version (suidperl, fixed at least 5.8.6) by inspection
1604 CVE-2003-0594 version (Mozilla, ICAT)
1605 CVE-2003-0592 version (kde, fixed 3.1.3)
1606 CVE-2003-0564 version (Mozilla, ICAT)
1607 CVE-2003-0555 ignore (ImageMagick) wasn't reproducable
1608 CVE-2003-0552 version (kernel, not 2.6)
1609 CVE-2003-0551 version (kernel, not 2.6)
1610 CVE-2003-0550 version (kernel, not 2.6)
1611 CVE-2003-0549 version (gdm, fixed 2.4.1.6)
1612 CVE-2003-0548 version (gdm, fixed 2.4.1.6)
1613 CVE-2003-0547 version (gdm, fixed 2.4.1.6)
1614 CVE-2003-0546 version (up2date, fixed after 3.1.23)
1615 CVE-2003-0545 version (openssl, fixed 0.9.7c)
1616 CVE-2003-0545 backport (openssl097a, fixed 0.9.7c) in srpm
1617 CVE-2003-0544 version (openssl, fixed 0.9.7c)
1618 CVE-2003-0544 backport (openssl097a, fixed 0.9.7c) in srpm
1619 CVE-2003-0543 version (openssl, fixed 0.9.7c)
1620 CVE-2003-0543 backport (openssl097a, fixed 0.9.7c) in srpm
1621 CVE-2003-0542 version (httpd, fixed 2.0.48)
1622 CVE-2003-0541 backport (gtkhtml, fixed 1.1.10) gtkhtml-1.1.9-textslave.patch
1623 CVE-2003-0540 version (postfix, not 2.0 onwards)
1624 CVE-2003-0517 version (mgetty, fixed 1.1.29)
1625 CVE-2003-0516 version (mgetty, fixed 1.1.29)
1626 CVE-2003-0501 version (kernel, fixed 2.6.1)
1627 CVE-2003-0476 version (kernel, fixed 2.6.1)
1628 CVE-2003-0468 version (postfix, fixed 1.1.12)
1629 CVE-2003-0467 version (kernel, not 2.6)
1630 CVE-2003-0465 version (kernel, not 2.6)
1631 CVE-2003-0464 version (kernel, not 2.6)
1632 CVE-2003-0462 version (kernel, fixed 2.6.1)
1633 CVE-2003-0461 version (kernel, fixed 2.6.1)
1634 CVE-2003-0459 version (kdelibs, not 3.2)
1635 CVE-2003-0455 version (ImageMagick)
1636 CVE-2003-0442 version (php, fixed 4.3.2)
1637 CVE-2003-0434 version (xpdf, fixed 2.02pl1)
1638 CVE-2003-0432 version (ethereal, fixed after 0.9.12)
1639 CVE-2003-0431 version (ethereal, fixed after 0.9.12)
1640 CVE-2003-0430 version (ethereal, fixed after 0.9.12)
1641 CVE-2003-0429 version (ethereal, fixed after 0.9.12)
1642 CVE-2003-0428 version (ethereal, fixed after 0.9.12)
1643 CVE-2003-0427 backport (mikmod) [since FEDORA-2005-405]
1644 CVE-2003-0418 version (kernel, not 2.6)
1645 CVE-2003-0388 version (pam, fixed 0.78)
1646 CVE-2003-0386 version (openssh, fixed after 3.6.1)
1647 CVE-2003-0370 version (kde, fixed 3.0)
1648 CVE-2003-0367 backport (gzip)
1649 CVE-2003-0364 version (kernel, not 2.6)
1650 CVE-2003-0357 version (ethereal, fixed after 0.9.11)
1651 CVE-2003-0356 version (ethereal, fixed after 0.9.11)
1652 CVE-2003-0354 version (ghostscript, fixed 7.07)
1653 CVE-2003-0328 backport (epic, changelog)
1654 CVE-2003-0326 ignore (slocate)
1655 CVE-2003-0300 ignore (sylpheed) only a crasher
1656 CVE-2003-0299 ignmore (mutt) only a crasher
1657 CVE-2003-0298 version (mozilla, fixed after 1.4a)
1658 CVE-2003-0296 version (evolution, fixed at least in 1.4.5)
1659 CVE-2003-0289 version (cdrtools, fixed 2.01a14)
1660 CVE-2003-0282 version (unzip, fixed 5.51)
1661 CVE-2003-0255 version (gnupg, fixed 1.2.2)
1662 CVE-2003-0253 version (httpd, fixed 2.0.47)
1663 CVE-2003-0252 version (nfs-utils, fixed 1.0.4)
1664 CVE-2003-0251 version (ypserv, fixed 2.7)
1665 CVE-2003-0249 ignore (php) see CVE
1666 CVE-2003-0248 version (kernel, not 2.6)
1667 CVE-2003-0247 version (kernel, not 2.6)
1668 CVE-2003-0246 version (kernel, not 2.6)
1669 CVE-2003-0245 version (httpd, fixed 2.0.47)
1670 CVE-2003-0245 version (httpd, fixed 2.0.46)
1671 CVE-2003-0244 version (kernel, not 2.6)
1672 CVE-2003-0211 version (xinetd, fixed 2.3.11)
1673 CVE-2003-0204 version (kde, fixed after 3.1.1)
1674 CVE-2003-0201 version (samba, fixed 2.2.8a)
1675 CVE-2003-0196 version (samba, fixed 2.2.8a)
1676 CVE-2003-0195 version (cups, fixed 1.1.19)
1677 CVE-2003-0194 version (tcpdump, not upstream)
1678 CVE-2003-0192 version (httpd, fixed 2.0.47)
1679 CVE-2003-0190 version (openssh, fixed 3.6.1p1)
1680 CVE-2003-0189 version (httpd, fixed 2.0.46)
1681 CVE-2003-0188 version (lv, fixed 4.51 at least) by inspection
1682 CVE-2003-0187 version (kernel, not 2.6)
1683 CVE-2003-0167 version (mutt, fixed 1.4.1)
1684 CVE-2003-0166 version (php, fixed 4.3.2)
1685 CVE-2003-0165 version (eog, fixed 2.2.2)
1686 CVE-2003-0161 version (sendmail, fixed 8.12.9)
1687 CVE-2003-0160 version (squirrelmail, fixed 1.2.11)
1688 CVE-2003-0159 version (ethereal, fixed after 0.9.9)
1689 CVE-2003-0150 version (mysql, fixed 3.23.56)
1690 CVE-2003-0147 version (openssl, fixed 0.9.7b)
1691 CVE-2003-0147 backport (openssl097a, fixed 0.9.7b) in srpm
1692 CVE-2003-0146 version (netpbm, fixed 10.18)
1693 CVE-2003-0145 version (tcpdump, fixed 3.7.2)
1694 CVE-2003-0140 version (mutt, fixed 1.4.1)
1695 CVE-2003-0139 version (krb5, fixed 1.3)
1696 CVE-2003-0138 version (krb5, fixed 1.3)
1697 CVE-2003-0135 version (vsftpd, not upstream)
1698 CVE-2003-0133 version (evolution, fixed 1.2.4)
1699 CVE-2003-0132 version (httpd, fixed 2.0.45)
1700 CVE-2003-0131 version (openssl, fixed 0.9.7b)
1701 CVE-2003-0131 backport (openssl097a, fixed 0.9.7b) in srpm
1702 CVE-2003-0130 version (evolution, fixed 1.2.3)
1703 CVE-2003-0129 version (evolution, fixed 1.2.3)
1704 CVE-2003-0128 version (evolution, fixed 1.2.3)
1705 CVE-2003-0127 version (kernel, not 2.6)
1706 CVE-2003-0124 version (man, fixed 1.5l)
1707 CVE-2003-0108 version (tcpdump, fixed after 3.7.1)
1708 CVE-2003-0107 version (zlib, fixed 1.2.0.2 at least) changelog
1709 CVE-2003-0102 version (file, fixed 3.41)
1710 CVE-2003-0097 version (php, fixed 4.3.1)
1711 CVE-2003-0093 version (tcpdump, fixed 3.7.2)
1712 CVE-2003-0086 version (samba, fixed 2.2.8)
1713 CVE-2003-0085 version (samba, fixed 2.2.8)
1714 CVE-2003-0083 version (httpd, fixed 2.0.46)
1715 CVE-2003-0082 version (krb5, fixed after 1.2.7)
1716 CVE-2003-0081 version (ethereal, fixed after 0.9.9)
1717 CVE-2003-0078 version (openssl097a, fixed 0.9.7a)
1718 CVE-2003-0078 version (openssl, fixed 0.9.7a)
1719 CVE-2003-0073 version (mysql, fixed 3.23.55)
1720 CVE-2003-0072 version (krb5, fixed after 1.2.7)
1721 CVE-2003-0071 version (xorg-x11, fixed in 6.8.2 at least) by inspection
1722 CVE-2003-0070 version (vte, fixed 0.11.1 at least) by inspection
1723 CVE-2003-0063 version (xorg-x11, fixed at least in 4.2.99)
1724 CVE-2003-0060 version (krb5, fixed 1.2.5)
1725 CVE-2003-0059 version (krb5, fixed 1.2.5)
1726 CVE-2003-0058 version (krb5, fixed 1.2.5)
1727 CVE-2003-0056 version (slocate, fixed 2.7)
1728 CVE-2003-0044 version (tomcat, fixed after 3.3.1a)
1729 CVE-2003-0043 version (tomcat, fixed 3.3.1a)
1730 CVE-2003-0041 version (krb5, fixed after 1.2.7)
1731 CVE-2003-0038 version (mailman, fixed 2.0.13 at least)
1732 CVE-2003-0028 version (krb5, fixed after 1.2.7)
1733 CVE-2003-0028 version (glibc, fixed after 2.3.1)
1734 CVE-2003-0026 version (dhcpd, fixed 3.0.1)
1735 CVE-2003-0020 version (httpd, fixed 2.0.49)
1736 CVE-2003-0019 version (kernel-utils, not upstream)
1737 CVE-2003-0018 version (kernel, not 2.6)
1738 CVE-2003-0017 version (httpd, fixed 2.0.44)
1739 CVE-2003-0016 version (httpd, fixed 2.0.44)
1740 CVE-2003-0015 version (cvs, fixed 1.11.5)
1741 CVE-2003-0001 version (kernel, not 2.6)
1742
1743 older, happened to deal with at same time:
1744
1745 CVE-2002-2215 version (php, fixed 4.3.0)
1746 CVE-2002-2214 version (php, fixed 4.2.2)
1747 CVE-2002-2211 ** bind
1748 CVE-2002-2210 ignore (openoffice) binary install only (not rpm install)
1749 CVE-2002-2204 ignore (rpm) by design
1750 CVE-2002-2196 version (samba, fixed 2.2.5)
1751 CVE-2002-2185 version (kernel, fixed 2.6.15) [since FEODRA-2006-077]
1752 CVE-2002-2103 version (apache, not 2.0)
1753 CVE-2002-1963 version (kernel, not 2.6)
1754 CVE-2002-1976 ignore (ifconfig) "use ip"
1755 CVE-2002-1914 version (dump, fixed 0.4b29)
1756 CVE-2002-1850 version (mod_cgi, fixed 2.0.41)
1757 CVE-2002-1827 version (sendmail, fixed after 8.12.3)
1758 CVE-2002-1814 ignore (bonobo) not shipped setuid
1759 CVE-2002-1793 version (mod_ssl), also only hp
1760 CVE-2002-1783 version (php, fixed after 4.2.3)
1761 CVE-2002-1765 version (evolution, fixed 1.0.5)
1762 CVE-2002-1593 version (httpd, fixed 2.0.42)
1763 CVE-2002-1573 version (kernel, not 2.6)
1764 CVE-2002-1572 version (kernel, not 2.6)
1765 CVE-2002-1571 version (kernel, not 2.6)
1766 CVE-2002-1510 version (XFree86, fixed 4.2.0)
1767 CVE-2002-1472 version (XFree86, fixed 4.2.1)
1768 CVE-2002-1363 version (libpng, fixed 1.2.6)
1769 CVE-2002-0517 version (XFree86, didn't affect Linux)
1770 CVE-2002-0164 version (XFree86, fixed 4.2.1)
1771 CVE-2001-1490 version (mozilla, fixed 1.0.0)
1772 CVE-2001-1494 version (util-linux, fixed 2.11n)
1773 CVE-2001-0955 version (XFree86, fixed 4.2.0)
1774 CVE-1999-1572 backport (cpio) from srpm

admin@fedoraproject.org
ViewVC Help
Powered by ViewVC 1.1.2