/[fedora]/fedora-security/audit/fc5
ViewVC logotype

Contents of /fedora-security/audit/fc5

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.462 - (show annotations) (download)
Sun Jul 1 09:03:02 2007 UTC (2 years, 4 months ago) by lkundrak
Branch: MAIN
CVS Tags: HEAD
Changes since 1.461: +4 -0 lines
Goodbye Fedora Core 5!
1 Up to date CVE as of CVE email 20061123
2 Up to date FC5 as of 20061123
3
4 This list is no longer maintained by the Red Hat security
5 response team as of 29th June 2007 (two months after the
6 release date of Fedora 7)
7
8 ** are items that need attention
9
10 CVE-2007-4168 VULNERABLE (libexif) #243891
11 CVE-2007-2873 version (spamassassin, fixed 3.1.9)
12 CVE-2007-1565 ignore (konqueror) client crash
13 CVE-2007-1564 vulnerable (konqueror) [#CVE-2007-1564]
14 CVE-2007-1475 ignore (php) unshipped ibase extension
15 CVE-2007-1420 VULNERABLE (mysql, fixed 5.0.36) #232604
16 CVE-2007-1413 ignore (php) Windows NT SNMP specific
17 CVE-2007-1412 ignore (php) unshipped cpdf extension
18 CVE-2007-1411 ignore (php) unshipped mssql extension
19 CVE-2007-1401 ignore (php) unshipped cracklib extension
20 CVE-2007-1396 ignore (php) feature, not a flaw
21 CVE-2007-1263 version (gnupg, fixed 1.4.7) [since FEDORA-2007-316]
22 CVE-2007-1218 backport (tcpdump) #232349 [since FEDORA-2007-348]
23 CVE-2007-1006 backport (ekiga, fixed 2.0.5) #229259 [since FEDORA-2007-321]
24 CVE-2007-1004 VULNERABLE (firefox, ...)
25 CVE-2007-1002 VULNERABLE (evolution) #233587
26 CVE-2007-1000 version (kernel, fixed 2.6.20) [since FEDORA-2007-336]
27 CVE-2007-0998 backport (xen) #230295 [since FEDORA-2007-344]
28 CVE-2007-0988 backport (php) #228011 [since FEDORA-2007-261]
29 CVE-2007-0981 VULNERABLE (firefox, ...)
30 CVE-2007-0910 backport (php) #228011 [since FEDORA-2007-261]
31 CVE-2007-0909 backport (php) #228011 [since FEDORA-2007-261]
32 CVE-2007-0908 backport (php) #228011 [since FEDORA-2007-261]
33 CVE-2007-0907 backport (php) #228011 [since FEDORA-2007-261]
34 CVE-2007-0906 backport (php) #228011 [since FEDORA-2007-261]
35 CVE-2007-0823 ignore (xterm) feature, not a bug
36 CVE-2007-0822 ignore (util-linux) NULL dereference
37 CVE-2007-0772 version (kernel) [since FEDORA-2007-277]
38 CVE-2007-0770 ignore (ImageMagick) only if incomplete CVE-2006-5456
39 CVE-2007-0720 version (cups, fixed 1.2.7) #232243 [since FEDORA-2007-1219]
40 CVE-2007-0650 ignore (tetex) needs user's assistance
41 CVE-2007-0494 version (bind, fixed 9.3.4) #225268 [since FEDORA-2007-164]
42 CVE-2007-0493 version (bind, fixed 9.3.4) #224443 [since FEDORA-2007-164]
43 CVE-2007-0451 version (spamassassin, fixed 3.1.8) [since FEDORA-2007-242]
44 CVE-2007-0247 backport(squid, fixed 2.6.STABLE7) #222883 [since FEDORA-2007-092]
45 CVE-2007-0235 VULNERABLE (libgtop2) #222637 not sure, will triage
46 CVE-2007-0104 ignore (poppler) only client DoS
47 CVE-2007-0104 ignore (kdegraphics) only client DoS
48 CVE-2007-0086 ignore (apache) not a security issue
49 CVE-2007-0009 version (nss, fixed 3.11.5) (nspr, fixed 4.6.5) [since FEDORA-2007-278]
50 CVE-2007-0008 version (nss, fixed 3.11.5) (nspr, fixed 4.6.5) [since FEDORA-2007-278]
51 CVE-2007-0007 ignore (gnucsh) doesn't affect this version
52 CVE-2007-0006 version (kernel, fixed 2.6.20) [since FEDORA-2007-336]
53 CVE-2007-0006 backport (kernel, fixed in -mm) [since FEDORA-2007-225]
54 CVE-2007-0005 version (kernel, fixed 2.6.20) [since FEDORA-2007-336]
55 CVE-2007-0002 version (libwpd, fixed 0.8.9) #222808 [since FEDORA-2007-350]
56 CVE-2006-6939 VULNERABLE (ed, fixed 0.3) #223075
57 CVE-2006-6899 version (bluez-utils, fixed 2.23)
58 CVE-2006-6870 backport (avahi, fixed 0.6.16) #221726 [since FEDORA-2007-018]
59 CVE-2006-6772 backport (w3m) #221484 [since FEDORA-2007-078]
60 CVE-2006-6719 backport (wget) #221469 [since FEDORA-2007-037]
61 CVE-2006-6698 VULNERABLE (GConf2) #219280
62 CVE-2006-6660 ignore (kdelibs) client Dos only, not reproducible
63 CVE-2006-6385 ignore (kernel) windows only
64 CVE-2006-6383 ignore (php) safe mode isn't safe
65 CVE-2006-6333 ignore (kernel, 2.6.19 only)
66 CVE-2006-6332 ignore (kernel) no support for madwifi
67 CVE-2006-6305 ignore (net-snmp) already have the backported patch
68 CVE-2006-6304 ignore (kernel, 2.6.19 only)
69 CVE-2006-6303 version (ruby, fixed 1.8.5.2) [since FEDORA-2006-1440]
70 CVE-2006-6297 ignore (kdegraphics) just a crash
71 CVE-2006-6235 backport (gnupg, fixed 1.4.6) [since FEDORA-2006-1405]
72 CVE-2006-6169 backport (gnupg, fixed 1.4.6) [since FEDORA-2006-1405]
73 CVE-2006-6144 ** krb5
74 CVE-2006-6143 ** krb5
75 CVE-2006-6142 backport (squirrelmail) #218297 [since FEDORA-2007-088]
76 CVE-2006-6128 VULNERABLE (kernel, fixed **)
77 CVE-2006-6107 VULNERABLE (dbus, fixed 1.0.2)
78 CVE-2006-6106 version (kernel, fixed 2.6.18.6) [since FEDORA-2006-1470]
79 CVE-2006-6105 version (gdm, fixed 2.14.11) [since FEDORA-2006-1467]
80 CVE-2006-6104 backport (mono, fixed 1.1.13.8.2) #220853 [since FEDORA-2007-068]
81 CVE-2006-6097 backport (tar) [since FEDORA-2006-6097]
82 CVE-2006-6077 VULNERABLE (firefox)
83 CVE-2006-6060 ignore (kernel, fixed 2.6.19-rc2) no NTFS support
84 CVE-2006-6058 VULNERABLE (kernel, fixed **)
85 CVE-2006-6057 ignore (kernel, fixed **) separate modules
86 CVE-2006-6056 backport (kernel, fixed 2.6.19) [since FEDORA-2006-1470]
87 CVE-2006-6054 VULNERABLE (kernel, fixed **)
88 CVE-2006-6053 backport (kernel) [since FEDORA-2006-1221]
89 CVE-2006-5989 backport (mod_auth_kerb) [since FEDORA-2006-1341]
90 CVE-2006-5974 ignore (fetchmail, fixed 6.3.6) only 6.3.5
91 CVE-2006-5973 VULNERABLE (dovecot, fixed 1.0.rc15) #216508
92 CVE-2006-5925 backport (elinks) #215734 [since FEDORA-2006-1277]
93 CVE-2006-5876 VULNERABLE (libsoup) #223144
94 CVE-2006-5871 version (kernel, fixed 2.6.10)
95 CVE-2006-5868 VULNERABLE (ImageMagick, fixed 6.2.9.1) #217560
96 CVE-2006-5867 version (fetchmail, fixed 6.3.6) #221984 [since FEDORA-2007-041]
97 CVE-2006-5864 VULNERABLE (evince) #217672
98 CVE-2006-5823 backport (kernel) [since FEDORA-2006-1221]
99 CVE-2006-5794 backport (openssh, fixed 4.5) #214641 [since FEDORA-2006-1214]
100 CVE-2006-5793 ignore (libpng, fixed 1.2.13) just a client crash
101 CVE-2006-5783 ignore (firefox) disputed
102 CVE-2006-5779 VULNERABLE (openldap, 2.3.29) #214768
103 CVE-2006-5757 backport (kernel, fixed 2.6.19-rc2) [since FEDORA-2006-1221]
104 CVE-2006-5753 backport (kernel, fixed 2.6.20.1) [since FEDORA-2007-277]
105 CVE-2006-5751 version (kernel, fixed 2.6.19, fixed 2.6.18.4) [since FEDORA-2006-1470]
106 CVE-2006-5749 VULNERABLE (kernel, fixed 2.6.20-rc2)
107 CVE-2006-5748 version (thunderbird) [since FEDORA-2006-1194]
108 CVE-2006-5748 version (firefox) [since FEDORA-2006-1199]
109 CVE-2006-5747 version (thunderbird) [since FEDORA-2006-1194]
110 CVE-2006-5747 version (firefox) [since FEDORA-2006-1199]
111 CVE-2006-5706 ignore (php, fixed 5.2.0) safe mode isn't safe
112 CVE-2006-5701 VULNERABLE (kernel) squashfs is not included upstream
113 CVE-2006-5633 ignore (firefox) just a client DoS
114 CVE-2006-5619 version (kernel, fixed 2.6.18.2, fixed 2.6.19-rc4) [since FEDORA-2006-1221]
115 CVE-2006-5595 version (wireshark, fixed 0.99.4) [since FEDORA-2006-1141]
116 CVE-2006-5542 version (postgresql, fixed 8.1.5) #212360 [since FEDORA-2007-054]
117 CVE-2006-5541 version (postgresql, fixed 8.1.5) #212360 [since FEDORA-2007-054]
118 CVE-2006-5540 version (postgresql, fixed 8.1.6) #212360 [since FEDORA-2007-054]
119 CVE-2006-5470 version (wireshark, fixed 0.99.4) [since FEDORA-2006-1141]
120 CVE-2006-5469 version (wireshark, fixed 0.99.4) [since FEDORA-2006-1141]
121 CVE-2006-5468 version (wireshark, fixed 0.99.4) [since FEDORA-2006-1141]
122 CVE-2006-5467 backport (ruby) #212396 [since FEDORA-2006-1110]
123 CVE-2006-5466 VULNERABLE (rpm) #212833
124 CVE-2006-5465 backport (php, fixed 5.2.0) #213732 [since FEDORA-2006-1168]
125 CVE-2006-5464 version (thunderbird) [since FEDORA-2006-1194]
126 CVE-2006-5464 version (firefox) [since FEDORA-2006-1199]
127 CVE-2006-5463 version (thunderbird) [since FEDORA-2006-1194]
128 CVE-2006-5463 version (firefox) [since FEDORA-2006-1199]
129 CVE-2006-5462 version (thunderbird) [since FEDORA-2006-1194]
130 CVE-2006-5462 version (firefox) [since FEDORA-2006-1199]
131 CVE-2006-5461 backport (avahi, fixed 0.6.15) [since FEDORA-2006-1339]
132 CVE-2006-5456 backport (ImageMagick) #210921 [since FEDORA-2006-1286]
133 CVE-2006-5397 version (libX11, 1.0.2 and 1.0.3 only)
134 CVE-2006-5331 VULNERABLE (kernel, fixed 2.6.19-rc3)
135 CVE-2006-5298 backport (mutt) [since FEDORA-2006-1061]
136 CVE-2006-5297 backport (mutt) [since FEDORA-2006-1061]
137 CVE-2006-5229 ignore (openssh) reported not an issue
138 CVE-2006-5215 ignore (kdebase) #212166 links to xinit Xsession
139 CVE-2006-5215 VULNERABLE (xorg-x11-xinit) #212167
140 CVE-2006-5215 VULNERABLE (xorg-x11-xdm) #212167
141 CVE-2006-5214 ignore (kdebase) #212166 links to xinit Xsession
142 CVE-2006-5214 VULNERABLE (xorg-x11-xinit) #212167
143 CVE-2006-5214 VULNERABLE (xorg-x11-xdm) #212167
144 CVE-2006-5178 VULNERABLE (php) can't be fixed
145 CVE-2006-5174 ignore (kernel, fixed 2.6.19-rc1) s390 only
146 CVE-2006-5173 version (kernel, fixed 2.6.18) [since FEDORA-2006-1022] protected by exec-shield
147 CVE-2006-5170 VULNERABLE (nss_ldap) #209361
148 CVE-2006-5160 ignore (firefox) unverified
149 CVE-2006-5159 ignore (firefox) unverified
150 CVE-2006-5158 version (kernel, fixed 2.6.15)
151 CVE-2006-5072 backport (mono) #209464 [since FEDORA-2006-1012]
152 CVE-2006-5052 VULNERABLE (openssh, fixed 4.4)
153 CVE-2006-5051 backport (openssh, fixed 4.4) [since FEDORA-2006-1011]
154 CVE-2006-4997 version (kernel, fixed 2.6.18) [since FEDORA-2006-1022]
155 CVE-2006-4980 backport (python, fixed 2.4.4 at least) #208166 [since FEDORA-2006-1049]
156 CVE-2006-4925 ignore (openssh) client crash only
157 CVE-2006-4924 backport (openssh) #207957 [since FEDORA-2006-1011]
158 CVE-2006-4842 ignore (nspr) Nothing setuid links with nspr
159 CVE-2006-4813 version (kernel, fixed 2.6.13)
160 CVE-2006-4812 backport (php) [since FEDORA-2006-1024] **
161 CVE-2006-4811 version (qt, fixed 3.3.7) #211342 [since FEDORA-2006-1056]
162 CVE-2006-4810 backport (texinfo) [since FEDORA-2006-1202]
163 CVE-2006-4805 version (wireshark, fixed 0.99.4) [since FEDORA-2006-1141]
164 CVE-2006-4790 backport (gnutls, fixed 1.4.4) [since FEDORA-2006-974]
165 CVE-2006-4663 ignore (kernel) not a vulnerability
166 CVE-2006-4625 version (php, fixed 5.1.6) [since FEDORA-2006-1024]
167 CVE-2006-4624 version (mailman, fixed 2.1.9rc1) #205652 [since FEDORA-2006-1013]
168 CVE-2006-4623 version (kernel, fixed 2.6.18-rc1) [since FEDORA-2006-1022]
169 CVE-2006-4600 VULNERABLE (openldap, fixed 2.3.25) #205827
170 CVE-2006-4574 version (wireshark, fixed 0.99.4) [since FEDORA-2006-1141]
171 CVE-2006-4573 VULNERABLE (screen) #212057
172 CVE-2006-4572 VULNERABLE (kernel, fixed 2.6.19-rc4)
173 CVE-2006-4571 version (thunderbird, fixed 1.5.0.7) [since FEDORA-2006-977]
174 CVE-2006-4571 version (firefox, fixed 1.5.0.7) [since FEDORA-2006-976]
175 CVE-2006-4571 VULNERABLE (mozilla)
176 CVE-2006-4570 version (thunderbird, fixed 1.5.0.7) [since FEDORA-2006-977]
177 CVE-2006-4570 VULNERABLE (mozilla)
178 CVE-2006-4569 version (firefox, fixed 1.5.0.7) [since FEDORA-2006-976]
179 CVE-2006-4569 VULNERABLE (mozilla)
180 CVE-2006-4568 version (firefox, fixed 1.5.0.7) [since FEDORA-2006-976]
181 CVE-2006-4568 VULNERABLE (mozilla)
182 CVE-2006-4567 version (thunderbird, fixed 1.5.0.7) [since FEDORA-2006-977]
183 CVE-2006-4567 version (firefox, fixed 1.5.0.7) [since FEDORA-2006-976]
184 CVE-2006-4566 version (thunderbird, fixed 1.5.0.7) [since FEDORA-2006-977]
185 CVE-2006-4566 version (firefox, fixed 1.5.0.7) [since FEDORA-2006-976]
186 CVE-2006-4566 VULNERABLE (mozilla)
187 CVE-2006-4565 version (thunderbird, fixed 1.5.0.7) [since FEDORA-2006-977]
188 CVE-2006-4565 version (firefox, fixed 1.5.0.7) [since FEDORA-2006-976]
189 CVE-2006-4565 VULNERABLE (mozilla)
190 CVE-2006-4561 VULNERABLE (firefox)
191 CVE-2006-4538 version (kernel, fixed 2.6.18) [since FEDORA-2006-1022] ia64 and sparc only
192 CVE-2006-4535 version (kernel, fixed 2.6.17.12, fixed 2.6.18-rc6) [since FEDORA-2006-967]
193 CVE-2006-4514 backport (libgsf, fixed 1.14.2) #217957 [since FEDORA-2006-1399]
194 CVE-2006-4507 ignore (libtiff) can't reproduce
195 CVE-2006-4486 version (php, fixed 5.1.6) [since FEDORA-2006-1024]
196 CVE-2006-4485 version (php, fixed 5.1.5) [since FEDORA-2006-1024]
197 CVE-2006-4484 version (php, fixed 5.1.5) [since FEDORA-2006-1024] also ignore
198 CVE-2006-4484 ignore (gd)
199 CVE-2006-4483 ignore (php) not linux
200 CVE-2006-4482 version (php, fixed 5.1.5) #204995 [since FEDORA-2006-1024]
201 CVE-2006-4481 ignore (php) safe mode isn't safe
202 CVE-2006-4455 ignore (xchat) client DoS
203 CVE-2006-4447 ignore (xorg) not a security issue
204 CVE-2006-4434 ignore (sendmail, fixed 8.13.8) not exploitable
205 CVE-2006-4433 version (php, fixed 5.1.4) [since FEDORA-2006-1024]
206 CVE-2006-4380 version (mysql, fixed 4.1.13)
207 CVE-2006-4343 backport (openssl, fixed 0.9.8d) [since FEDORA-2006-1004]
208 CVE-2006-4342 ignore (kernel) rhel3 only
209 CVE-2006-4340 version (nss, fixed 3.11.3) [since FEDORA-2006-979]
210 CVE-2006-4339 backport (openssl097a) [since FEDORA-2006-953]
211 CVE-2006-4339 backport (openssl) [since FEDORA-2006-953]
212 CVE-2006-4338 version (gzip) #207643 [since FEDORA-2006-993]
213 CVE-2006-4337 version (gzip) #207643 [since FEDORA-2006-993]
214 CVE-2006-4336 version (gzip) #207643 [since FEDORA-2006-993]
215 CVE-2006-4335 version (gzip) #207643 [since FEDORA-2006-993]
216 CVE-2006-4334 version (gzip) #207643 [since FEDORA-2006-993]
217 CVE-2006-4333 version (wireshark, fixed 0.99.3) [since FEDORA-2006-936]
218 CVE-2006-4332 version (wireshark, fixed 0.99.3) [since FEDORA-2006-936]
219 CVE-2006-4331 version (wireshark, fixed 0.99.3) [since FEDORA-2006-936]
220 CVE-2006-4330 version (wireshark, fixed 0.99.3) [since FEDORA-2006-936]
221 CVE-2006-4310 VULNERABLE (firefox)
222 CVE-2006-4262 backport (cscope) #203649 [since FEDORA-2006-932]
223 CVE-2006-4253 version (thunderbird, fixed 1.5.0.7) [since FEDORA-2006-977]
224 CVE-2006-4253 version (firefox, fixed 1.5.0.7) [since FEDORA-2006-976]
225 CVE-2006-4227 version (mysql, fixed 5.0.25,5.1.12) #203432 [since FEDORA-2006-1298]
226 CVE-2006-4226 version (mysql, fixed 5.0.25,5.1.12) #203427 [since FEDORA-2006-1298]
227 CVE-2006-4146 backport (gdb) [since FEDORA-2006-975]
228 CVE-2006-4145 version (kernel, fixed 2.6.17.10) [since FEDORA-2006-967] needs a better upstream fix
229 CVE-2006-4144 backport (ImageMagick, fixed 6.2.9) #202773 [since FEDORA-2006-929]
230 CVE-2006-4096 version (bind) [since FEDORA-2006-1024] was backport since FEDORA-2006-966
231 CVE-2006-4095 version (bind) [since FEDORA-2006-418] was backport since FEDORA-2006-966
232 CVE-2006-4093 version (kernel, fixed 2.6.17.9) [since FEDORA-2006-967]
233 CVE-2006-4031 version (mysql, fixed 5.0.24) #202247 [since FEDORA-2006-1298]
234 CVE-2006-4020 version (php) #201767 [since FEDORA-2006-1024]
235 CVE-2006-4019 version (squirrelmail, fixed 1.4.8) #202196 [since FEDORA-2006-913]
236 CVE-2006-3918 version httpd, fixed 2.2.2 [since FEDORA-2006-364]
237 CVE-2006-3879 version (mikmod, not 3.1.6)
238 CVE-2006-3835 VULNERABLE (tomcat, fixed 5.5.17)
239 CVE-2006-3813 version (perl) only Red Hat Enterprise Linux affected
240 CVE-2006-3812 version (thunderbird, fixed 1.5.0.5) [since FEDORA-2006-903]
241 CVE-2006-3812 version (firefox, fixed 1.5.0.5) [since FEDORA-2006-902]
242 CVE-2006-3812 VULNERABLE (mozilla)
243 CVE-2006-3811 version (thunderbird, fixed 1.5.0.5) [since FEDORA-2006-903]
244 CVE-2006-3811 version (firefox, fixed 1.5.0.5) [since FEDORA-2006-902]
245 CVE-2006-3811 VULNERABLE (mozilla)
246 CVE-2006-3810 version (thunderbird, fixed 1.5.0.5) [since FEDORA-2006-903]
247 CVE-2006-3810 version (firefox, fixed 1.5.0.5) [since FEDORA-2006-902]
248 CVE-2006-3810 VULNERABLE (mozilla)
249 CVE-2006-3809 version (thunderbird, fixed 1.5.0.5) [since FEDORA-2006-903]
250 CVE-2006-3809 version (firefox, fixed 1.5.0.5) [since FEDORA-2006-902]
251 CVE-2006-3809 VULNERABLE (mozilla)
252 CVE-2006-3808 version (thunderbird, fixed 1.5.0.5) [since FEDORA-2006-903]
253 CVE-2006-3808 version (firefox, fixed 1.5.0.5) [since FEDORA-2006-902]
254 CVE-2006-3808 VULNERABLE (mozilla)
255 CVE-2006-3807 version (thunderbird, fixed 1.5.0.5) [since FEDORA-2006-903]
256 CVE-2006-3807 version (firefox, fixed 1.5.0.5) [since FEDORA-2006-902]
257 CVE-2006-3807 VULNERABLE (mozilla)
258 CVE-2006-3806 version (thunderbird, fixed 1.5.0.5) [since FEDORA-2006-903]
259 CVE-2006-3806 version (firefox, fixed 1.5.0.5) [since FEDORA-2006-902]
260 CVE-2006-3806 VULNERABLE (mozilla)
261 CVE-2006-3805 version (thunderbird, fixed 1.5.0.5) [since FEDORA-2006-903]
262 CVE-2006-3805 version (firefox, fixed 1.5.0.5) [since FEDORA-2006-902]
263 CVE-2006-3805 VULNERABLE (mozilla)
264 CVE-2006-3804 version (thunderbird, fixed 1.5.0.5) [since FEDORA-2006-903]
265 CVE-2006-3804 version (firefox, fixed 1.5.0.5) [since FEDORA-2006-902]
266 CVE-2006-3804 VULNERABLE (mozilla)
267 CVE-2006-3803 version (thunderbird, fixed 1.5.0.5) [since FEDORA-2006-903]
268 CVE-2006-3803 version (firefox, fixed 1.5.0.5) [since FEDORA-2006-902]
269 CVE-2006-3803 VULNERABLE (mozilla)
270 CVE-2006-3802 version (thunderbird, fixed 1.5.0.5) [since FEDORA-2006-903]
271 CVE-2006-3802 version (firefox, fixed 1.5.0.5) [since FEDORA-2006-902]
272 CVE-2006-3802 VULNERABLE (mozilla)
273 CVE-2006-3801 version (thunderbird, fixed 1.5.0.5) [since FEDORA-2006-903]
274 CVE-2006-3801 version (firefox, fixed 1.5.0.5) [since FEDORA-2006-902]
275 CVE-2006-3801 VULNERABLE (mozilla)
276 CVE-2006-3747 backport (httpd, fixed 2.2.3) [since FEDORA-2006-863]
277 CVE-2006-3746 version (gnupg, fixed 1.4.5) #200904 [since FEDORA-2006-868]
278 CVE-2006-3745 version (kernel, fixed 2.6.17.10) [since FEDORA-2006-967]
279 CVE-2006-3744 backport (ImageMagick) #202193 [since FEDORA-2006-929]
280 CVE-2006-3743 backport (ImageMagick) #202193 [since FEDORA-2006-929]
281 CVE-2006-3742 backport (kdebase) #201507 [since FEDORA-2006-942]
282 CVE-2006-3741 version (kernel, fixed 2.6.18-rc7) [since FEDORA-2006-1022] ia64 only
283 CVE-2006-3740 VULNERABLE (libXfont, fixed 1.2.2)
284 CVE-2006-3739 VULNERABLE (libXfont, fixed 1.2.2)
285 CVE-2006-3738 backport (openssl, fixed 0.9.8d) [since FEDORA-2006-1004]
286 CVE-2006-3731 ignore (firefox) just a user complicit crash
287 CVE-2006-3694 backport (ruby, fixed 1.8.5) #199538 #199543 [since FEDORA-2006-849]
288 CVE-2006-3677 version (thunderbird, fixed 1.5.0.5) [since FEDORA-2006-903]
289 CVE-2006-3677 version (firefox, fixed 1.5.0.5) [since FEDORA-2006-902]
290 CVE-2006-3677 VULNERABLE (mozilla)
291 CVE-2006-3672 ignore (konqueror) just a crash
292 CVE-2006-3665 ignore (squirrelmail) don't enable register_globals!
293 CVE-2006-3636 version (mailman, fixed 2.1.9) [since FEDORA-2006-1013]
294 CVE-2006-3634 version (kernel, fixed 2.6.17.8) [since FEDORA-2006-906] s390 only
295 CVE-2006-3632 version (ethereal, fixed wireshark-0.99.2) [since FEDORA-2006-860]
296 CVE-2006-3631 version (ethereal, fixed wireshark-0.99.2) [since FEDORA-2006-860]
297 CVE-2006-3630 version (ethereal, fixed wireshark-0.99.2) [since FEDORA-2006-860]
298 CVE-2006-3629 version (ethereal, fixed wireshark-0.99.2) [since FEDORA-2006-860]
299 CVE-2006-3628 version (ethereal, fixed wireshark-0.99.2) [since FEDORA-2006-860]
300 CVE-2006-3627 version (ethereal, fixed wireshark-0.99.2) [since FEDORA-2006-860]
301 CVE-2006-3626 version (kernel, fixed 2.6.17.6) [since FEDORA-2006-906]
302 CVE-2006-3619 VULNERABLE (gcc/fastjar)
303 CVE-2006-3486 ignore (mysql, fixed 5.0.23) not exploitable
304 CVE-2006-3469 VULNERABLE (mysql)
305 CVE-2006-3468 version (kernel, fixed 2.6.17.8) [since FEDORA-2006-906]
306 CVE-2006-3467 ignore (vnc) #203174 not a vulnerability
307 CVE-2006-3467 backport (libXfont) #202475 [since FEDORA-2006-912]
308 CVE-2006-3467 VULNERABLE (freetype)
309 CVE-2006-3465 backport (libtiff) [since FEDORA-2006-877]
310 CVE-2006-3464 backport (libtiff) [since FEDORA-2006-877]
311 CVE-2006-3463 backport (libtiff) [since FEDORA-2006-877]
312 CVE-2006-3462 backport (libtiff) [since FEDORA-2006-877]
313 CVE-2006-3461 backport (libtiff) [since FEDORA-2006-877]
314 CVE-2006-3460 backport (libtiff) [since FEDORA-2006-877]
315 CVE-2006-3459 backport (libtiff) [since FEDORA-2006-877]
316 CVE-2006-3404 version (gimp, fixed 2.2.12) #198270 [since FEDORA-2006-794]
317 CVE-2006-3403 version (samba, fixed 3.0.23) #198297 [since FEDORA-2006-807]
318 CVE-2006-3378 ignore (shadow-utils) we don't ship passwd from shadow-utils
319 CVE-2006-3376 backport (libwmf) #198291 [since FEDORA-2006-805]
320 CVE-2006-3352 ignore (firefox) not a vulnerability
321 CVE-2006-3334 ignore (libpng, fixed 1.2.12) not exploitable
322 CVE-2006-3242 backport (mutt, fixed 1.4.2.2, 1.5.12) #197152 [since FEDORA-2006-760]
323 CVE-2006-3174 version (squirrelmail, fixed 1.4.7) #197369 [since FEDORA-2006-788]
324 CVE-2006-3145 version (netpbm, fixed 10.34) [since FEDORA-2006-909]
325 CVE-2006-3127 version (nss, only affected 3.11) [since FEDORA-2006-728]
326 CVE-2006-3122 version (dhcp, only 2.x)
327 CVE-2006-3117 backport (openoffice.org, fixed 2.0.3) [since FEDORA-2006-770]
328 CVE-2006-3113 version (thunderbird, fixed 1.5.0.5) [since FEDORA-2006-903]
329 CVE-2006-3113 version (firefox, fixed 1.5.0.5) [since FEDORA-2006-902]
330 CVE-2006-3113 VULNERABLE (mozilla)
331 CVE-2006-3085 version (kernel, fixed 2.6.16.21, fixed 2.6.17.1) [since FEDORA-2006-735]
332 CVE-2006-3084 ignore (krb5) seteuid() calls never fail on linux
333 CVE-2006-3083 backport (krb5, fixed 1.5.1, 1.4.4) [since FEDORA-2006-905]
334 CVE-2006-3082 version (gnupg, fixed 1.4.4) #195946 [since FEDORA-2006-755]
335 CVE-2006-3081 version (mysql, fixed 5.1.18) [since FEDORA-2006-702]
336 CVE-2006-3057 version (dhcdbd, fixed 1.14) [since FEDORA-2006-609]
337 CVE-2006-3018 ignore (php, fixed 5.1.3) no verification of flaw
338 CVE-2006-3017 version (php, fixed 5.1.3) #197379 [since FEDORA-2006-1024]
339 CVE-2006-3016 version (php, fixed 5.1.3) [since FEDORA-2006-1024]
340 CVE-2006-3011 version (php, fixed 5.1.5) [since FEDORA-2006-1024]
341 CVE-2006-3005 ignore (libjpeg) not a vuln
342 CVE-2006-2941 version (mailman, fixed 2.1.9) [since FEDORA-2006-1013]
343 CVE-2006-2940 backport (openssl, fixed 0.9.8d) [since FEDORA-2006-1004]
344 CVE-2006-2937 backport (openssl, fixed 0.9.8d) [since FEDORA-2006-1004]
345 CVE-2006-2936 version (kernel, fixed 2.6.16.27, fixed 2.6.17.7) [since FEDORA-2006-906]
346 CVE-2006-2935 version (kernel, fixed 2.6.17.7) [since FEDORA-2006-906]
347 CVE-2006-2934 version (kernel, fixed 2.6.17.3) [since FEDORA-2006-772]
348 CVE-2006-2933 version (kde, not 3.2+)
349 CVE-2006-2932 ignore (kernel) no 4G/4G split support
350 CVE-2006-2916 ignore (arts) not shipped setuid
351 CVE-2006-2906 VULNERABLE (gd) #194520
352 CVE-2006-2894 VULNERABLE (mozilla) https://bugzilla.mozilla.org/show_bug.cgi?id=56236
353 CVE-2006-2894 VULNERABLE (firefox) https://bugzilla.mozilla.org/show_bug.cgi?id=56236
354 CVE-2006-2842 version (squirrelmail, fixed 1.4.6) #194286 [since FEDORA-2006-680]
355 CVE-2006-2789 version (evolution, fixed 2.4.X)
356 CVE-2006-2788 version (firefox, fixed 1.5.0.4) [since FEDORA-2006-715]
357 CVE-2006-2787 version (thunderbird, fixed 1.5.0.4) [since FEDORA-2006-717]
358 CVE-2006-2787 version (firefox, fixed 1.5.0.4) [since FEDORA-2006-715]
359 CVE-2006-2787 VULNERABLE (mozilla)
360 CVE-2006-2786 version (thunderbird, fixed 1.5.0.4) [since FEDORA-2006-717]
361 CVE-2006-2786 version (firefox, fixed 1.5.0.4) [since FEDORA-2006-715]
362 CVE-2006-2786 VULNERABLE (mozilla)
363 CVE-2006-2785 version (firefox, fixed 1.5.0.4) [since FEDORA-2006-715]
364 CVE-2006-2785 VULNERABLE (mozilla)
365 CVE-2006-2784 version (firefox, fixed 1.5.0.4) [since FEDORA-2006-715]
366 CVE-2006-2784 VULNERABLE (mozilla)
367 CVE-2006-2783 version (thunderbird, fixed 1.5.0.4) [since FEDORA-2006-717]
368 CVE-2006-2783 version (firefox, fixed 1.5.0.4) [since FEDORA-2006-715]
369 CVE-2006-2783 VULNERABLE (mozilla)
370 CVE-2006-2782 version (firefox, fixed 1.5.0.4) [since FEDORA-2006-715]
371 CVE-2006-2781 version (thunderbird, fixed 1.5.0.4) [since FEDORA-2006-717]
372 CVE-2006-2780 version (thunderbird, fixed 1.5.0.4) [since FEDORA-2006-717]
373 CVE-2006-2780 VULNERABLE (mozilla)
374 CVE-2006-2780 VULNERABLE (firefox)
375 CVE-2006-2779 version (thunderbird, fixed 1.5.0.4) [since FEDORA-2006-717]
376 CVE-2006-2779 version (firefox, fixed 1.5.0.4) [since FEDORA-2006-715]
377 CVE-2006-2779 VULNERABLE (mozilla)
378 CVE-2006-2778 version (thunderbird, fixed 1.5.0.4) [since FEDORA-2006-717]
379 CVE-2006-2778 version (firefox, fixed 1.5.0.4) [since FEDORA-2006-715]
380 CVE-2006-2778 VULNERABLE (mozilla)
381 CVE-2006-2777 version (firefox, fixed 1.5.0.4) [since FEDORA-2006-715]
382 CVE-2006-2777 VULNERABLE (mozilla)
383 CVE-2006-2776 version (thunderbird, fixed 1.5.0.4) [since FEDORA-2006-717]
384 CVE-2006-2776 version (firefox, fixed 1.5.0.4) [since FEDORA-2006-715]
385 CVE-2006-2776 VULNERABLE (mozilla)
386 CVE-2006-2775 version (thunderbird, fixed 1.5.0.4) [since FEDORA-2006-717]
387 CVE-2006-2775 version (firefox, fixed 1.5.0.4) [since FEDORA-2006-715]
388 CVE-2006-2775 VULNERABLE (mozilla)
389 CVE-2006-2754 ignore (openldap) This issue is not exploitable
390 CVE-2006-2753 version (mysql, fixed 5.0.22) #193828 [since FEDORA-2006-702]
391 CVE-2006-2723 ignore (firefox) disputed
392 CVE-2006-2661 VULNERABLE (freetype, fixed 2.2.1) #183677
393 CVE-2006-2660 ignore (php) #195539 see the bug
394 CVE-2006-2656 backport (libtiff) [since FEDORA-2006-592]
395 CVE-2006-2629 ignore (kernel) couldn't be reproduced on FC
396 CVE-2006-2613 ignore (firefox) This isn't an issue on FC
397 CVE-2006-2607 backport (vixie-cron) #177476
398 CVE-2006-2563 ignore (php) safe mode isn't safe
399 CVE-2006-2452 version (gdm) [since FEDORA-2006-674]
400 CVE-2006-2451 version (kernel, fixed 2.6.17.4) [since FEDORA-2006-806]
401 CVE-2006-2449 version (kdebase, fixed 3.5.4) #194659 [since FEDORA-2006-910] was backport since FEDORA-2006-726
402 CVE-2006-2448 version (kernel, fixed 2.6.16.21, fixed 2.6.17) [since FEDORA-2006-735]
403 CVE-2006-2447 version (spamassassin, fixed 3.1.3) #194290 [since FEDORA-2006-598]
404 CVE-2006-2446 version (kernel, fixed 2.6.11)
405 CVE-2006-2445 version (kernel, fixed 2.6.16.21, fixed 2.6.17) [since FEDORA-2006-735]
406 CVE-2006-2444 version (kernel, fixed 2.6.16.18) [since FEDORA-2006-698]
407 CVE-2006-2440 backport (ImageMagick) #192279 [since FEDORA-2006-588]
408 CVE-2006-2414 version (dovecot, fixed 1.0.beta8) [since FEDORA-2006-647] is not a security issue
409 CVE-2006-2369 backport (vnc, fixed 4.1.2) #191692 [since FEDORA-2006-558]
410 CVE-2006-2366 ignore (openobex) we don't ship ircp
411 CVE-2006-2362 ignore (binutils) minor crash (not exploitable)
412 CVE-2006-2332 ignore (firefox) disputed
413 CVE-2006-2314 version (postgresql, fixed 8.1.4) [since FEODRA-2006-578]
414 CVE-2006-2313 version (postgresql, fixed 8.1.4) [since FEODRA-2006-578]
415 CVE-2006-2276 version (quagga, fixed 0.98.6) #191377 [since FEDORA-2006-845]
416 CVE-2006-2275 version (kernel, fixed 2.6.16.15) [since FEDORA-2006-572]
417 CVE-2006-2274 version (kernel, fixed 2.6.16.15) [since FEDORA-2006-572]
418 CVE-2006-2272 version (kernel, fixed 2.6.16.15) [since FEDORA-2006-572]
419 CVE-2006-2271 version (kernel, fixed 2.6.16.15) [since FEDORA-2006-572]
420 CVE-2006-2224 version (quagga, fixed 0.98.6) #191085 [since FEDORA-2006-845]
421 CVE-2006-2223 version (quagga, fixed 0.98.6) #191081 [since FEDORA-2006-845]
422 CVE-2006-2199 backport (openoffice.org, fixed 2.0.3) [since FEDORA-2006-770]
423 CVE-2006-2198 backport (openoffice.org, fixed 2.0.3) [since FEDORA-2006-770]
424 CVE-2006-2194 ignore (ppp) pppd not suid
425 CVE-2006-2193 backport (libtiff) #194363 [since FEDORA-2006-952]
426 CVE-2006-2191 ignore (mailman) disputed
427 CVE-2006-2120 backport (libtiff) #189976 [since FEDORA-2006-473]
428 CVE-2006-2083 version (rsync, fixed 2.6.8) #190208 [since FEDORA-2006-599]
429 CVE-2006-2073 ignore (bind) http://www.kb.cert.org/vuls/id/MIMG-6P8GRP
430 CVE-2006-2071 version (kernel, fixed 2.6.16.6) [since FEDORA-2006-421]
431 CVE-2006-2057 ignore (firefox) not Linux
432 CVE-2006-2026 backport (libtiff, fixed 3.8.1) #189934 [since FEDORA-2006-473]
433 CVE-2006-2025 backport (libtiff, fixed 3.8.1) #189934 [since FEDORA-2006-473]
434 CVE-2006-2024 backport (libtiff, fixed 3.8.1) #189934 [since FEDORA-2006-473]
435 CVE-2006-1993 version (firefox, fixed 1.5.0.3) #190124 [since FEDORA-2006-547]
436 CVE-2006-1991 version (php) #190034 [since FEDORA-2006-289]
437 CVE-2006-1990 version (php) #190034 [since FEDORA-2006-289]
438 CVE-2006-1942 version (firefox, fixed 1.5.0.4) [since FEDORA-2006-715]
439 CVE-2006-1940 version (ethereal, fixed 0.99.0) #189909 [since FEDORA-2006-456]
440 CVE-2006-1939 version (ethereal, fixed 0.99.0) #189909 [since FEDORA-2006-456]
441 CVE-2006-1938 version (ethereal, fixed 0.99.0) #189909 [since FEDORA-2006-456]
442 CVE-2006-1937 version (ethereal, fixed 0.99.0) #189909 [since FEDORA-2006-456]
443 CVE-2006-1936 version (ethereal, fixed 0.99.0) #189909 [since FEDORA-2006-456]
444 CVE-2006-1935 version (ethereal, fixed 0.99.0) #189909 [since FEDORA-2006-456]
445 CVE-2006-1934 version (ethereal, fixed 0.99.0) #189909 [since FEDORA-2006-456]
446 CVE-2006-1933 version (ethereal, fixed 0.99.0) #189909 [since FEDORA-2006-456]
447 CVE-2006-1932 version (ethereal, fixed 0.99.0) #189909 [since FEDORA-2006-456]
448 CVE-2006-1931 version (ruby, fixed 1.8.3) #189540
449 CVE-2006-1902 ignore (gcc) not a vulnerability
450 CVE-2006-1865 version (beagle, fixed 0.2.5) [since FEDORA-2006-440]
451 CVE-2006-1864 ignore (kernel, fixed 2.6.16.14) not compiled in
452 CVE-2006-1863 version (kernel, fixed 2.6.16.11) [since FEDORA-2006-499]
453 CVE-2006-1862 version (kernel) not upstream kernels, only RHEL
454 CVE-2006-1861 VULNERABLE (freetype, fixed 2.2.1) #191771
455 CVE-2006-1860 version (kernel, fixed 2.6.16.16) [since FEDORA-2006-572]
456 CVE-2006-1859 version (kernel, fixed 2.6.16.16) [since FEDORA-2006-572]
457 CVE-2006-1858 version (kernel, fixed 2.6.16.17) [since FEDORA-2006-572]
458 CVE-2006-1857 version (kernel, fixed 2.6.16.17) [since FEDORA-2006-572]
459 CVE-2006-1856 version (kernel, fixed 2.6.16.12) [since FEDORA-2006-499]
460 CVE-2006-1855 version (kernel, fixed 2.6.11.12)
461 CVE-2006-1790 version (thunderbird, fixed 1.5.0.2) [since FEDORA-2006-490]
462 CVE-2006-1790 version (mozilla, fixed 1.7.13) [since FEDORA-2006-487]
463 CVE-2006-1790 version (firefox, fixed 1.5.0.2) [since FEDORA-2006-411]
464 CVE-2006-1742 version (thunderbird, fixed 1.5.0.2) [since FEDORA-2006-490]
465 CVE-2006-1742 version (mozilla, fixed 1.7.13) [since FEDORA-2006-487]
466 CVE-2006-1742 version (firefox, fixed 1.5.0.2) [since FEDORA-2006-411]
467 CVE-2006-1741 version (thunderbird, fixed 1.5.0.2) [since FEDORA-2006-490]
468 CVE-2006-1741 version (mozilla, fixed 1.7.13) [since FEDORA-2006-487]
469 CVE-2006-1741 version (firefox, fixed 1.5.0.2) [since FEDORA-2006-411]
470 CVE-2006-1740 version (mozilla, fixed 1.7.13) [since FEDORA-2006-487]
471 CVE-2006-1740 version (firefox, fixed 1.5.0.2) [since FEDORA-2006-411]
472 CVE-2006-1739 version (thunderbird, fixed 1.5.0.2) [since FEDORA-2006-490]
473 CVE-2006-1739 version (mozilla, fixed 1.7.13) [since FEDORA-2006-487]
474 CVE-2006-1739 version (firefox, fixed 1.5.0.2) [since FEDORA-2006-411]
475 CVE-2006-1738 version (thunderbird, fixed 1.5.0.2) [since FEDORA-2006-490]
476 CVE-2006-1738 version (mozilla, fixed 1.7.13) [since FEDORA-2006-487]
477 CVE-2006-1738 version (firefox, fixed 1.5.0.2) [since FEDORA-2006-411]
478 CVE-2006-1737 version (thunderbird, fixed 1.5.0.2) [since FEDORA-2006-490]
479 CVE-2006-1737 version (mozilla, fixed 1.7.13) [since FEDORA-2006-487]
480 CVE-2006-1737 version (firefox, fixed 1.5.0.2) [since FEDORA-2006-411]
481 CVE-2006-1736 versions (firefox, fixed 1.5.0.2) [since FEDORA-2006-411]
482 CVE-2006-1736 version (mozilla, fixed 1.7.13) [since FEDORA-2006-487]
483 CVE-2006-1735 version (thunderbird, fixed 1.5.0.2) [since FEDORA-2006-490]
484 CVE-2006-1735 version (mozilla, fixed 1.7.13) [since FEDORA-2006-487]
485 CVE-2006-1735 version (firefox, fixed 1.5.0.2) [since FEDORA-2006-411]
486 CVE-2006-1734 version (thunderbird, fixed 1.5.0.2) [since FEDORA-2006-490]
487 CVE-2006-1734 version (mozilla, fixed 1.7.13) [since FEDORA-2006-487]
488 CVE-2006-1734 version (firefox, fixed 1.5.0.2) [since FEDORA-2006-411]
489 CVE-2006-1733 version (thunderbird, fixed 1.5.0.2) [since FEDORA-2006-490]
490 CVE-2006-1733 version (mozilla, fixed 1.7.13) [since FEDORA-2006-487]
491 CVE-2006-1733 version (firefox, fixed 1.5.0.2) [since FEDORA-2006-411]
492 CVE-2006-1732 version (thunderbird, fixed 1.5.0.2) [since FEDORA-2006-490]
493 CVE-2006-1732 version (mozilla, fixed 1.7.13) [since FEDORA-2006-487]
494 CVE-2006-1732 version (firefox, fixed 1.5.0.2) [since FEDORA-2006-411]
495 CVE-2006-1731 version (thunderbird, fixed 1.5.0.2) [since FEDORA-2006-490]
496 CVE-2006-1731 version (mozilla, fixed 1.7.13) [since FEDORA-2006-487]
497 CVE-2006-1731 version (firefox, fixed 1.5.0.2) [since FEDORA-2006-411]
498 CVE-2006-1730 version (thunderbird, fixed 1.5.0.2) [since FEDORA-2006-490]
499 CVE-2006-1730 version (mozilla, fixed 1.7.13) [since FEDORA-2006-487]
500 CVE-2006-1730 version (firefox, fixed 1.5.0.2) [since FEDORA-2006-411]
501 CVE-2006-1729 version (mozilla, fixed 1.7.13) [since FEDORA-2006-487]
502 CVE-2006-1729 version (firefox, fixed 1.5.0.2) [since FEDORA-2006-411]
503 CVE-2006-1728 version (thunderbird, fixed 1.5.0.2) [since FEDORA-2006-490]
504 CVE-2006-1728 version (mozilla, fixed 1.7.13) [since FEDORA-2006-487]
505 CVE-2006-1728 version (firefox, fixed 1.5.0.2) [since FEDORA-2006-411]
506 CVE-2006-1727 version (thunderbird, fixed 1.5.0.2) [since FEDORA-2006-490]
507 CVE-2006-1727 version (mozilla, fixed 1.7.13) [since FEDORA-2006-487]
508 CVE-2006-1727 version (firefox, fixed 1.5.0.2) [since FEDORA-2006-411]
509 CVE-2006-1726 version (thunderbird, fixed 1.5.0.2) [since FEDORA-2006-490]
510 CVE-2006-1726 version (firefox, fixed 1.5.0.2) [since FEDORA-2006-411]
511 CVE-2006-1725 version (firefox, fixed 1.5.0.2) [since FEDORA-2006-411]
512 CVE-2006-1724 version (thunderbird, fixed 1.5.0.2) [since FEDORA-2006-490]
513 CVE-2006-1724 version (mozilla, fixed 1.7.13) [since FEDORA-2006-487]
514 CVE-2006-1724 version (firefox, fixed 1.5.0.2) [since FEDORA-2006-411]
515 CVE-2006-1723 version (thunderbird, fixed 1.5.0.2) [since FEDORA-2006-490]
516 CVE-2006-1723 version (firefox, fixed 1.5.0.2) [since FEDORA-2006-411]
517 CVE-2006-1721 version (cyrus-sasl, fixed 2.1.21)
518 CVE-2006-1712 version (mailman, only 2.1.7) #188605 [since FEDORA-2006-535]
519 CVE-2006-1650 ignore (firefox) a number of reports don't confirm this
520 CVE-2006-1646 ignore (ipsec-tools) KAME racoon, not ipsec-tools racoon
521 CVE-2006-1624 ignore (sysklogd) Silly configuration is not a security issue
522 CVE-2006-1608 ignore (php) safe mode isn't safe
523 CVE-2006-1549 ignore (php) this is not a security issue
524 CVE-2006-1548 VULNERABLE (struts, fixed 1.2.9) #187544
525 CVE-2006-1547 VULNERABLE (struts, fixed 1.2.9) #187544
526 CVE-2006-1546 VULNERABLE (struts, fixed 1.2.9) #187544
527 CVE-2006-1542 backport (python) #169046 [since FEDORA-2006-689]
528 CVE-2006-1531 version (thunderbird, fixed 1.5.0.2) [since FEDORA-2006-490]
529 CVE-2006-1531 version (firefox, fixed 1.5.0.2) [since FEDORA-2006-411]
530 CVE-2006-1530 version (thunderbird, fixed 1.5.0.2) [since FEDORA-2006-490]
531 CVE-2006-1530 version (firefox, fixed 1.5.0.2) [since FEDORA-2006-411]
532 CVE-2006-1529 version (thunderbird, fixed 1.5.0.2) [since FEDORA-2006-490]
533 CVE-2006-1529 version (firefox, fixed 1.5.0.2) [since FEDORA-2006-411]
534 CVE-2006-1528 version (kernel, fixed 2.6.13)
535 CVE-2006-1527 version (kernel, fixed 2.6.16.13, fixed 2.6.17-rc4) [since FEDORA-2006-499]
536 CVE-2006-1526 backport (xorg-x11-server, fixed 1.1.1 at least) #189802 [since FEDORA-2006-483] xorg-x11-server-1.0.1-render-tris-CVE-2006-1526.patch
537 CVE-2006-1525 version (kernel, fixed 2.6.16.8) [since FEDORA-2006-421]
538 CVE-2006-1524 version (kernel, fixed 2.6.16.7) [since FEDORA-2006-421]
539 CVE-2006-1523 version (kernel, fixed 2.6.16.4) [since FEDORA-2006-421]
540 CVE-2006-1522 version (kernel, fixed 2.6.16.3) [since FEDORA-2006-421]
541 CVE-2006-1518 version (mysql, fixed 5.0.21) #190870 [since FEDORA-2006-553]
542 CVE-2006-1517 version (mysql, fixed 5.0.21) #190870 [since FEDORA-2006-553]
543 CVE-2006-1516 version (mysql, fixed 5.0.21) #190870 [since FEDORA-2006-553]
544 CVE-2006-1494 version (php) #189592 [since FEDORA-2006-289]
545 CVE-2006-1490 version (php, fixed 5.1.4) [since FEDORA-2006-289]
546 CVE-2006-1470 version (openldap, not 2.3.24 at least) #197278
547 CVE-2006-1368 version (kernel, fixed 2.6.16) [since FEDORA-2006-233]
548 CVE-2006-1354 VULNERABLE (freeradius, fixed 1.1.2 at least) #186084
549 CVE-2006-1343 version (kernel, fixed 2.6.16.19) [since FEDORA-2006-698]
550 CVE-2006-1342 version (kernel, not 2.6) not vulnerable
551 CVE-2006-1335 version (gnome-screensaver, fixed 2.14)
552 CVE-2006-1296 version (beagle, fixed 0.2.4) #185981 [since FEDORA-2006-305] was backport since FEDORA-2006-188
553 CVE-2006-1273 ignore (firefox) this issue only affects IE
554 CVE-2006-1244 ignore (xpdf) duplicate of other cve named issues
555 CVE-2006-1242 version (kernel, fixed 2.6.16.1) [since FEDORA-2006-233]
556 CVE-2006-1174 version (shadow-utils, fixed 4.0.3)
557 CVE-2006-1173 version (sendmail, fixed 8.13.7) [since FEDORA-2006-837]
558 CVE-2006-1168 backport (ncompress) #201919 [since FEDORA-2006-922]
559 CVE-2006-1095 ignore (mod_python, 3.2.7 only)
560 CVE-2006-1079 ignore (httpd) not a vulnerability
561 CVE-2006-1078 ignore (httpd) not a vulnerability
562 CVE-2006-1066 version (kernel, fixed 2.6.16) [since FEDORA-2006-233]
563 CVE-2006-1061 version (curl, fixed 7.15.3) [since FEDORA-2006-933] was backport since FEDORA-2006-189
564 CVE-2006-1059 version (samba, fixed 3.0.22 at least) #187170 [since FEDORA-2006-259]
565 CVE-2006-1058 backport (busybox) #187386 [since FEDORA-2006-510]
566 CVE-2006-1057 version (gdm, fixed 2.14.1) #188303 [since FEDORA-2006-338]
567 CVE-2006-1056 version (kernel, fixed 2.6.16.9) [since FEDORA-2006-421]
568 CVE-2006-1055 version (kernel, fixed 2.6.17-rc1) [since FEDORA-2006-421]
569 CVE-2006-1052 version (kernel, fixed 2.6.16) [since FEDORA-2006-421] was patch-2.6.16-rc6 since FEDORA-2006-233
570 CVE-2006-1045 version (thunderbird, fixed 1.5.0.2) [since FEDORA-2006-490]
571 CVE-2006-1015 ignore (php) safe mode isn't safe
572 CVE-2006-1014 ignore (php) safe mode isn't safe
573 CVE-2006-0996 version (php, fixed 5.1.4) #187511 [since FEDORA-2006-289]
574 CVE-2006-0903 version (mysql, 4.1.19) #183261 [since FEDORA-2006-553]
575 CVE-2006-0884 version (thunderbird, fixed 1.5.0.2) [since FEDORA-2006-490]
576 CVE-2006-0836 ignore (thunderbird) only crash on manual import
577 CVE-2006-0749 version (thunderbird, fixed 1.5.0.2) [since FEDORA-2006-490]
578 CVE-2006-0749 version (mozilla, fixed 1.7.13) [since FEDORA-2006-487]
579 CVE-2006-0749 version (firefox, fixed 1.5.0.2) [since FEDORA-2006-411]
580 CVE-2006-0748 version (thunderbird, fixed 1.5.0.2) [since FEDORA-2006-490]
581 CVE-2006-0748 version (mozilla, fixed 1.7.13) [since FEDORA-2006-487]
582 CVE-2006-0748 version (firefox, fixed 1.5.0.2) [since FEDORA-2006-411]
583 CVE-2006-0747 VULNERABLE (freetype, fixed 2.2.1) #183677
584 CVE-2006-0746 version (kdegraphics, fixed 3.4)
585 CVE-2006-0745 backport (xorg-x11-server, fixed 1.1.1 at least) [since FEDORA-2006-172] xorg-server-1.0.1-CVE-2006-0745.patch
586 CVE-2006-0744 version (kernel, fixed 2.6.16.5) [since FEDORA-2006-421]
587 CVE-2006-0742 version (kernel, fixed 2.6.16) patch-2.6.16-rc6 [since FEDORA-2006-233]
588 CVE-2006-0741 version (kernel, fixed 2.6.15.5) patch-2.6.16-rc6 [since FEDORA-2006-233]
589 CVE-2006-0730 version (dovecot, 1.0beta[12] only)
590 CVE-2006-0678 ignore (postgresql) we don't build --enable-cassert
591 CVE-2006-0670 VULNERABLE (bluez-hcidump)
592 CVE-2006-0645 version (gnutls, fixed 1.2.10)
593 CVE-2006-0591 version (postgresql, fixed 8.0.6)
594 CVE-2006-0576 backport (oprofile, fixed 0.9.2 at least) oprofile_opcontrol.patch
595 CVE-2006-0558 version (kernel, fixed 2.6.16) [since FEDORA-2006-233]
596 CVE-2006-0557 version (kernel, fixed 2.6.15.6) patch-2.6.16-rc6 [since FEDORA-2006-233]
597 CVE-2006-0555 version (kernel, fixed 2.6.16) patch-2.6.16-rc6-git3 [since FEDORA-2006-233]
598 CVE-2006-0554 version (kernel, fixed 2.6.16) patch-2.6.16-rc6 [since FEDORA-2006-233]
599 CVE-2006-0553 version (postgresql, only 8.1, fixed 8.1.3)
600 CVE-2006-0528 backport (cairo) cairo-1.0.2-chunk-glyphs-CVE-2006-0528.patch
601 CVE-2006-0496 VULNERABLE (mozilla) https://bugzilla.mozilla.org/show_bug.cgi?id=324253
602 CVE-2006-0496 VULNERABLE (firefox) https://bugzilla.mozilla.org/show_bug.cgi?id=324253
603 CVE-2006-0482 ignore (kernel) sparc only
604 CVE-2006-0481 version (libpng, 1.2.7 only)
605 CVE-2006-0459 version (flex) by inspection
606 CVE-2006-0457 version (kernel, fixed 2.6.16) patch-2.6.16-rc6 [since FEDORA-2006-233]
607 CVE-2006-0456 ignore (kernel, s390 only)
608 CVE-2006-0455 version (gnupg, fixed 1.4.2.1)
609 CVE-2006-0454 version (kernel, fixed 2.6.15.3) patch-2.6.16-rc6 [since FEDORA-2006-233]
610 CVE-2006-0405 version (libtiff, 3.8.0 only)
611 CVE-2006-0377 version (squirrelmail, fixed 1.4.6)
612 CVE-2006-0369 ignore (mysql) this is not a security issue
613 CVE-2006-0321 version (fetchmail, fixed 6.3.2)
614 CVE-2006-0301 version (poppler, fixed 0.4.5)
615 CVE-2006-0301 version (kdegraphics, fixed 3.5.2) [since FEDORA-2006-352] was backport since GA
616 CVE-2006-0301 backport (xpdf) xpdf-3.01pl2.patch
617 CVE-2006-0300 version (tar, fixed 1.15.90 at least) [since FEDORA-2006-958]
618 CVE-2006-0299 version (thunderbird, fixed 1.5)
619 CVE-2006-0299 version (mozilla, 1.8 branch only)
620 CVE-2006-0299 version (firefox, fixed 1.5.0.1)
621 CVE-2006-0298 version (thunderbird, fixed 1.5)
622 CVE-2006-0298 version (mozilla, 1.8 branch only)
623 CVE-2006-0298 version (firefox, fixed 1.5.0.1)
624 CVE-2006-0297 version (thunderbird, fixed 1.5)
625 CVE-2006-0297 version (mozilla, 1.8 branch only)
626 CVE-2006-0297 version (firefox, fixed 1.5.0.1)
627 CVE-2006-0296 version (thunderbird, fixed 1.5) [since FEDORA-2006-490]
628 CVE-2006-0296 version (firefox, fixed 1.5.0.1)
629 CVE-2006-0296 backport (mozilla) mozilla-1.7.12-CVE-2006-0296-XULDocument.persist.patch
630 CVE-2006-0295 version (thunderbird, fixed 1.5)
631 CVE-2006-0295 version (mozilla, 1.8 branch only)
632 CVE-2006-0295 version (firefox, fixed 1.5.0.1)
633 CVE-2006-0294 version (thunderbird, fixed 1.5)
634 CVE-2006-0294 version (mozilla, 1.8 branch only)
635 CVE-2006-0294 version (firefox, fixed 1.5.0.1)
636 CVE-2006-0293 version (thunderbird, fixed 1.5)
637 CVE-2006-0293 version (mozilla, 1.8 branch only)
638 CVE-2006-0293 version (firefox, fixed 1.5.0.1)
639 CVE-2006-0292 version (thunderbird, fixed 1.5) [since FEDORA-2006-490]
640 CVE-2006-0292 version (firefox, fixed 1.5.1)
641 CVE-2006-0292 backport (mozilla) mozilla-1.7.12-CVE-2006-0292-javascript-unrooted.patch
642 CVE-2006-0254 backport (tomcat5, fixed 5.5.16)
643 CVE-2006-0236 ignore (thunderbird) windows only
644 CVE-2006-0225 version (openssh, fixed 4.3p2)
645 CVE-2006-0208 version (php, fixed 5.1.2)
646 CVE-2006-0207 version (php, fixed 5.1.2)
647 CVE-2006-0200 version (php, fixed 5.1.2)
648 CVE-2006-0197 ignore (xorg-x11) not an issue
649 CVE-2006-0195 version (squirrelmail, fixed 1.4.6)
650 CVE-2006-0188 version (squirrelmail, fixed 1.4.6)
651 CVE-2006-0144 version (php-pear, not 1.4.4)
652 CVE-2006-0097 ignore (php) Windows only
653 CVE-2006-0096 ignore (kernel) minor and requires root
654 CVE-2006-0095 version (kernel, fixed 2.6.16) patch-2.6.16-rc6 [since FEDORA-2006-233]
655 CVE-2006-0082 version (ImageMagick, not 6.2.5.4)
656 CVE-2006-0058 version (sendmail, fixed 8.13.6) [since FEDORA-2006-193]
657 CVE-2006-0052 version (mailman, fixed 2.1.6)
658 CVE-2006-0049 version (gnupg, fixed 1.4.2.2)
659 CVE-2006-0040 VULNERABLE (gtkhtml) #183680 no upstream fix
660 CVE-2006-0040 ** (gtkhtml3)
661 CVE-2006-0040 ** (gtkhtml2)
662 CVE-2006-0039 version (kernel, fixed 2.6.16.17) [since FEDORA-2006-572]
663 CVE-2006-0037 version (kernel, only 2.6.14 and 2.6.15) patch-2.6.16-rc6 [since FEDORA-2006-233]
664 CVE-2006-0036 version (kernel, only 2.6.14 and 2.6.15) patch-2.6.16-rc6 [since FEDORA-2006-233]
665 CVE-2006-0035 version (kernel, only 2.6.14 and 2.6.15) patch-2.6.16-rc6 [since FEDORA-2006-233]
666 CVE-2006-0019 version (kdelibs, fixed 3.5.1)
667 CVE-2005-4811 version (kernel, fixed 2.6.13)
668 CVE-2005-4809 VULNERABLE (seamonkey)
669 CVE-2005-4809 VULNERABLE (firefox)
670 CVE-2005-4808 ignore (binutils, gas fixed 20050714) this is a bug
671 CVE-2005-4807 ignore (binutils, gas fixed 20050721) this is a bug
672 CVE-2005-4798 version (kernel, not 2.6)
673 CVE-2005-4784 ignore (glibc) struct dirent is big enough
674 CVE-2005-4746 version (freeradius) we don't build vulnerable bits
675 CVE-2005-4745 version (freeradius) we don't build vulnerable bits
676 CVE-2005-4744 version (freeradius, fixed 1.0.5)
677 CVE-2005-4720 version (thunderbird, fixed 1.5)
678 CVE-2005-4720 version (firefox, fixed 1.5)
679 CVE-2005-4720 VULNERABLE (mozilla) not fixed upstream plus only DoS
680 CVE-2005-4703 ignore (tomcat) windows only
681 CVE-2005-4685 ignore (mozilla) not fixed upstream, low, can't fix
682 CVE-2005-4685 ignore (firefox) not fixed upstream, low, can't fix
683 CVE-2005-4684 ignore (kdebase) not fixed upstream, low, can't fix
684 CVE-2005-4667 backport (unzip)
685 CVE-2005-4639 version (kernel, fixed 2.6.15)
686 CVE-2005-4636 version (openoffice.org, fixed 2.0.1)
687 CVE-2005-4635 version (kernel, fixed 2.6.15)
688 CVE-2005-4618 version (kernel, fixed 2.6.15)
689 CVE-2005-4605 version (kernel, fixed 2.6.15)
690 CVE-2005-4585 version (ethereal, fixed 0.10.14)
691 CVE-2005-4442 version (openldap) gentoo only
692 CVE-2005-4352 version (kernel, fixed 2.6.18.3) [since FEDORA-2006-1470]
693 CVE-2005-4348 version (fetchmail, fixed 6.3.1)
694 CVE-2005-4268 backport (cpio) also blocked by FORTIFY_SOURCE
695 CVE-2005-4158 ignore (sudo) only env_reset will properly clean the environment
696 CVE-2005-4154 ignore (php) don't install untrusted pear packages
697 CVE-2005-4153 version (mailman) [since FEDORA-2006-535] was backport mailman-2.1.5-date_overflows.patch since GA
698 CVE-2005-4134 ignore (firefox) http://www.mozilla.org/security/history-title.html
699 CVE-2005-4134 backport (mozilla) mozilla-1.7.12-CVE-2005-4134-long-history-dos.patch
700 CVE-2005-4130 ignore (HelixPlayer) not verified
701 CVE-2005-4126 ignore (HelixPlayer) not verified
702 CVE-2005-4077 version (curl, fixed 7.15.1)
703 CVE-2005-3964 backport (openmotif)
704 CVE-2005-3962 version (perl, fixed 5.8.8)
705 CVE-2005-3896 ignore (mozilla) recoverable DoS only
706 CVE-2005-3883 version (php, fixed 5.1.1 at least)
707 CVE-2005-3858 version (kernel, fixed 2.6.13)
708 CVE-2005-3857 version (kernel, fixed 2.6.15)
709 CVE-2005-3848 version (kernel, fixed 2.6.13)
710 CVE-2005-3847 version (kernel, fixed 2.6.12.6)
711 CVE-2005-3810 version (kernel, fixed 2.6.15)
712 CVE-2005-3809 version (kernel, fixed 2.6.15)
713 CVE-2005-3808 version (kernel, fixed 2.6.15)
714 CVE-2005-3807 version (kernel, fixed 2.6.15)
715 CVE-2005-3806 version (kernel, fixed 2.6.14)
716 CVE-2005-3805 version (kernel, fixed 2.6.14)
717 CVE-2005-3784 version (kernel, fixed 2.6.15)
718 CVE-2005-3783 version (kernel, fixed 2.6.15)
719 CVE-2005-3753 version (kernel, fixed 2.6.14) also not a vuln
720 CVE-2005-3745 ignore (struts, fixed 1.2.8) but not through tomcat
721 CVE-2005-3732 version (ipsec-tools, fixed 0.6.3)
722 CVE-2005-3675 VULNERABLE (kernel) optack, no upstream fix
723 CVE-2005-3671 version (openswan, fixed 2.4.4)
724 CVE-2005-3662 version (netpbm)
725 CVE-2005-3656 version (mod_auth_pgsql, fixed 2.0.3)
726 CVE-2005-3651 version (ethereal, fixed 0.10.14)
727 CVE-2005-3632 version (netpbm)
728 CVE-2005-3631 version (udev)
729 CVE-2005-3629 version (initscripts, fixed 8.29 at least)
730 CVE-2005-3628 version (poppler, fixed 0.4.4)
731 CVE-2005-3628 version (kdegraphics, fixed 3.5.1)
732 CVE-2005-3628 version (cups, fixed 1.2.0) [since FEDORA-2006-252] was backport since GA
733 CVE-2005-3628 backport (xpdf) xpdf-3.01pl2.patch
734 CVE-2005-3628 backport (tetex) tetex-3.0-CVE-2005-3193.patch
735 CVE-2005-3627 version (poppler, fixed 0.4.4)
736 CVE-2005-3627 version (kdegraphics, fixed 3.5.1)
737 CVE-2005-3627 version (cups, fixed 1.2.0) [since FEDORA-2006-252] was backport since GA
738 CVE-2005-3627 backport (xpdf) xpdf-3.01pl2.patch
739 CVE-2005-3627 backport (tetex)
740 CVE-2005-3626 version (poppler, fixed 0.4.4)
741 CVE-2005-3626 version (kdegraphics, fixed 3.5.1)
742 CVE-2005-3626 version (cups, fixed 1.2.0) [since FEDORA-2006-252] was backport since GA
743 CVE-2005-3626 backport (xpdf) xpdf-3.01pl2.patch
744 CVE-2005-3626 backport (tetex)
745 CVE-2005-3625 version (poppler, fixed 0.4.4)
746 CVE-2005-3625 version (kdegraphics, fixed 3.5.1)
747 CVE-2005-3625 version (cups, fixed 1.2.0) [since FEDORA-2006-252] was backport since GA
748 CVE-2005-3625 backport (xpdf) xpdf-3.01pl2.patch
749 CVE-2005-3625 backport (tetex)
750 CVE-2005-3624 version (poppler, fixed 0.4.4)
751 CVE-2005-3624 version (kdegraphics, fixed 3.5.1)
752 CVE-2005-3624 version (cups, fixed 1.2.0) [since FEDORA-2006-252] was backport since GA
753 CVE-2005-3624 backport (xpdf) xpdf-3.01pl2.patch
754 CVE-2005-3624 backport (tetex)
755 CVE-2005-3623 version (kernel, fixed 2.6.14.5)
756 CVE-2005-3582 version (ImageMagick) gentoo only
757 CVE-2005-3573 version (mailman, fixed 2.1.7)
758 CVE-2005-3527 version (kernel, fixed 2.6.14 at least)
759 CVE-2005-3402 ignore (thunderbird) mozilla say by design
760 CVE-2005-3392 version (php, not 5.0)
761 CVE-2005-3391 version (php, not 5.0)
762 CVE-2005-3390 version (php, fixed 5.1.0)
763 CVE-2005-3389 version (php, fixed 5.1.1)
764 CVE-2005-3388 version (php, fixed 5.1.1)
765 CVE-2005-3359 version (kernel, fixed 2.6.14)
766 CVE-2005-3358 version (kernel, fixed 2.6.11)
767 CVE-2005-3357 version (httpd, fixed 2.2.1) [since FEDORA-2006-364] was backport since GA
768 CVE-2005-3356 version (kernel, fixed 2.6.16) patch-2.6.16-rc6 [since FEDORA-2006-233]
769 CVE-2005-3353 version (php, not 5.0)
770 CVE-2005-3352 version (httpd, fixed 2.2.1) [since FEDORA-2006-364] was backport since GA
771 CVE-2005-3351 version (spamassassin, fixed 3.1.0)
772 CVE-2005-3322 version (squid) not upstream, SUSE only
773 CVE-2005-3319 ignore (mod_php) no security consequence
774 CVE-2005-3313 version (ethereal, fixed after 0.10.13)
775 CVE-2005-3276 version (kernel, fixed 2.6.12.4)
776 CVE-2005-3275 version (kernel, fixed 2.6.13)
777 CVE-2005-3274 version (kernel, fixed 2.6.13)
778 CVE-2005-3273 version (kernel, fixed 2.6.12)
779 CVE-2005-3272 version (kernel, fixed 2.6.13)
780 CVE-2005-3271 version (kernel, fixed 2.6.9)
781 CVE-2005-3258 version (squid, fixed 2.5STABLE12)
782 CVE-2005-3257 version (kernel, fixed 2.6.15)
783 CVE-2005-3249 version (ethereal, fixed 0.10.13)
784 CVE-2005-3248 version (ethereal, fixed 0.10.13)
785 CVE-2005-3247 version (ethereal, fixed 0.10.13)
786 CVE-2005-3246 version (ethereal, fixed 0.10.13)
787 CVE-2005-3245 version (ethereal, fixed 0.10.13)
788 CVE-2005-3244 version (ethereal, fixed 0.10.13)
789 CVE-2005-3243 version (ethereal, fixed 0.10.13)
790 CVE-2005-3242 version (ethereal, fixed 0.10.13)
791 CVE-2005-3241 version (ethereal, fixed 0.10.13)
792 CVE-2005-3193 version (poppler, fixed 0.4.4)
793 CVE-2005-3193 version (kdegraphics, fixed 3.5.1)
794 CVE-2005-3193 version (cups, fixed 1.2.0) [since FEDORA-2006-252] was backport since GA
795 CVE-2005-3193 backport (xpdf) xpdf-3.01pl2.patch
796 CVE-2005-3193 backport (tetex) tetex-3.0-CVE-2005-3193.patch
797 CVE-2005-3192 version (poppler, fixed 0.4.4)
798 CVE-2005-3192 version (kdegraphics, fixed 3.5.1)
799 CVE-2005-3192 version (cups, fixed 1.2.0) [since FEDORA-2006-252] was backport since GA
800 CVE-2005-3192 backport (xpdf) xpdf-3.01pl2.patch
801 CVE-2005-3192 backport (tetex) tetex-3.0-CVE-2005-3193.patch
802 CVE-2005-3191 version (poppler, fixed 0.4.4)
803 CVE-2005-3191 version (kdegraphics, fixed 3.5.1)
804 CVE-2005-3191 version (cups, fixed 1.2.0) [since FEDORA-2006-252] was backport since GA
805 CVE-2005-3191 backport (xpdf) xpdf-3.01pl2.patch
806 CVE-2005-3191 backport (tetex) tetex-3.0-CVE-2005-3193.patch
807 CVE-2005-3186 version (gtk2, fixed 2.8.7 at least)
808 CVE-2005-3186 backport (gdk-pixbuf)
809 CVE-2005-3185 version (wget, fixed 1.10.2 at least)
810 CVE-2005-3185 version (curl, fixed 7.15)
811 CVE-2005-3184 version (ethereal, fixed 0.10.13)
812 CVE-2005-3181 version (kernel, fixed 2.6.13.4 at least)
813 CVE-2005-3180 version (kernel, fixed 2.6.13.4 at least)
814 CVE-2005-3179 version (kernel, fixed 2.6.13.4 at least)
815 CVE-2005-3164 version (tomcat, not 5)
816 CVE-2005-3120 backport (lynx)
817 CVE-2005-3119 version (kernel, fixed 2.6.13.4 at least)
818 CVE-2005-3110 version (kernel, fixed 2.6.12)
819 CVE-2005-3109 version (kernel, fixed 2.6.12)
820 CVE-2005-3108 version (kernel, fixed 2.6.12)
821 CVE-2005-3107 version (kernel, fixed 2.6.11)
822 CVE-2005-3106 version (kernel, fixed 2.6.11)
823 CVE-2005-3105 version (kernel, fixed 2.6.12)
824 CVE-2005-3089 version (firefox, fixed 1.0.7)
825 CVE-2005-3088 ignore (fetchmail) fetchmailconf not shipped
826 CVE-2005-3055 version (kernel, fixed 2.6.14 at least)
827 CVE-2005-3054 ignore (php) see #169857
828 CVE-2005-3053 version (kernel)
829 CVE-2005-3044 version (kernel, fixed 2.6.13.2)
830 CVE-2005-3011 backport (texinfo) texinfo-CAN-2005-3011.patch
831 CVE-2005-2991 ignore (ncompress) don't ship zdiff or zcmp scripts
832 CVE-2005-2978 version (netpbm, fixed 10.25)
833 CVE-2005-2977 version (pam, fixed 0.99.2.1 at least)
834 CVE-2005-2976 backport (gdk-pixbuf)
835 CVE-2005-2975 version (gtk2, fixed 2.8.7)
836 CVE-2005-2975 backport (gdk-pixbuf)
837 CVE-2005-2973 version (kernel, fixed 2.6.14 at least)
838 CVE-2005-2970 version (httpd, fixed 2.0.55)
839 CVE-2005-2969 version (openssl, fixed 0.9.8a)
840 CVE-2005-2969 backport (openssl097a, fixed 0.9.7h)
841 CVE-2005-2968 version (thunderbird)
842 CVE-2005-2968 version (mozilla, not 1.7.10)
843 CVE-2005-2968 version (firefox)
844 CVE-2005-2959 ignore (sudo) not a vulnerability
845 CVE-2005-2946 version (openssl, fixed 0.9.8)
846 CVE-2005-2933 version (libc-client, fixed 2004g at least)
847 CVE-2005-2929 backport (lynx)
848 CVE-2005-2922 version (HelixPlayer, fixed 1.0.6)
849 CVE-2005-2917 version (squid, fixed 2.5.STABLE11)
850 CVE-2005-2876 version (util-linux, fixed 2.13-pre3)
851 CVE-2005-2874 version (cups, fixed 1.1.23)
852 CVE-2005-2873 VULNERABLE (kernel) not fixed upstream
853 CVE-2005-2872 version (kernel, fixed 2.6.12)
854 CVE-2005-2871 version (thunderbird)
855 CVE-2005-2871 version (mozilla, fixed 1.7.12)
856 CVE-2005-2871 version (firefox, fixed 1.0.7)
857 CVE-2005-2811 version (net-snmp) not upstream, gentoo only
858 CVE-2005-2801 version (kernel, fixed 2.6.11)
859 CVE-2005-2800 version (kernel, fixed 2.6.12.6)
860 CVE-2005-2798 version (openssh, fixed 4.2)
861 CVE-2005-2797 version (openssh, fixed 4.2)
862 CVE-2005-2796 version (squid, fixed 2.5.STABLE11)
863 CVE-2005-2794 version (squid, fixed 2.5.STABLE11)
864 CVE-2005-2728 version (httpd, fixed 2.0.55)
865 CVE-2005-2710 version (HelixPlayer, fixed 1.0.6)
866 CVE-2005-2709 version (kernel, fixed 2.6.14.3)
867 CVE-2005-2708 ignore (kernel) not reproducable on x86_64
868 CVE-2005-2707 version (thunderbird)
869 CVE-2005-2707 version (mozilla, fixed 1.7.12)
870 CVE-2005-2707 version (firefox, fixed 1.0.7)
871 CVE-2005-2706 version (thunderbird)
872 CVE-2005-2706 version (mozilla, fixed 1.7.12)
873 CVE-2005-2706 version (firefox, fixed 1.0.7)
874 CVE-2005-2705 version (thunderbird)
875 CVE-2005-2705 version (mozilla, fixed 1.7.12)
876 CVE-2005-2705 version (firefox, fixed 1.0.7)
877 CVE-2005-2704 version (thunderbird)
878 CVE-2005-2704 version (mozilla, fixed 1.7.12)
879 CVE-2005-2704 version (firefox, fixed 1.0.7)
880 CVE-2005-2703 version (thunderbird)
881 CVE-2005-2703 version (mozilla, fixed 1.7.12)
882 CVE-2005-2703 version (firefox, fixed 1.0.7)
883 CVE-2005-2702 version (thunderbird)
884 CVE-2005-2702 version (mozilla, fixed 1.7.12)
885 CVE-2005-2702 version (firefox, fixed 1.0.7)
886 CVE-2005-2701 version (mozilla, fixed 1.7.12)
887 CVE-2005-2701 version (firefox, fixed 1.0.7)
888 CVE-2005-2700 version (httpd, fixed 2.0.55)
889 CVE-2005-2693 backport (cvs) cvs-1.11.19-tmp.patch
890 CVE-2005-2672 version (lm_sensors, fixed 2.9.2)
891 CVE-2005-2666 version (openssh, fixed 4.0p1)
892 CVE-2005-2642 version (mutt) openbsd only
893 CVE-2005-2641 version (nss_ldap, fixed pam_ldap:180)
894 CVE-2005-2629 version (HelixPlayer, fixed 1.0.6)
895 CVE-2005-2617 version (kernel, fixed 2.6.12.5)
896 CVE-2005-2602 ignore (thunderbird) probably
897 CVE-2005-2602 ignore (firefox) https://bugzilla.mozilla.org/show_bug.cgi?id=237085
898 CVE-2005-2558 version (mysql, fixed 4.1.13)
899 CVE-2005-2558 ignore (mysql) not an issue
900 CVE-2005-2555 version (kernel, fixed 2.6.12.6pre)
901 CVE-2005-2553 version (kernel, not 2.6)
902 CVE-2005-2550 version (evolution, fixed after 2.3.6.1)
903 CVE-2005-2549 version (evolution, fixed after 2.3.6.1)
904 CVE-2005-2548 version (kernel, fixed 2.6.9) only affected 2.6.8
905 CVE-2005-2547 version (bluez-pin, fixed 2.19) not before 2.16
906 CVE-2005-2541 ignore (tar) is documented behaviour
907 CVE-2005-2500 version (kernel, fixed 2.6.13)
908 CVE-2005-2498 version (php, fixed xml_rpc:1.4.0)
909 CVE-2005-2496 backport (ntp, fixed 4.2.0b) ...0a-20040617-ntpd_guid.patch
910 CVE-2005-2495 version (xorg-x11-server, fixed 0.99.3 at least)
911 CVE-2005-2494 version (kdebase, fixed after 3.4.2)
912 CVE-2005-2492 version (kernel, fixed 2.6.13.1)
913 CVE-2005-2491 version (pcre, fixed 6.2)
914 CVE-2005-2491 ignore (python) fc4 python does not contain pcre
915 CVE-2005-2491 ignore (php) php uses system pcre
916 CVE-2005-2491 ignore (httpd) httpd uses system pcre
917 CVE-2005-2490 version (kernel, fixed 2.6.13.1)
918 CVE-2005-2475 backport (unzip) unzip-5.52-toctou.patch
919 CVE-2005-2471 version (netpbm, fixed 10.31)
920 CVE-2005-2459 ignore (kernel, fixed 2.6.12.5) dropped as code path not possible
921 CVE-2005-2458 version (kernel, fixed 2.6.12.5)
922 CVE-2005-2457 version (kernel, fixed 2.6.12.5)
923 CVE-2005-2456 version (kernel, fixed 2.6.12.5)
924 CVE-2005-2452 version (libtiff, fixed 3.7.0)
925 CVE-2005-2448 version (kdenetwork, fixed 3.4.2)
926 CVE-2005-2414 ignore (mozilla) not being fixed upstream, just a crash
927 CVE-2005-2410 version (NetworkManager, fixed 5.0)
928 CVE-2005-2395 ignore (firefox) https://bugzilla.mozilla.org/show_bug.cgi?id=281851
929 CVE-2005-2370 version (kdenetwork, fixed 3.4.2)
930 CVE-2005-2370 version (gaim, fixed 1.5.0)
931 CVE-2005-2369 version (kdenetwork, fixed 3.4.2)
932 CVE-2005-2368 version (vim, fixed 6.3.086 at least)
933 CVE-2005-2367 version (ethereal, fixed 0.10.12)
934 CVE-2005-2366 version (ethereal, fixed 0.10.12)
935 CVE-2005-2365 version (ethereal, fixed 0.10.12)
936 CVE-2005-2364 version (ethereal, fixed 0.10.12)
937 CVE-2005-2363 version (ethereal, fixed 0.10.12)
938 CVE-2005-2362 version (ethereal, fixed 0.10.12)
939 CVE-2005-2361 version (ethereal, fixed 0.10.12)
940 CVE-2005-2360 version (ethereal, fixed 0.10.12)
941 CVE-2005-2353 ignore (thunderbird) debug mode only
942 CVE-2005-2337 version (ruby, fixed 1.8.3)
943 CVE-2005-2335 version (fetchmail, fixed 6.2.5.2)
944 CVE-2005-2270 version (thunderbird, fixed 1.0.5)
945 CVE-2005-2270 version (mozilla, fixed 1.7.9)
946 CVE-2005-2270 version (firefox, fixed 1.0.5)
947 CVE-2005-2269 version (thunderbird, fixed 1.0.5)
948 CVE-2005-2269 version (mozilla, fixed 1.7.9)
949 CVE-2005-2269 version (firefox, fixed 1.0.5)
950 CVE-2005-2268 version (mozilla, fixed 1.7.9)
951 CVE-2005-2268 version (firefox, fixed 1.0.5)
952 CVE-2005-2267 version (mozilla, fixed 1.7.9)
953 CVE-2005-2267 version (firefox, fixed 1.0.5)
954 CVE-2005-2266 version (thunderbird, fixed 1.0.5)
955 CVE-2005-2266 version (mozilla, fixed 1.7.9)
956 CVE-2005-2266 version (firefox, fixed 1.0.5)
957 CVE-2005-2265 version (thunderbird, fixed 1.0.5)
958 CVE-2005-2265 version (mozilla, fixed 1.7.9)
959 CVE-2005-2265 version (firefox, fixed 1.0.5)
960 CVE-2005-2264 version (firefox, fixed 1.0.5)
961 CVE-2005-2263 version (mozilla, fixed 1.7.9)
962 CVE-2005-2263 version (firefox, fixed 1.0.5)
963 CVE-2005-2262 version (firefox, fixed 1.0.5)
964 CVE-2005-2261 version (thunderbird, fixed 1.0.5)
965 CVE-2005-2261 version (mozilla, fixed 1.7.9)
966 CVE-2005-2261 version (firefox, fixed 1.0.5)
967 CVE-2005-2260 version (mozilla, fixed 1.7.9)
968 CVE-2005-2260 version (firefox, fixed 1.0.5)
969 CVE-2005-2177 version (net-snmp, fixed 5.2.1.2)
970 CVE-2005-2114 version (mozilla, fixed 1.7.9)
971 CVE-2005-2114 version (firefox, fixed 1.0.5)
972 CVE-2005-2104 version (sysreport, fixed 1.4.1-5)
973 CVE-2005-2103 version (gaim, fixed 1.5.0)
974 CVE-2005-2102 version (gaim, fixed 1.5.0)
975 CVE-2005-2101 version (kdeedu, fixed after 3.4.2)
976 CVE-2005-2100 version (kernel, not 2.6) not upstream only RHEL4
977 CVE-2005-2099 version (kernel, fixed 2.6.12.5)
978 CVE-2005-2098 version (kernel, fixed 2.6.12.5)
979 CVE-2005-2097 version (xpdf, fixed 3.0.1)
980 CVE-2005-2097 version (cups) [since FEDORA-2006-252] was backport since GA
981 CVE-2005-2096 version (rpm, fixed 4.4.2)
982 CVE-2005-2096 backport (zlib, fixed 1.2.2.4)
983 CVE-2005-2095 version (squirrelmail, fixed 1.4.5)
984 CVE-2005-2088 version (httpd, fixed 2.0.55)
985 CVE-2005-2069 version (nss_ldap, fixed pam_ldap:180)
986 CVE-2005-2069 backport (openldap) openldap-2.2.13-tls-fix-connection-test.patch
987 CVE-2005-2023 version (gnupg, fixed 1.9.15)
988 CVE-2005-1993 version (sudo, fixed 1.6.8p9)
989 CVE-2005-1992 version (ruby, fixed 1.8.3 at least)
990 CVE-2005-1937 version (mozilla, fixed 1.7.9)
991 CVE-2005-1937 version (firefox, fixed 1.0.5)
992 CVE-2005-1934 version (gaim, fixed 1.3.1)
993 CVE-2005-1921 version (php, fixed xml_rpc:1.3.1)
994 CVE-2005-1920 version (kdelibs, fixed 3.4.1)
995 CVE-2005-1918 version (tar)
996 CVE-2005-1913 version (kernel, fixed 2.6.12.2)
997 CVE-2005-1852 version (kdenetwork, fixed 3.4.2)
998 CVE-2005-1849 version (zlib, fixed 1.2.3)
999 CVE-2005-1831 ignore (sudo) unsubstantiated report
1000 CVE-2005-1769 version (squirrelmail, fixed 1.4.5)
1001 CVE-2005-1768 version (kernel, fixed 2.6.6)
1002 CVE-2005-1767 version (kernel, fixed 2.6.7)
1003 CVE-2005-1766 version (HelixPlayer, fixed 1.0.5)
1004 CVE-2005-1765 version (kernel, fixed 2.6.12)
1005 CVE-2005-1764 version (kernel, fixed 2.6.12)
1006 CVE-2005-1763 version (kernel, fixed 2.6.12)
1007 CVE-2005-1762 version (kernel, fixed 2.6.12)
1008 CVE-2005-1761 version (kernel, fixed 2.6.12.2)
1009 CVE-2005-1760 version (sysreport, fixed 1.4.1-3)
1010 CVE-2005-1759 ignore (php) dead code path
1011 CVE-2005-1759 ignore (openldap) fixed shtool 2.0.2 flawed code path not used
1012 CVE-2005-1751 version (nmap, fixed 3.93 at least)
1013 CVE-2005-1751 ignore (openldap) fixed shtool 2.0.2. Flawed code path not used
1014 CVE-2005-1751 ignore (ncpfs) part of shtool in ncpfs is not vulnerable
1015 CVE-2005-1740 version (net-snmp, fixed 5.2.2.rc5 at least)
1016 CVE-2005-1739 version (ImageMagick, fixed 6.2.2.3)
1017 CVE-2005-1705 backport (gdb) gdb-6.3-security-errata-20050610.patch
1018 CVE-2005-1704 version (binutils, fixed 2.16.91.0.3 at least)
1019 CVE-2005-1704 backport (gdb) gdb-6.3-security-errata-20050610.patch
1020 CVE-2005-1689 version (krb5, fixed 1.4.2)
1021 CVE-2005-1686 ignore (gedit) not a vulnerability
1022 CVE-2005-1636 version (mysql, fixed 4.1.12)
1023 CVE-2005-1589 version (kernel, fixed 2.6.11.10)
1024 CVE-2005-1571 version (php, fixed shtool 2.0.2)
1025 CVE-2005-1544 version (libtiff, fixed 3.7.1 at least)
1026 CVE-2005-1532 version (thunderbird)
1027 CVE-2005-1532 version (mozilla, fixed 1.7.8)
1028 CVE-2005-1532 version (firefox, fixed 1.0.4)
1029 CVE-2005-1531 version (mozilla, fixed 1.7.8)
1030 CVE-2005-1531 version (firefox, fixed 1.0.4)
1031 CVE-2005-1519 version (squid, fixed 2.5.STABLE10)
1032 CVE-2005-1470 version (ethereal, fixed 0.10.11)
1033 CVE-2005-1469 version (ethereal, fixed 0.10.11)
1034 CVE-2005-1468 version (ethereal, fixed 0.10.11)
1035 CVE-2005-1467 version (ethereal, fixed 0.10.11)
1036 CVE-2005-1466 version (ethereal, fixed 0.10.11)
1037 CVE-2005-1465 version (ethereal, fixed 0.10.11)
1038 CVE-2005-1464 version (ethereal, fixed 0.10.11)
1039 CVE-2005-1463 version (ethereal, fixed 0.10.11)
1040 CVE-2005-1462 version (ethereal, fixed 0.10.11)
1041 CVE-2005-1461 version (ethereal, fixed 0.10.11)
1042 CVE-2005-1460 version (ethereal, fixed 0.10.11)
1043 CVE-2005-1459 version (ethereal, fixed 0.10.11)
1044 CVE-2005-1458 version (ethereal, fixed 0.10.11)
1045 CVE-2005-1457 version (ethereal, fixed 0.10.11)
1046 CVE-2005-1456 version (ethereal, fixed 0.10.11)
1047 CVE-2005-1455 version (freeradius, fixed 1.0.3)
1048 CVE-2005-1454 version (freeradius, fixed 1.0.3)
1049 CVE-2005-1431 version (gnutls, fixed 1.0.25)
1050 CVE-2005-1410 version (postgresql, fixed 8.0.2)
1051 CVE-2005-1409 version (postgresql, fixed 8.0.1)
1052 CVE-2005-1369 version (kernel, fixed 2.6.12)
1053 CVE-2005-1368 version (kernel, fixed 2.6.12)
1054 CVE-2005-1345 version (squid, fixed 2.5.STABLE10)
1055 CVE-2005-1344 ignore (httpd) not a vulnerability
1056 CVE-2005-1281 version (ethereal, fixed 0.10.11)
1057 CVE-2005-1280 version (tcpdump, fixed 3.9.2)
1058 CVE-2005-1279 version (tcpdump, fixed 3.9.2)
1059 CVE-2005-1278 version (tcpdump, fixed 3.9.2)
1060 CVE-2005-1277 ignore (dupe)
1061 CVE-2005-1275 version (ImageMagick, fixed 6.2.2)
1062 CVE-2005-1269 version (gaim, fixed 1.3.1)
1063 CVE-2005-1268 version (httpd, fixed 2.0.55)
1064 CVE-2005-1267 version (tcpdump, fixed 3.9.4 at least)
1065 CVE-2005-1266 version (spamassassin, fixed 3.0.4)
1066 CVE-2005-1265 version (kernel)
1067 CVE-2005-1264 version (kernel)
1068 CVE-2005-1263 version (kernel)
1069 CVE-2005-1262 version (gaim, fixed 1.3.0)
1070 CVE-2005-1261 version (gaim, fixed 1.3.0)
1071 CVE-2005-1260 version (bzip2, fixed 1.0.3)
1072 CVE-2005-1229 backport (cpio)
1073 CVE-2005-1228 backport (gzip)
1074 CVE-2005-1194 backport (nasm)
1075 CVE-2005-1184 ignore (kernel) expected to not be an issue
1076 CVE-2005-1175 version (krb5, fixed 1.4.2)
1077 CVE-2005-1174 version (krb5, fixed 1.4.2)
1078 CVE-2005-1160 version (thunderbird)
1079 CVE-2005-1160 version (mozilla)
1080 CVE-2005-1160 version (firefox)
1081 CVE-2005-1159 version (thunderbird)
1082 CVE-2005-1159 version (mozilla)
1083 CVE-2005-1159 version (firefox)
1084 CVE-2005-1158 version (firefox, fixed 1.0.3)
1085 CVE-2005-1157 version (mozilla)
1086 CVE-2005-1157 version (firefox)
1087 CVE-2005-1156 version (mozilla)
1088 CVE-2005-1156 version (firefox)
1089 CVE-2005-1155 version (mozilla)
1090 CVE-2005-1155 version (firefox)
1091 CVE-2005-1154 version (mozilla)
1092 CVE-2005-1154 version (firefox)
1093 CVE-2005-1153 version (mozilla)
1094 CVE-2005-1153 version (firefox)
1095 CVE-2005-1111 backport (cpio)
1096 CVE-2005-1065 version (tetex) not upstream version
1097 CVE-2005-1061 version (logwatch, fixed 4.3.2 at least)
1098 CVE-2005-1046 version (kdelibs, fixed after 3.4.0)
1099 CVE-2005-1043 version (php, fixed 4.3.11)
1100 CVE-2005-1042 version (php, fixed 4.3.11)
1101 CVE-2005-1041 version (kernel, fixed 2.6.12)
1102 CVE-2005-1039 ignore (coreutils) not fixed upstream, not a real issue
1103 CVE-2005-1038 backport (vixie-cron)
1104 CVE-2005-0990 version (sharutils, fixed 4.6 at least)
1105 CVE-2005-0989 version (thunderbird)
1106 CVE-2005-0989 version (mozilla, fixed 1.7.7)
1107 CVE-2005-0989 version (firefox, fixed 1.0.3)
1108 CVE-2005-0988 backport (gzip)
1109 CVE-2005-0977 version (kernel, fixed 2.6.11)
1110 CVE-2005-0967 version (gaim, fixed 1.2.1)
1111 CVE-2005-0966 version (gaim, fixed 1.2.1)
1112 CVE-2005-0965 version (gaim, fixed 1.2.1)
1113 CVE-2005-0953 backport (bzip2) bzip2-1.0.2-chmod.patch
1114 CVE-2005-0941 version (ooffice, fixed 1.9 m95)
1115 CVE-2005-0937 version (kernel, fixed 2.6.11)
1116 CVE-2005-0916 version (kernel, fixed 2.6.12)
1117 CVE-2005-0891 version (gtk2, fixed 2.2.4)
1118 CVE-2005-0867 version (kernel, fixed 2.6.11)
1119 CVE-2005-0866 version (cdrecord) DEBUG isn't enabled anyway
1120 CVE-2005-0839 version (kernel, fixed 2.6.11)
1121 CVE-2005-0815 version (kernel, fixed 2.6.11.6)
1122 CVE-2005-0808 version (tomcat, fixed 5.x)
1123 CVE-2005-0806 version (evolution, fixed 2.0.4)
1124 CVE-2005-0799 version (mysql) not linux
1125 CVE-2005-0767 version (kernel, fixed 2.6.11)
1126 CVE-2005-0766 version (ethereal, fixed after 0.10.9)
1127 CVE-2005-0765 version (ethereal, fixed after 0.10.9)
1128 CVE-2005-0763 version (mc, fixed 4.6.0)
1129 CVE-2005-0762 version (ImageMagick, fixed 6.0)
1130 CVE-2005-0761 version (ImageMagick, fixed 6.1.8)
1131 CVE-2005-0760 version (ImageMagick, fixed 6.0)
1132 CVE-2005-0759 version (ImageMagick, fixed 6.0)
1133 CVE-2005-0758 version (gzip, fixed 1.3.5)
1134 CVE-2005-0758 backport (bzip2)
1135 CVE-2005-0757 version (kernel, not 2.6)
1136 CVE-2005-0756 version (kernel, fixed 2.6.12)
1137 CVE-2005-0755 version (HelixPlayer, fixed 10.0.4)
1138 CVE-2005-0754 version (kdewebdev, fixed after 3.4.0)
1139 CVE-2005-0753 version (cvs, fixed 1.11.20)
1140 CVE-2005-0752 version (firefox, fixed 1.0.3)
1141 CVE-2005-0750 version (kernel, fixed 2.6.11.6)
1142 CVE-2005-0749 version (kernel, fixed 2.6.11.6)
1143 CVE-2005-0739 version (ethereal, fixed after 0.10.9)
1144 CVE-2005-0736 version (kernel, fixed 2.6.11)
1145 CVE-2005-0718 version (squid, fixed 2.5.STABLE8)
1146 CVE-2005-0711 version (mysql, fixed 4.1.11)
1147 CVE-2005-0710 version (mysql, fixed 4.1.11)
1148 CVE-2005-0709 version (mysql, fixed 4.1.11)
1149 CVE-2005-0705 version (ethereal, fixed after 0.10.9)
1150 CVE-2005-0704 version (ethereal, fixed after 0.10.9)
1151 CVE-2005-0698 version (ethereal, fixed after 0.10.9)
1152 CVE-2005-0664 version (libexif, fixed 0.6.12)
1153 CVE-2005-0654 ignore (gimp, not fixed 2.2) upstream considers harmless
1154 CVE-2005-0627 version (qt, fixed 3.3.4)
1155 CVE-2005-0626 version (squid, fixed 2.5.STABLE10)
1156 CVE-2005-0611 version (HelixPlayer, fixed 1.0.3)
1157 CVE-2005-0605 version (libXpm, fixed 3.5.4 at least)
1158 CVE-2005-0605 backport (openmotif)
1159 CVE-2005-0602 ignore (unzip, fixed 5.52) this is really expected behaviour
1160 CVE-2005-0596 version (php, fixed 5.0)
1161 CVE-2005-0593 version (mozilla)
1162 CVE-2005-0593 version (firefox)
1163 CVE-2005-0592 version (mozilla)
1164 CVE-2005-0592 version (firefox)
1165 CVE-2005-0591 version (firefox, fixed 1.0.1)
1166 CVE-2005-0590 version (thunderbird)
1167 CVE-2005-0590 version (openswan, fixed 2.1.4)
1168 CVE-2005-0590 version (mozilla)
1169 CVE-2005-0590 version (firefox)
1170 CVE-2005-0589 version (firefox, fixed 1.0.1)
1171 CVE-2005-0588 version (mozilla)
1172 CVE-2005-0588 version (firefox)
1173 CVE-2005-0587 version (mozilla)
1174 CVE-2005-0587 version (firefox)
1175 CVE-2005-0586 version (mozilla)
1176 CVE-2005-0586 version (firefox)
1177 CVE-2005-0585 version (mozilla)
1178 CVE-2005-0585 version (firefox)
1179 CVE-2005-0584 version (mozilla)
1180 CVE-2005-0584 version (firefox)
1181 CVE-2005-0578 version (mozilla)
1182 CVE-2005-0578 version (firefox)
1183 CVE-2005-0565 version (kernel, not 2.6)
1184 CVE-2005-0532 version (kernel, fixed 2.6.11)
1185 CVE-2005-0531 version (kernel, fixed 2.6.11)
1186 CVE-2005-0530 version (kernel, fixed 2.6.11)
1187 CVE-2005-0529 version (kernel, fixed 2.6.11)
1188 CVE-2005-0527 version (mozilla, fixed 1.7.6)
1189 CVE-2005-0527 version (firefox, fixed 1.0.1)
1190 CVE-2005-0525 version (php, fixed 5.0.4)
1191 CVE-2005-0524 version (php, fixed 5.0.4)
1192 CVE-2005-0509 version (mono, not after 1.0.5)
1193 CVE-2005-0504 version (kernel, not 2.6) doesn't build in 2.6
1194 CVE-2005-0490 version (curl, fixed 7.13.1)
1195 CVE-2005-0489 version (kernel, not 2.6)
1196 CVE-2005-0488 backport (telnet)
1197 CVE-2005-0488 backport (krb5) krb5-1.4.1-telnet-environ.patch
1198 CVE-2005-0473 version (gaim, fixed 1.1.3)
1199 CVE-2005-0472 version (gaim, fixed 1.1.3)
1200 CVE-2005-0470 version (wpa_supplicant, fixed 0.2.7)
1201 CVE-2005-0469 version (krb5, fixed 1.4.1)
1202 CVE-2005-0469 backport (telnet) telnet-0.17-CAN-2005-468_469.patch
1203 CVE-2005-0468 version (krb5, fixed 1.4.1)
1204 CVE-2005-0468 backport (telnet) telnet-0.17-CAN-2005-468_469.patch
1205 CVE-2005-0455 version (HelixPlayer, fixed 1.0.3)
1206 CVE-2005-0449 version (kernel, fixed 2.6.11)
1207 CVE-2005-0448 version (perl, fixed 5.8.6) #173793
1208 CVE-2005-0446 version (squid, fixed 2.5.STABLE9)
1209 CVE-2005-0404 ignore (kde) won't fix http://bugs.kde.org/show_bug.cgi?id=96020
1210 CVE-2005-0403 version (kernel) not upstream
1211 CVE-2005-0402 version (firefox, fixed 1.0.2)
1212 CVE-2005-0401 version (mozilla, fixed 1.7.7)
1213 CVE-2005-0401 version (firefox, fixed 1.0.2)
1214 CVE-2005-0400 version (kernel, fixed 2.6.11.6)
1215 CVE-2005-0399 version (thunderbird)
1216 CVE-2005-0399 version (mozilla)
1217 CVE-2005-0399 version (firefox)
1218 CVE-2005-0398 version (ipsec-tools, fixed 0.5)
1219 CVE-2005-0397 version (ImageMagick, fixed 6.0.2.5)
1220 CVE-2005-0396 version (kdelibs, fixed 3.4.0)
1221 CVE-2005-0384 version (kernel, fixed 2.6.11.4)
1222 CVE-2005-0372 version (gftp, fixed 2.0.18 at least)
1223 CVE-2005-0365 version (kdelibs, not 3.4)
1224 CVE-2005-0337 version (postfix, not 2.2)
1225 CVE-2005-0255 version (thunderbird, fixed 1.0.2)
1226 CVE-2005-0255 version (mozilla, fixed 1.7.6)
1227 CVE-2005-0255 version (firefox, fixed 1.0.1)
1228 CVE-2005-0247 version (postgresql, fixed after 8.0)
1229 CVE-2005-0246 version (postgresql, fixed 8.0.1)
1230 CVE-2005-0245 version (postgresql, fixed 8.0.1)
1231 CVE-2005-0244 version (postgresql, fixed 8.0.1)
1232 CVE-2005-0241 version (squid, fixed 2.5.STABLE8)
1233 CVE-2005-0238 version (epiphany, fixed since mozilla 1.7.6)
1234 CVE-2005-0237 version (kdelibs, fixed 3.4.0)
1235 CVE-2005-0233 version (mozilla, fixed 1.7.6)
1236 CVE-2005-0233 version (firefox, fixed 1.0.1)
1237 CVE-2005-0232 version (mozilla, fixed 1.7.6)
1238 CVE-2005-0232 version (firefox, fixed 1.0.1)
1239 CVE-2005-0231 version (mozilla, fixed 1.7.6)
1240 CVE-2005-0231 version (firefox, fixed 1.0.1)
1241 CVE-2005-0230 version (thunderbird, fixed 1.0.2)
1242 CVE-2005-0230 version (mozilla, fixed 1.7.6)
1243 CVE-2005-0230 version (firefox, fixed 1.0.1)
1244 CVE-2005-0227 version (postgresql, fixed 8.0.1)
1245 CVE-2005-0215 version (mozilla)
1246 CVE-2005-0211 version (squid, fixed 2.5.STABLE8)
1247 CVE-2005-0210 version (kernel, fixed 2.6.11)
1248 CVE-2005-0209 version (kernel, fixed 2.6.11)
1249 CVE-2005-0208 version (gaim, fixed 1.1.4)
1250 CVE-2005-0207 version (kernel, fixed 2.6.11)
1251 CVE-2005-0206 version (xpdf) only bad patch for 2004-0888
1252 CVE-2005-0205 version (kdenetwork, not 3.3+)
1253 CVE-2005-0204 version (kernel) didn't affect upstream
1254 CVE-2005-0202 version (mailman, fixed 2.1.6)
1255 CVE-2005-0201 version (dbus, fixed 0.36.1)
1256 CVE-2005-0194 version (squid, fixed 2.5.STABLE8)
1257 CVE-2005-0180 version (kernel, fixed 2.6.11)
1258 CVE-2005-0179 version (kernel, fixed 2.6.11)
1259 CVE-2005-0178 version (kernel, fixed 2.6.11)
1260 CVE-2005-0177 version (kernel, fixed 2.6.11)
1261 CVE-2005-0176 version (kernel, fixed 2.6.10) only affected 2.6.9
1262 CVE-2005-0175 version (squid, fixed 2.5.STABLE8)
1263 CVE-2005-0174 version (squid, fixed 2.5.STABLE8)
1264 CVE-2005-0173 version (squid, fixed 2.5.STABLE8)
1265 CVE-2005-0162 version (openswan, fixed 2.3.0)
1266 CVE-2005-0156 version (perl, fixed 5.8.8)
1267 CVE-2005-0155 version (perl, fixed 5.8.8)
1268 CVE-2005-0152 version (squirrelmail, not 1.4)
1269 CVE-2005-0150 version (firefox, fixed 1.0)
1270 CVE-2005-0149 version (mozilla)
1271 CVE-2005-0149 version (firefox)
1272 CVE-2005-0147 version (mozilla)
1273 CVE-2005-0147 version (firefox)
1274 CVE-2005-0146 version (mozilla)
1275 CVE-2005-0146 version (firefox)
1276 CVE-2005-0145 version (firefox, fixed 1.0)
1277 CVE-2005-0144 version (mozilla)
1278 CVE-2005-0144 version (firefox)
1279 CVE-2005-0143 version (mozilla)
1280 CVE-2005-0143 version (firefox)
1281 CVE-2005-0142 version (thunderbird)
1282 CVE-2005-0142 version (mozilla)
1283 CVE-2005-0142 version (firefox)
1284 CVE-2005-0141 version (mozilla)
1285 CVE-2005-0141 version (firefox)
1286 CVE-2005-0137 version (kernel, not 2.6)
1287 CVE-2005-0136 version (kernel, fixed 2.6.11)
1288 CVE-2005-0135 version (kernel, fixed 2.6.11)
1289 CVE-2005-0124 version (kernel, fixed 2.6.11)
1290 CVE-2005-0109 version (openssl, not 0.9.8a)
1291 CVE-2005-0109 backport (openssl097a)
1292 CVE-2005-0104 version (squirrelmail, fixed 1.4.4)
1293 CVE-2005-0103 version (squirrelmail, fixed 1.4.4)
1294 CVE-2005-0102 version (evolution-data-server, fixed 1.2.2 at least)
1295 CVE-2005-0100 version (emacs, fixed 21.4 at least)
1296 CVE-2005-0097 version (squid, fixed 2.5.STABLE8)
1297 CVE-2005-0096 version (squid, fixed 2.5.STABLE8)
1298 CVE-2005-0095 version (squid, fixed 2.5.STABLE8)
1299 CVE-2005-0094 version (squid, fixed 2.5.STABLE8)
1300 CVE-2005-0092 version (kernel, not affected)
1301 CVE-2005-0091 version (kernel, not affected)
1302 CVE-2005-0090 version (kernel, not affected)
1303 CVE-2005-0089 version (python, fixed 2.4.1 at least)
1304 CVE-2005-0088 version (mod_python, fixed after 2.7.8)
1305 CVE-2005-0087 version (alsa-lib, fixed 1.0.9)
1306 CVE-2005-0086 version (less) didn't affect upstream
1307 CVE-2005-0085 version (htdig, fixed 3.1.6-r7)
1308 CVE-2005-0084 version (ethereal, fixed 0.10.9)
1309 CVE-2005-0080 version (mailman) not upstream
1310 CVE-2005-0078 version (kde, fixed 3.0.5)
1311 CVE-2005-0077 version (perl-DBI, fixed 1.48 at least)
1312 CVE-2005-0075 version (squirrelmail, fixed 1.4.4)
1313 CVE-2005-0069 backport (vim) vim-6.4-tmpfile.patch
1314 CVE-2005-0064 version (xpdf, fixed 3.0.1)
1315 CVE-2005-0064 version (tetex, fixed 3.0)
1316 CVE-2005-0064 version (kdegraphics, not 3.4)
1317 CVE-2005-0064 version (cups, fixed 1.2.2) [since FEDORA-2006-776] was backport cups-CAN-2005-0064.patch since GA
1318 CVE-2005-0039 ignore (kernel) not a vulnerability: don't do this says the rfc
1319 CVE-2005-0034 version (bind, fixed after 9.3.0)
1320 CVE-2005-0033 version (bind, not 9)
1321 CVE-2005-0023 ignore (libvte) not a security risk
1322 CVE-2005-0014 version (ncpfs, fixed 2.2.6)
1323 CVE-2005-0013 version (ncpfs, fixed 2.2.6)
1324 CVE-2005-0011 version (kdeedu, not 3.4)
1325 CVE-2005-0010 version (ethereal, fixed 0.10.9)
1326 CVE-2005-0009 version (ethereal, fixed 0.10.9)
1327 CVE-2005-0008 version (ethereal, fixed 0.10.9)
1328 CVE-2005-0007 version (ethereal, fixed 0.10.9)
1329 CVE-2005-0006 version (ethereal, fixed 0.10.9)
1330 CVE-2005-0005 version (ImageMagick, fixed after 6.1.7)
1331 CVE-2005-0004 version (mysql, fixed 4.1.10)
1332 CVE-2005-0003 version (kernel, fixed 2.6.10)
1333 CVE-2005-0001 version (kernel, fixed 2.6.10)
1334 CVE-2004-2660 version (kernel, fixed 2.6.10)
1335 CVE-2004-2657 ignore (firefox) windows only
1336 CVE-2004-2655 version (xscreensaver)
1337 CVE-2004-2654 version (squid, fixed 2.6STABLE6)
1338 CVE-2004-2607 version (kernel, fixed 2.6.5)
1339 CVE-2004-2589 version (gaim, fixed 0.82)
1340 CVE-2004-2546 version (samba, fixed 3.0.6)
1341 CVE-2004-2541 ignore (cscope) blocked by FORTIFY_SOURCE
1342 CVE-2004-2536 version (kernel, fixed 2.6.7)
1343 CVE-2004-2531 version (gnutls, fixed 1.0.17)
1344 CVE-2004-2480 ignore (squid) #166523, not reproducable
1345 CVE-2004-2479 version (squid, fixed 2.5.STABLE8)
1346 CVE-2004-2396 version (passwd, fixed 0.69)
1347 CVE-2004-2395 version (passwd, fixed 0.69)
1348 CVE-2004-2394 version (passwd, fixed 0.69)
1349 CVE-2004-2392 version (libuser, fixed 0.51.10)
1350 CVE-2004-2343 ignore (httpd) not a security issue
1351 CVE-2004-2302 version (kernel, fixed 2.6.10)
1352 CVE-2004-2259 version (vsftpd, fixed 1.2.2)
1353 CVE-2004-2228 version (firefox, fixed 1.0)
1354 CVE-2004-2227 version (firefox, fixed 1.0)
1355 CVE-2004-2225 version (firefox, fixed 0.10.1)
1356 CVE-2004-2154 version (cups, fixed 1.2.21rc1)
1357 CVE-2004-2149 version (mysql, fixed 4.1.5)
1358 CVE-2004-2136 ignore (dm-crypt) design
1359 CVE-2004-2135 ignore (kernel) design
1360 CVE-2004-2093 ignore (rsync) not security issue
1361 CVE-2004-2069 version (openssh, not 4)
1362 CVE-2004-2014 version (wget, fixed 1.10.1)
1363 CVE-2004-2013 ignore (kernel, not 2.6) also not exploitable
1364 CVE-2004-2004 version (configuration) SUSE only
1365 CVE-2004-1880 version (openldap, fixed 2.2.21)
1366 CVE-2004-1834 version (httpd, fixed 2.0.50)
1367 CVE-2004-1773 version (sharutils, not 4.6)
1368 CVE-2004-1772 version (sharutils, not 4.6)
1369 CVE-2004-1761 version (ethereal, fixed 0.10.3)
1370 CVE-2004-1689 version (sudo, fixed 1.6.8p1)
1371 CVE-2004-1653 ignore (openssh)
1372 CVE-2004-1639 version (mozilla)
1373 CVE-2004-1639 version (firefox)
1374 CVE-2004-1617 ignore (lynx) not able to verify flaw
1375 CVE-2004-1614 version (mozilla, fixed 1.7.5)
1376 CVE-2004-1613 version (mozilla, fixed 1.7.5)
1377 CVE-2004-1488 version (wget, fixed 1.10.1)
1378 CVE-2004-1471 version (cvs, fixed 1.12.9)
1379 CVE-2004-1453 version (glibc, fixed 2.3.5)
1380 CVE-2004-1452 version (tomcat, fixed 5.0.27-r3)
1381 CVE-2004-1451 version (thunderbird)
1382 CVE-2004-1451 version (mozilla)
1383 CVE-2004-1451 version (firefox)
1384 CVE-2004-1450 version (thunderbird)
1385 CVE-2004-1450 version (mozilla)
1386 CVE-2004-1450 version (firefox)
1387 CVE-2004-1449 version (thunderbird)
1388 CVE-2004-1449 version (mozilla)
1389 CVE-2004-1449 version (firefox)
1390 CVE-2004-1392 version (php, fixed 5.0.4)
1391 CVE-2004-1382 version (glibc, not 2.3.5)
1392 CVE-2004-1381 version (mozilla)
1393 CVE-2004-1381 version (firefox)
1394 CVE-2004-1380 version (mozilla)
1395 CVE-2004-1380 version (firefox)
1396 CVE-2004-1377 backport (a2ps) a2ps-4.13-security.patch
1397 CVE-2004-1337 version (kernel, fixed 2.6.11)
1398 CVE-2004-1336 version (tetex, fixed 3.0 at least)
1399 CVE-2004-1335 version (kernel, fixed 2.6.10)
1400 CVE-2004-1334 version (kernel, fixed 2.6.10)
1401 CVE-2004-1333 version (kernel, fixed 2.6.10)
1402 CVE-2004-1316 version (thunderbird, fixed 0.9)
1403 CVE-2004-1316 version (mozilla, fixed 1.7.5)
1404 CVE-2004-1308 version (libtiff, fixed 3.7.1 at least)
1405 CVE-2004-1307 version (libtiff, was already fixed with 0886)
1406 CVE-2004-1304 version (file, fixed 4.12)
1407 CVE-2004-1296 backport (groff) from srpm
1408 CVE-2004-1287 backport (nasm)
1409 CVE-2004-1270 version (cups, fixed 1.1.23)
1410 CVE-2004-1269 version (cups, fixed 1.1.23)
1411 CVE-2004-1268 version (cups, fixed 1.1.23)
1412 CVE-2004-1267 version (cups, fixed 1.1.23)
1413 CVE-2004-1237 version (kernel, not 2.6) not upstream
1414 CVE-2004-1235 version (kernel, fixed 2.6.11)
1415 CVE-2004-1234 version (kernel, not 2.6)
1416 CVE-2004-1224 version (mtr, fixed after 0.65)
1417 CVE-2004-1200 ignore (firefox, mozilla) not a security issue
1418 CVE-2004-1191 version (kernel, fixed 2.6.9)
1419 CVE-2004-1190 version (kernel, fixed 2.6.10)
1420 CVE-2004-1189 version (krb5, fixed 1.4)
1421 CVE-2004-1186 backport (enscript)
1422 CVE-2004-1185 backport (enscript)
1423 CVE-2004-1184 version (enscript, fixed 1.6.4 at least)
1424 CVE-2004-1183 version (libtiff, fixed 3.7.2)
1425 CVE-2004-1180 version (rwho, fixed 0.17)
1426 CVE-2004-1177 version (mailman, fixed 2.1.6)
1427 CVE-2004-1176 version (mc, fixed 4.6.0)
1428 CVE-2004-1175 version (mc, fixed 4.6.0)
1429 CVE-2004-1174 version (mc, fixed 4.6.0)
1430 CVE-2004-1171 version (kdelibs, not 3.4)
1431 CVE-2004-1170 backport (a2ps) a2ps-shell.patch
1432 CVE-2004-1165 version (kdelibs, not 3.4)
1433 CVE-2004-1158 version (kdelibs, not 3.4)
1434 CVE-2004-1156 version (mozilla, firefox)
1435 CVE-2004-1154 version (samba, fixed 3.0.10)
1436 CVE-2004-1151 version (kernel, fixed 2.6.10)
1437 CVE-2004-1145 version (kde, not 3.4)
1438 CVE-2004-1144 version (kernel, not 2.6)
1439 CVE-2004-1143 version (mailman, fixed 2.1.5)
1440 CVE-2004-1142 version (ethereal, fixed 0.10.8)
1441 CVE-2004-1141 version (ethereal, fixed 0.10.8)
1442 CVE-2004-1140 version (ethereal, fixed 0.10.8)
1443 CVE-2004-1139 version (ethereal, fixed 0.10.8)
1444 CVE-2004-1138 version (vim, fixed 6.3)
1445 CVE-2004-1137 version (kernel, fixed 2.6.10)
1446 CVE-2004-1125 version (xpdf, fixed 3.0.1)
1447 CVE-2004-1125 version (tetex, at least 3.0)
1448 CVE-2004-1125 version (kdegraphics, not 3.4)
1449 CVE-2004-1096 version (perl-Archive-Zip, fixed 1.14)
1450 CVE-2004-1093 version (mc, fixed 4.6.0)
1451 CVE-2004-1092 version (mc, fixed 4.6.0)
1452 CVE-2004-1091 version (mc, fixed 4.6.0)
1453 CVE-2004-1090 version (mc, fixed 4.6.0)
1454 CVE-2004-1079 version (ncpfs, fixed 2.2.6 at least)
1455 CVE-2004-1074 version (kernel, fixed 2.6.10)
1456 CVE-2004-1073 version (kernel, fixed 2.6.10)
1457 CVE-2004-1072 version (kernel, fixed 2.6.10)
1458 CVE-2004-1071 version (kernel, fixed 2.6.10)
1459 CVE-2004-1070 version (kernel, fixed 2.6.10)
1460 CVE-2004-1069 version (kernel, fixed 2.6.10)
1461 CVE-2004-1068 version (kernel, fixed 2.6.10)
1462 CVE-2004-1065 version (php, fixed after 5.0.2)
1463 CVE-2004-1064 version (php, fixed after 5.0.2)
1464 CVE-2004-1063 version (php, fixed after 5.0.2)
1465 CVE-2004-1060 version (kernel) all verifies sequence number
1466 CVE-2004-1058 version (kernel, fixed 2.6.9)
1467 CVE-2004-1057 version (kernel, fixed 2.6.10)
1468 CVE-2004-1056 version (kernel, fixed 2.6.10)
1469 CVE-2004-1051 version (sudo, fixed 1.6.8p2)
1470 CVE-2004-1036 version (squirrelmail, fixed 1.4.4)
1471 CVE-2004-1026 backport (imlib) imlib-1.9.14-bounds.patch
1472 CVE-2004-1025 backport (imlib) imlib-1.9.14-bounds.patch
1473 CVE-2004-1020 version (php, fixed after 5.0.2)
1474 CVE-2004-1019 version (php, fixed after 5.0.2)
1475 CVE-2004-1018 version (php, fixed after 5.0.2)
1476 CVE-2004-1017 version (kernel, fixed 2.6.10)
1477 CVE-2004-1016 version (kernel, fixed 2.6.10)
1478 CVE-2004-1014 version (nfs-utils, fixed 1.0.7)
1479 CVE-2004-1009 version (mc, fixed 4.6.0)
1480 CVE-2004-1006 version (dhcp, not 3)
1481 CVE-2004-1005 version (mc, fixed 4.6.0)
1482 CVE-2004-1004 version (mc, fixed 4.6.0)
1483 CVE-2004-1002 ignore (ppp) not a security issue
1484 CVE-2004-0997 version (kernel, not 2.6)
1485 CVE-2004-0996 backport (cscope) not fixed in 15.5
1486 CVE-2004-0990 version (gd, fixed 2.0.33 at least)
1487 CVE-2004-0989 version (libxml2, fixed 2.6.15)
1488 CVE-2004-0986 version (iptables, fixed 1.2.12)
1489 CVE-2004-0983 version (ruby, fixed 1.8.2)
1490 CVE-2004-0981 version (ImageMagick, fixed 6.1.0)
1491 CVE-2004-0977 version (postgresql, fixed after 7.4.6)
1492 CVE-2004-0976 backport (perl) perl-5.8.7-CAN-2004-0976.patch
1493 CVE-2004-0975 version (openssl, not 0.9.8)
1494 CVE-2004-0975 backport (openssl097a, fixed 0.9.7f)
1495 CVE-2004-0974 version (netatalk, fixed 2.0.1)
1496 CVE-2004-0972 version (lvm2, fixed 2.2.01.8 at least)
1497 CVE-2004-0971 backport (krb5) krb5-1.3.4-send-pr-tempfile.patch
1498 CVE-2004-0970 version (gzip)
1499 CVE-2004-0969 version (groff, fixed 1.18.1.1)
1500 CVE-2004-0968 version (glibc, fixed 2.3.5 at least)
1501 CVE-2004-0967 version (ghostscript, fixed 8.15.1)
1502 CVE-2004-0966 version (gettext, fixed 0.14.3 at least)
1503 CVE-2004-0961 version (freeradius, fixed 1.0.1)
1504 CVE-2004-0960 version (freeradius, fixed 1.0.1)
1505 CVE-2004-0959 version (php, fixed 4.3.9)
1506 CVE-2004-0958 version (php, fixed 4.3.9)
1507 CVE-2004-0957 version (mysql, fixed 4.0.21)
1508 CVE-2004-0956 version (mysql, fixed 4.0.20)
1509 CVE-2004-0946 version (nfs-utils, fixed 1.0.6-r6)
1510 CVE-2004-0942 version (httpd, fixed 2.0.53)
1511 CVE-2004-0941 backport (gd)
1512 CVE-2004-0940 version (httpd, not 2.0)
1513 CVE-2004-0938 version (freeradius, fixed 1.0.1)
1514 CVE-2004-0930 version (samba, fixed 3.0.8)
1515 CVE-2004-0929 version (libtiff, fixed 3.7.0)
1516 CVE-2004-0923 version (cups, fixed 1.2.22)
1517 CVE-2004-0918 version (squid, fixed 2.4.STABLE7)
1518 CVE-2004-0914 version (xorg-x11, fixed after 6.8.1)
1519 CVE-2004-0914 backport (openmotif)
1520 CVE-2004-0909 version (thunderbird)
1521 CVE-2004-0909 version (mozilla)
1522 CVE-2004-0909 version (firefox)
1523 CVE-2004-0908 version (mozilla, fixed 1.7.3)
1524 CVE-2004-0907 version (thunderbird)
1525 CVE-2004-0907 version (mozilla)
1526 CVE-2004-0907 version (firefox)
1527 CVE-2004-0906 version (thunderbird)
1528 CVE-2004-0906 version (mozilla)
1529 CVE-2004-0906 version (firefox)
1530 CVE-2004-0905 version (mozilla, fixed 1.7.3)
1531 CVE-2004-0904 version (mozilla, fixed 1.7.3)
1532 CVE-2004-0903 version (mozilla, fixed 1.7.3)
1533 CVE-2004-0902 version (mozilla, fixed 1.7.3)
1534 CVE-2004-0891 version (gaim, fixed 1.0.2)
1535 CVE-2004-0889 version (xpdf, fixed 3.0.1)
1536 CVE-2004-0888 version (xpdf, fixed 3.0.1)
1537 CVE-2004-0888 version (tetex, fixed 3.0)
1538 CVE-2004-0888 version (kpdegraphics, not 3.4)
1539 CVE-2004-0888 version (cups) [since FEDORA-2006-252] was backport since GA
1540 CVE-2004-0887 version (kernel, fixed 2.6.10)
1541 CVE-2004-0886 version (libtiff, fixed 3.7.1 at least)
1542 CVE-2004-0886 version (kdegraphics, fixed by Update on 20041109)
1543 CVE-2004-0885 version (httpd, fixed after 2.0.52)
1544 CVE-2004-0884 version (cyrus-sasl, fixed 2.1.20)
1545 CVE-2004-0883 version (kernel, fixed 2.6.11)
1546 CVE-2004-0883 version (kernel, fixed 2.6.11)
1547 CVE-2004-0882 version (samba, fixed 3.0.8)
1548 CVE-2004-0871 ignore (mozilla) unfixed upstream with no patch
1549 CVE-2004-0870 ignore (kde) upstream won't fix
1550 CVE-2004-0867 version (firefox, after 0.9.2)
1551 CVE-2004-0837 version (mysql, fixed 4.0.21)
1552 CVE-2004-0836 version (mysql, fixed 4.0.21)
1553 CVE-2004-0835 version (mysql, fixed 4.1.2)
1554 CVE-2004-0832 version (squid, fixed 2.5.STABLE7)
1555 CVE-2004-0829 version (samba, fixed 2.2.11)
1556 CVE-2004-0827 version (ImageMagick, fixed 6.0.6.2)
1557 CVE-2004-0826 version (nss, fixed 3.9.2)
1558 CVE-2004-0823 version (openldap, fixed after 2.1.19)
1559 CVE-2004-0817 version (imlib, fixed 2.1.20 at least)
1560 CVE-2004-0816 version (kernel, fixed 2.6.8)
1561 CVE-2004-0815 version (samba, fixed 3.0.2a)
1562 CVE-2004-0814 version (kernel, fixed 2.6.9)
1563 CVE-2004-0813 version (kernel, fixed 2.6.8)
1564 CVE-2004-0812 version (kernel, not 2.6)
1565 CVE-2004-0811 version (httpd, fixed 2.0.52)
1566 CVE-2004-0809 version (httpd, fixed 2.0.51)
1567 CVE-2004-0808 version (samba, fixed 3.0.7)
1568 CVE-2004-0807 version (samba, fixed 3.0.7)
1569 CVE-2004-0806 version (cdrtools, fixed 2.0.1)
1570 CVE-2004-0804 version (libtiff, fixed after 3.6.1)
1571 CVE-2004-0804 version (kdegraphics)
1572 CVE-2004-0803 version (libtiff, fixed after 3.6.1)
1573 CVE-2004-0803 version (kdegraphics)
1574 CVE-2004-0802 version (imlib, fixed 1.1.2)
1575 CVE-2004-0801 version (foomatic, fixed 3.0.2)
1576 CVE-2004-0797 version (zlib, fixed 1.2.2.2 at least)
1577 CVE-2004-0797 version (zlib)
1578 CVE-2004-0796 version (spamassassin, fixed 2.64)
1579 CVE-2004-0792 version (rsync, fixed 2.6.3)
1580 CVE-2004-0791 version (kernel, fixed 2.6.9)
1581 CVE-2004-0790 version (kernel) doesn't affect linux 2.6
1582 CVE-2004-0788 version (gtk2, fixed 2.6.7 at least)
1583 CVE-2004-0788 version (gdk-pixbuf, fixed 0.22)
1584 CVE-2004-0786 version (apr-util, fixed 2.0.51)
1585 CVE-2004-0785 version (gaim, fixed 0.82)
1586 CVE-2004-0784 version (gaim, fixed 0.82)
1587 CVE-2004-0783 version (gtk2, fixed 2.6.7 at least)
1588 CVE-2004-0783 version (gdk-pixbuf, fixed 0.22)
1589 CVE-2004-0782 version (gtk2, fixed 2.6.7 at least)
1590 CVE-2004-0782 version (gdk-pixbuf, fixed 0.22)
1591 CVE-2004-0779 version (thunderbird)
1592 CVE-2004-0779 version (mozilla)
1593 CVE-2004-0779 version (firefox)
1594 CVE-2004-0778 version (cvs, fixed 1.11.17)
1595 CVE-2004-0772 version (krb5, fixed after 1.2.8)
1596 CVE-2004-0771 backport (lha, changelog)
1597 CVE-2004-0769 backport (lha, changelog)
1598 CVE-2004-0768 version (libpng, fixed 1.2.6)
1599 CVE-2004-0765 version (mozilla, fixed 1.7)
1600 CVE-2004-0764 version (mozilla, fixed 1.7)
1601 CVE-2004-0763 version (mozilla, fixed 1.7.2)
1602 CVE-2004-0762 version (mozilla, fixed 1.7)
1603 CVE-2004-0761 version (mozilla, fixed 1.7)
1604 CVE-2004-0760 version (mozilla, fixed 1.7.2)
1605 CVE-2004-0759 version (mozilla, fixed 1.7)
1606 CVE-2004-0758 version (mozilla, fixed 1.7.2)
1607 CVE-2004-0757 version (mozilla, fixed 1.7)
1608 CVE-2004-0755 version (ruby, fixed 1.8.1)
1609 CVE-2004-0754 version (gaim, fixed 0.82)
1610 CVE-2004-0753 version (gtk2, fixed after 2.2.4)
1611 CVE-2004-0753 version (gdk-pixbuf, fixed 0.22)
1612 CVE-2004-0752 version (openoffice.org, fixed after 1.1.2)
1613 CVE-2004-0751 version (httpd, fixed 2.0.51)
1614 CVE-2004-0750 version (system-config-nfs, fixed 1.0.13)
1615 CVE-2004-0749 version (subversion, fixed 1.0.8)
1616 CVE-2004-0748 version (httpd, fixed 2.0.51)
1617 CVE-2004-0747 version (httpd, fixed 2.0.51)
1618 CVE-2004-0746 version (kde, fixed 3.3)
1619 CVE-2004-0745 backport (lha)
1620 CVE-2004-0722 version (mozilla, fixed 1.7)
1621 CVE-2004-0721 version (kdelibs, fixed 3.3)
1622 CVE-2004-0718 version (mozilla, fixed 1.7)
1623 CVE-2004-0700 version (httpd, not 2.0)
1624 CVE-2004-0694 backport (lha, changelog)
1625 CVE-2004-0693 version (qt, fixed 3.3.3)
1626 CVE-2004-0692 version (qt, fixed 3.3.3)
1627 CVE-2004-0691 version (qt, fixed 3.3.3)
1628 CVE-2004-0690 version (kdelibs, fixed after 3.2.3)
1629 CVE-2004-0689 version (kdelibs, fixed 3.3.0)
1630 CVE-2004-0688 version (openmotif)
1631 CVE-2004-0687 version (openmotif)
1632 CVE-2004-0686 version (samba, fixed 3.0.6)
1633 CVE-2004-0685 version (kernel, not 2.6)
1634 CVE-2004-0658 ignore (kernel) not a security issue
1635 CVE-2004-0648 version (thunderbird)
1636 CVE-2004-0648 version (mozilla)
1637 CVE-2004-0648 version (firefox)
1638 CVE-2004-0644 version (krb5, fixed after 1.3.4)
1639 CVE-2004-0643 version (krb5, fixed after 1.3.1)
1640 CVE-2004-0642 version (krb5, fixed after 1.3.4)
1641 CVE-2004-0639 version (squirrelmail, fixed after 1.2.10)
1642 CVE-2004-0635 version (ethereal, fixed 0.10.5)
1643 CVE-2004-0634 version (ethereal, fixed 0.10.5)
1644 CVE-2004-0633 version (ethereal, fixed 0.10.5)
1645 CVE-2004-0628 version (mysql, fixed 4.1.3)
1646 CVE-2004-0627 version (mysql, fixed 4.1.3)
1647 CVE-2004-0626 version (kernel, fixed 2.6.8)
1648 CVE-2004-0619 version (kernel) no driver
1649 CVE-2004-0607 version (racoon) note RHSA-2004:308 has wrong text
1650 CVE-2004-0603 backport (gzip) gzip-1.3.5-openbsd-owl-tmp.patch
1651 CVE-2004-0600 version (samba, fixed 3.0.6)
1652 CVE-2004-0599 version (mozilla, fixed 1.7.2)
1653 CVE-2004-0599 version (libpng10, fixed 1.0.16)
1654 CVE-2004-0599 version (libpng, fixed 1.2.6)
1655 CVE-2004-0598 version (libpng10, fixed 1.0.16)
1656 CVE-2004-0598 version (libpng, fixed 1.2.6)
1657 CVE-2004-0597 version (mozilla, fixed 1.7.2)
1658 CVE-2004-0597 version (libpng10, fixed 1.0.16)
1659 CVE-2004-0597 version (libpng, fixed 1.2.6)
1660 CVE-2004-0595 version (php, fixed 4.3.8)
1661 CVE-2004-0594 version (php, fixed 4.3.8)
1662 CVE-2004-0592 version (kernel, not upstream flaw)
1663 CVE-2004-0587 version (kernel) not upstream flaw
1664 CVE-2004-0558 version (cups, fixed 1.1.21)
1665 CVE-2004-0557 version (sox, fixed after 12.17.4)
1666 CVE-2004-0554 version (kernel, fixed 2.6.7)
1667 CVE-2004-0548 ignore (aspell, not fixed 0.50.5) not a security issue
1668 CVE-2004-0547 version (postgresql, fixed 7.2.1)
1669 CVE-2004-0541 version (squid)
1670 CVE-2004-0535 version (kernel, fixed 2.6.6)
1671 CVE-2004-0527 version (konqueror, not 3+)
1672 CVE-2004-0523 version (krb5, fixed 1.3.4)
1673 CVE-2004-0521 version (squirrelmail, fixed 1.4.3a)
1674 CVE-2004-0520 version (squirrelmail, fixed 1.4.3a)
1675 CVE-2004-0519 version (squirrelmail, fixed 1.4.3a)
1676 CVE-2004-0507 version (ethereal, fixed 0.10.4)
1677 CVE-2004-0506 version (ethereal, fixed 0.10.4)
1678 CVE-2004-0505 version (ethereal, fixed 0.10.4)
1679 CVE-2004-0504 version (ethereal, fixed 0.10.4)
1680 CVE-2004-0500 version (gaim, fixed 0.82)
1681 CVE-2004-0497 version (kernel, fixed 2.6.8)
1682 CVE-2004-0496 version (kernel, fixed 2.6.8)
1683 CVE-2004-0495 version (kernel, fixed 2.6.8)
1684 CVE-2004-0494 version (mc, fixed 4.6.1)
1685 CVE-2004-0493 version (httpd, fixed 2.0.50)
1686 CVE-2004-0492 version (httpd, not 2.0)
1687 CVE-2004-0491 version (kernel, not upstream)
1688 CVE-2004-0488 version (httpd, fixed 2.0.50)
1689 CVE-2004-0478 ignore (mozilla) not a security issue
1690 CVE-2004-0461 version (dhcp, fixed after 3.0.1rc13)
1691 CVE-2004-0460 version (dhcp, fixed after 3.0.1rc13)
1692 CVE-2004-0457 version (mysql, fixed after 4.0.20)
1693 CVE-2004-0452 version (perl, fixed 5.8.8)
1694 CVE-2004-0447 version (kernel, fixed 2.6.5)
1695 CVE-2004-0427 version (kernel, fixed 2.6.6)
1696 CVE-2004-0426 version (rsync, fixed 2.6.1)
1697 CVE-2004-0424 version (kernel, fixed 2.6.4)
1698 CVE-2004-0421 version (libpng10, fixed 1.0.16)
1699 CVE-2004-0421 version (libpng, fixed 1.0.16)
1700 CVE-2004-0419 version (xorg-x11, fixed 6.8.2 at least)
1701 CVE-2004-0418 version (cvs, fixed 1.11.17)
1702 CVE-2004-0417 version (cvs, fixed 1.11.17)
1703 CVE-2004-0416 version (cvs, fixed 1.11.17)
1704 CVE-2004-0415 version (kernel, fixed 2.6.8)
1705 CVE-2004-0414 version (cvs, fixed 1.11.17)
1706 CVE-2004-0413 version (subversion, fixed 1.0.5)
1707 CVE-2004-0412 version (mailman, fixed 2.1.5)
1708 CVE-2004-0411 version (kdelibs, fixed 3.3)
1709 CVE-2004-0409 version (xchat, fixed after 2.0.8)
1710 CVE-2004-0405 version (cvs, fixed 1.11)
1711 CVE-2004-0403 version (racoon, fixed 20040408a)
1712 CVE-2004-0398 version (neon, fixed 0.24.6)
1713 CVE-2004-0397 version (subversion, fixed 1.0.1)
1714 CVE-2004-0396 version (cvs, fixed 1.12.8)
1715 CVE-2004-0394 version (kernel, not 2.6) also not a vulnerability
1716 CVE-2004-0392 version (racoon, fixed 20040407b)
1717 CVE-2004-0388 version (mysql, fixed 4.1.11 at least)
1718 CVE-2004-0381 version (mysql, fixed 4.1.11 at least)
1719 CVE-2004-0367 version (ethereal, fixed 0.10.3)
1720 CVE-2004-0365 version (ethereal, fixed 0.10.3)
1721 CVE-2004-0263 version (php, fixed 4.3.5)
1722 CVE-2004-0256 version (libtool, fixed 1.5.2)
1723 CVE-2004-0235 backport (lha, changelog)
1724 CVE-2004-0234 backport (lha, changelog)
1725 CVE-2004-0233 version (utempter, fixed 0.5.5)
1726 CVE-2004-0232 version (mc, fixed 4.6.0)
1727 CVE-2004-0231 version (mc, fixed 4.6.0)
1728 CVE-2004-0229 version (kernel, fixed 2.6.6)
1729 CVE-2004-0228 version (kernel, fixed 2.6.6)
1730 CVE-2004-0226 version (mc, fixed 4.6.0)
1731 CVE-2004-0191 version (mozilla, fixed 1.4.2)
1732 CVE-2004-0189 version (squid, fixed 2.5.STABLE5)
1733 CVE-2004-0186 version (samba, not 3.0.2a)
1734 CVE-2004-0184 version (tcpdump, fixed 3.8.2)
1735 CVE-2004-0183 version (tcpdump, fixed 3.8.2)
1736 CVE-2004-0182 version (mailman) only affected Red Hat packages
1737 CVE-2004-0181 version (kernel, fixed 2.6.5)
1738 CVE-2004-0180 version (cvs, fixed 1.11.15)
1739 CVE-2004-0179 version (openoffice.org)
1740 CVE-2004-0179 version (neon, fixed 0.24.5)
1741 CVE-2004-0178 version (kernel, not 2.6)
1742 CVE-2004-0177 version (kernel, fixed 2.6.6)
1743 CVE-2004-0176 version (ethereal, fixed 0.10.3)
1744 CVE-2004-0175 version (openssh, fixed 3.4p1)
1745 CVE-2004-0175 backport (krb5) krb5-1.3.3-rcp-markus.patch
1746 CVE-2004-0174 version (httpd, fixed 2.0.49)
1747 CVE-2004-0173 version (httpd, fixed 2.0.49)
1748 CVE-2004-0164 version (racoon)
1749 CVE-2004-0155 version (racoon)
1750 CVE-2004-0154 version (nfs-utils, fixed 1.0.6)
1751 CVE-2004-0150 version (python, fixed 2.2.2)
1752 CVE-2004-0138 version (kernel, fixed 2.6.0)
1753 CVE-2004-0133 version (kernel, 2.6.4)
1754 CVE-2004-0113 version (httpd, fixed 2.0.49)
1755 CVE-2004-0112 version (openssl, not 0.9.8)
1756 CVE-2004-0112 backport (openssl097a, fixed 0.9.7d)
1757 CVE-2004-0111 version (gdk-pixbuf, fixed 0.20)
1758 CVE-2004-0110 version (libxml2, fixed 2.6.6)
1759 CVE-2004-0109 version (kernel, fixed 2.6.6)
1760 CVE-2004-0108 version (sysstat)
1761 CVE-2004-0107 version (sysstat, fixed after 4.0.7)
1762 CVE-2004-0106 version (XFree86)
1763 CVE-2004-0098 version (php)
1764 CVE-2004-0097 version (pwlib, fixed 1.6.0)
1765 CVE-2004-0096 version (mod_python, fixed after 2.7.9)
1766 CVE-2004-0094 version (XFree86, fixed 4.3.0)
1767 CVE-2004-0093 version (XFree86, fixed 4.3.0)
1768 CVE-2004-0084 version (XFree86)
1769 CVE-2004-0083 version (XFree86)
1770 CVE-2004-0082 version (samba, fixed 3.0.2)
1771 CVE-2004-0081 version (openssl097a, not 0.9.7)
1772 CVE-2004-0081 version (openssl, not 0.9.8)
1773 CVE-2004-0080 version (util-linux, fixed after 2.11f)
1774 CVE-2004-0079 version (openssl, not 0.9.8)
1775 CVE-2004-0079 backport (openssl097a, fixed 0.9.7c)
1776 CVE-2004-0078 version (mutt, fixed 1.4.2)
1777 CVE-2004-0077 version (kernel, fixed 2.6.3)
1778 CVE-2004-0075 version (kernel, not 2.6)
1779 CVE-2004-0057 version (tcpdump, fixed 3.8.2)
1780 CVE-2004-0055 version (tcpdump, fixed 3.8.2)
1781 CVE-2004-0042 ignore (vsftpd) disputed
1782 CVE-2004-0010 version (kernel, not 2.6)
1783 CVE-2004-0008 version (gaim, fixed 0.75)
1784 CVE-2004-0007 version (gaim, fixed 0.75)
1785 CVE-2004-0006 version (gaim, fixed 0.76)
1786 CVE-2004-0005 version (gaim, fixed 0.76)
1787 CVE-2004-0003 version (kernel, not 2.6)
1788 CVE-2004-0001 version (kernel, not 2.6)
1789 CVE-2003-1307 ignore (mod_php) not a vulnerability
1790 CVE-2003-1303 version (php, fixed 4.3.3)
1791 CVE-2003-1302 version (php, fixed 4.3.1)
1792 CVE-2003-1295 version (xscreensaver)
1793 CVE-2003-1294 version (xscreensaver, fixed 4.15)
1794 CVE-2003-1265 VULNERABLE (mozilla) not fixed upstream
1795 CVE-2003-1265 VULNERABLE (firefox) not fixed upstream
1796 CVE-2003-1232 version (emacs, fixed 21.3)
1797 CVE-2003-1201 version (openldap, not 2.2)
1798 CVE-2003-1161 version (kernel, not released version)
1799 CVE-2003-1138 backport (httpd, Red Hat only) contains /+ now
1800 CVE-2003-1029 version (tcpdump, fixed after 3.8.1)
1801 CVE-2003-1023 version (mc, 4.6.1)
1802 CVE-2003-1013 version (ethereal, fixed 0.10.0)
1803 CVE-2003-1012 version (ethereal, fixed 0.10.0)
1804 CVE-2003-0993 version (httpd, not 2.0)
1805 CVE-2003-0992 version (mailman, fixed 2.1.4)
1806 CVE-2003-0992 version (mailman, fixed 2.1.3)
1807 CVE-2003-0991 version (mailman, fixed 2.0.14)
1808 CVE-2003-0990 version (squirrelmail, fixed after 1.4.0)
1809 CVE-2003-0989 version (tcpdump, fixed 3.8.1)
1810 CVE-2003-0989 version (tcpdump, fixed 3.8.1)
1811 CVE-2003-0988 version (kdepim, fixed 3.1.5)
1812 CVE-2003-0988 version (kde, fixed 3.1.5)
1813 CVE-2003-0987 version (httpd, not 2.0)
1814 CVE-2003-0986 version (kernel, fixed 2.6.2)
1815 CVE-2003-0985 version (kernel, not 2.6)
1816 CVE-2003-0984 version (kernel, fixed 2.4.23)
1817 CVE-2003-0977 version (cvs, fixed 1.11.10)
1818 CVE-2003-0973 version (mod_python, fixed 3.0.4)
1819 CVE-2003-0972 version (screen, fixed after 4.0.1)
1820 CVE-2003-0971 version (gnupg, fixed after 1.0.2)
1821 CVE-2003-0968 version (freeradius, fixed after 0.9.3)
1822 CVE-2003-0967 version (freeradius, fixed after 0.9.2)
1823 CVE-2003-0965 version (mailman, fixed 2.1.4)
1824 CVE-2003-0963 version (lftp, fixed after 2.6.9)
1825 CVE-2003-0962 version (rsync, fixed 2.5.7)
1826 CVE-2003-0961 version (kernel, fixed 2.4.23)
1827 CVE-2003-0959 version (kernel, fixed 2.4.21)
1828 CVE-2003-0956 version (kernel, fixed 2.4.22)
1829 CVE-2003-0935 version (netsnmp, fixed 5.0.9)
1830 CVE-2003-0927 version (ethereal, fixed 0.9.16)
1831 CVE-2003-0926 version (ethereal, fixed 0.9.16)
1832 CVE-2003-0925 version (ethereal, fixed 0.9.16)
1833 CVE-2003-0924 version (netpbm, fixed 9.26)
1834 CVE-2003-0914 version (bind, not 9)
1835 CVE-2003-0901 version (postgresql, not 8)
1836 CVE-2003-0900 version (perl, only 5.8.1)
1837 CVE-2003-0885 version (xscreensaver, fixed 4.15)
1838 CVE-2003-0865 version (tomcat, fixed after 4.0.3)
1839 CVE-2003-0863 ignore (php) http://lists.nyphp.org/pipermail/talk/2003-November/006392.html
1840 CVE-2003-0861 version (php, fixed 4.3.3)
1841 CVE-2003-0860 version (php, fixed 4.3.3)
1842 CVE-2003-0859 version (glibc, checked source)
1843 CVE-2003-0858 version (quagga, fixed 0.95)
1844 CVE-2003-0856 version (iproute)
1845 CVE-2003-0854 version (coreutils, fixed 5.1.3)
1846 CVE-2003-0853 version (coreutils, fixed 5.1.3)
1847 CVE-2003-0851 version (openssl097a, not 0.9.7)
1848 CVE-2003-0851 version (openssl, not 0.9.8)
1849 CVE-2003-0795 version (quagga, fixed 0.96.4)
1850 CVE-2003-0794 version (gdm, fixed 2.4.1.7)
1851 CVE-2003-0793 version (gdm, fixed 2.4.1.7)
1852 CVE-2003-0792 version (fetchmail, 6.2.4 only)
1853 CVE-2003-0791 version (mozilla, not after 1.4)
1854 CVE-2003-0789 version (httpd, fixed 2.0.48)
1855 CVE-2003-0788 version (cups, fixed 1.1.19)
1856 CVE-2003-0787 version (openssh, fixed 3.7.1p2)
1857 CVE-2003-0786 version (openssh, fixed 3.7.1p2)
1858 CVE-2003-0780 version (mysql, not 4.1)
1859 CVE-2003-0778 version (sane-backends, fixed 1.0.10)
1860 CVE-2003-0777 version (sane-backends, fixed 1.0.10)
1861 CVE-2003-0776 version (sane-backends, fixed 1.0.10)
1862 CVE-2003-0775 version (sane-backends, fixed 1.0.10)
1863 CVE-2003-0774 version (sane-backends, fixed 1.0.10)
1864 CVE-2003-0773 version (sane-backends, fixed 1.0.10)
1865 CVE-2003-0740 version (stunnel, fixed 3.26)
1866 CVE-2003-0730 version (xfree86, fixed after 4.3.0)
1867 CVE-2003-0700 version (kernel, not 2.6)
1868 CVE-2003-0699 version (kernel, not 2.6)
1869 CVE-2003-0695 version (openssh, fixed 3.7.1)
1870 CVE-2003-0694 version (sendmail, fixed 8.12.10)
1871 CVE-2003-0693 version (openssh, fixed 3.7)
1872 CVE-2003-0692 version (kde, fixed after 3.1.3)
1873 CVE-2003-0690 version (kde, fixed after 3.1.3)
1874 CVE-2003-0689 version (glibc, fixed 2.3.2 at least)
1875 CVE-2003-0688 version (sendmail, fixed 8.12.9)
1876 CVE-2003-0686 version (pam_smb, fixed 1.1.7)
1877 CVE-2003-0682 version (openssh, fixed 4.0p1 at least)
1878 CVE-2003-0681 version (sendmail, fixed 8.12.10)
1879 CVE-2003-0655 version (cdrtools, fixed 2.01a18)
1880 CVE-2003-0644 version (kdbg, not after 1.2.8)
1881 CVE-2003-0643 version (kernel, not 2.6)
1882 CVE-2003-0619 version (kernel, not 2.6)
1883 CVE-2003-0618 version (suidperl, fixed 5.8.6 at least)
1884 CVE-2003-0594 version (mozilla, ICAT)
1885 CVE-2003-0592 version (kde, fixed 3.1.3)
1886 CVE-2003-0564 version (mozilla, ICAT)
1887 CVE-2003-0555 ignore (ImageMagick) wasn't reproducable
1888 CVE-2003-0552 version (kernel, not 2.6)
1889 CVE-2003-0551 version (kernel, not 2.6)
1890 CVE-2003-0550 version (kernel, not 2.6)
1891 CVE-2003-0549 version (gdm, fixed 2.4.1.6)
1892 CVE-2003-0548 version (gdm, fixed 2.4.1.6)
1893 CVE-2003-0547 version (gdm, fixed 2.4.1.6)
1894 CVE-2003-0546 version (up2date, fixed after 3.1.23)
1895 CVE-2003-0545 version (openssl, not 0.9.8)
1896 CVE-2003-0545 backport (openssl097a, fixed 0.9.7c)
1897 CVE-2003-0544 version (openssl, not 0.9.8)
1898 CVE-2003-0544 backport (openssl097a, fixed 0.9.7c)
1899 CVE-2003-0543 version (openssl, not 0.9.8)
1900 CVE-2003-0543 backport (openssl097a, fixed 0.9.7c)
1901 CVE-2003-0542 version (httpd, fixed 2.0.48)
1902 CVE-2003-0541 backport (gtkhtml, fixed 1.1.10) gtkhtml-1.1.9-textslave.patch
1903 CVE-2003-0540 version (postfix, not 2.0 onwards)
1904 CVE-2003-0517 version (mgetty, fixed 1.1.29)
1905 CVE-2003-0516 version (mgetty, fixed 1.1.29)
1906 CVE-2003-0501 version (kernel, fixed 2.6.1)
1907 CVE-2003-0476 version (kernel, fixed 2.6.1)
1908 CVE-2003-0468 version (postfix, fixed 1.1.12)
1909 CVE-2003-0467 version (kernel, not 2.6)
1910 CVE-2003-0465 version (kernel, not 2.6)
1911 CVE-2003-0464 version (kernel, not 2.6)
1912 CVE-2003-0462 version (kernel, fixed 2.6.1)
1913 CVE-2003-0461 version (kernel, fixed 2.6.1)
1914 CVE-2003-0459 version (kdelibs, not 3.2)
1915 CVE-2003-0455 version (ImageMagick)
1916 CVE-2003-0442 version (php, fixed 4.3.2)
1917 CVE-2003-0434 version (xpdf, fixed 2.02pl1)
1918 CVE-2003-0432 version (ethereal, fixed after 0.9.12)
1919 CVE-2003-0431 version (ethereal, fixed after 0.9.12)
1920 CVE-2003-0430 version (ethereal, fixed after 0.9.12)
1921 CVE-2003-0429 version (ethereal, fixed after 0.9.12)
1922 CVE-2003-0428 version (ethereal, fixed after 0.9.12)
1923 CVE-2003-0427 backport (mikmod)
1924 CVE-2003-0418 version (kernel, not 2.6)
1925 CVE-2003-0388 version (pam, fixed 0.78)
1926 CVE-2003-0386 version (openssh, fixed after 3.6.1)
1927 CVE-2003-0370 version (kde, fixed 3.0)
1928 CVE-2003-0367 backport (gzip)
1929 CVE-2003-0364 version (kernel, not 2.6)
1930 CVE-2003-0357 version (ethereal, fixed after 0.9.11)
1931 CVE-2003-0356 version (ethereal, fixed after 0.9.11)
1932 CVE-2003-0354 version (ghostscript, fixed 7.07)
1933 CVE-2003-0328 version (epic, fixed epic4-2.2 at least)
1934 CVE-2003-0300 ignore (sylpheed) only a crasher
1935 CVE-2003-0299 ignore (mutt) only a crasher
1936 CVE-2003-0298 version (mozilla, fixed after 1.4a)
1937 CVE-2003-0296 version (evolution, fixed 1.4.5 at least)
1938 CVE-2003-0289 version (cdrtools, fixed 2.01a14)
1939 CVE-2003-0282 version (unzip, fixed 5.51)
1940 CVE-2003-0255 version (gnupg, fixed 1.2.2)
1941 CVE-2003-0253 version (httpd, fixed 2.0.47)
1942 CVE-2003-0252 version (nfs-utils, fixed 1.0.4)
1943 CVE-2003-0251 version (ypserv, fixed 2.7)
1944 CVE-2003-0249 ignore (php) see CVE
1945 CVE-2003-0248 version (kernel, not 2.6)
1946 CVE-2003-0247 version (kernel, not 2.6)
1947 CVE-2003-0246 version (kernel, not 2.6)
1948 CVE-2003-0245 version (httpd, fixed 2.0.47)
1949 CVE-2003-0245 version (httpd, fixed 2.0.46)
1950 CVE-2003-0244 version (kernel, not 2.6)
1951 CVE-2003-0211 version (xinetd, fixed 2.3.11)
1952 CVE-2003-0204 version (kde, fixed after 3.1.1)
1953 CVE-2003-0201 version (samba, fixed 2.2.8a)
1954 CVE-2003-0196 version (samba, fixed 2.2.8a)
1955 CVE-2003-0195 version (cups, fixed 1.1.19)
1956 CVE-2003-0194 version (tcpdump, not upstream)
1957 CVE-2003-0192 version (httpd, fixed 2.0.47)
1958 CVE-2003-0190 version (openssh, fixed 3.6.1p1)
1959 CVE-2003-0189 version (httpd, fixed 2.0.46)
1960 CVE-2003-0188 version (lv, fixed 4.51 at least)
1961 CVE-2003-0187 version (kernel, not 2.6)
1962 CVE-2003-0167 version (mutt, fixed 1.4.1)
1963 CVE-2003-0166 version (php, fixed 4.3.2)
1964 CVE-2003-0165 version (eog, fixed 2.2.2)
1965 CVE-2003-0161 version (sendmail, fixed 8.12.9)
1966 CVE-2003-0160 version (squirrelmail, fixed 1.2.11)
1967 CVE-2003-0159 version (ethereal, fixed after 0.9.9)
1968 CVE-2003-0150 version (mysql, fixed 3.23.56)
1969 CVE-2003-0147 version (openssl, not 0.9.8)
1970 CVE-2003-0147 backport (openssl097a, fixed 0.9.7b)
1971 CVE-2003-0146 version (netpbm, fixed 10.18)
1972 CVE-2003-0145 version (tcpdump, fixed 3.7.2)
1973 CVE-2003-0140 version (mutt, fixed 1.4.1)
1974 CVE-2003-0139 version (krb5, fixed 1.3)
1975 CVE-2003-0138 version (krb5, fixed 1.3)
1976 CVE-2003-0135 version (vsftpd, not upstream)
1977 CVE-2003-0133 version (evolution, fixed 1.2.4)
1978 CVE-2003-0132 version (httpd, fixed 2.0.45)
1979 CVE-2003-0131 version (openssl, not 0.9.8)
1980 CVE-2003-0131 backport (openssl097a, fixed 0.9.7b)
1981 CVE-2003-0130 version (evolution, fixed 1.2.3)
1982 CVE-2003-0129 version (evolution, fixed 1.2.3)
1983 CVE-2003-0128 version (evolution, fixed 1.2.3)
1984 CVE-2003-0127 version (kernel, not 2.6)
1985 CVE-2003-0124 version (man, fixed 1.5l)
1986 CVE-2003-0108 version (tcpdump, fixed after 3.7.1)
1987 CVE-2003-0107 version (zlib, fixed 1.2.0.2 at least)
1988 CVE-2003-0102 version (file, fixed 3.41)
1989 CVE-2003-0097 version (php, fixed 4.3.1)
1990 CVE-2003-0093 version (tcpdump, fixed 3.7.2)
1991 CVE-2003-0086 version (samba, fixed 2.2.8)
1992 CVE-2003-0085 version (samba, fixed 2.2.8)
1993 CVE-2003-0083 version (httpd, fixed 2.0.46)
1994 CVE-2003-0082 version (krb5, fixed after 1.2.7)
1995 CVE-2003-0081 version (ethereal, fixed after 0.9.9)
1996 CVE-2003-0078 version (openssl097a, fixed 0.9.7a)
1997 CVE-2003-0078 version (openssl, not 0.9.8)
1998 CVE-2003-0073 version (mysql, fixed 3.23.55)
1999 CVE-2003-0072 version (krb5, fixed after 1.2.7)
2000 CVE-2003-0071 version (xorg-x11, fixed in 6.8.2 at least)
2001 CVE-2003-0070 version (vte, fixed 0.11.1 at least)
2002 CVE-2003-0063 version (xorg-x11, fixed at least in 4.2.99)
2003 CVE-2003-0060 version (krb5, fixed 1.2.5)
2004 CVE-2003-0059 version (krb5, fixed 1.2.5)
2005 CVE-2003-0058 version (krb5, fixed 1.2.5)
2006 CVE-2003-0044 version (tomcat, fixed after 3.3.1a)
2007 CVE-2003-0043 version (tomcat, fixed 3.3.1a)
2008 CVE-2003-0041 version (krb5, fixed after 1.2.7)
2009 CVE-2003-0038 version (mailman, fixed 2.0.13 at least)
2010 CVE-2003-0028 version (krb5, fixed after 1.2.7)
2011 CVE-2003-0028 version (glibc, fixed after 2.3.1)
2012 CVE-2003-0026 version (dhcpd, fixed 3.0.1)
2013 CVE-2003-0020 version (httpd, fixed 2.0.49)
2014 CVE-2003-0019 version (kernel-utils, not upstream)
2015 CVE-2003-0018 version (kernel, not 2.6)
2016 CVE-2003-0017 version (httpd, fixed 2.0.44)
2017 CVE-2003-0016 version (httpd, fixed 2.0.44)
2018 CVE-2003-0015 version (cvs, fixed 1.11.5)
2019 CVE-2003-0001 version (kernel, not 2.6)
2020
2021 older, happened to deal with at same time:
2022
2023 CVE-2002-2215 version (php, fixed 4.3.0)
2024 CVE-2002-2214 version (php, fixed 4.2.2)
2025 CVE-2002-2211 ignore (bind) see http://www.kb.cert.org/vuls/id/457875
2026 CVE-2002-2210 ignore (openoffice) binary install only (not rpm install)
2027 CVE-2002-2204 ignore (rpm) by design
2028 CVE-2002-2196 version (samba, fixed 2.2.5)
2029 CVE-2002-2185 version (kernel, fixed 2.6.15)
2030 CVE-2002-2103 version (apache, not 2.0)
2031 CVE-2002-1963 version (kernel, not 2.6)
2032 CVE-2002-1976 ignore (ifconfig) "use ip"
2033 CVE-2002-1914 version (dump, fixed 0.4b29)
2034 CVE-2002-1850 version (mod_cgi, fixed 2.0.41)
2035 CVE-2002-1827 version (sendmail, fixed after 8.12.3)
2036 CVE-2002-1814 ignore (bonobo) not shipped setuid
2037 CVE-2002-1793 version (mod_ssl), also only hp
2038 CVE-2002-1783 version (php, fixed after 4.2.3)
2039 CVE-2002-1765 version (evolution, fixed 1.0.5)
2040 CVE-2002-1593 version (httpd, fixed 2.0.42)
2041 CVE-2002-1573 version (kernel, not 2.6)
2042 CVE-2002-1572 version (kernel, not 2.6)
2043 CVE-2002-1571 version (kernel, not 2.6)
2044 CVE-2002-1510 version (XFree86, fixed 4.2.0)
2045 CVE-2002-1472 version (XFree86, fixed 4.2.1)
2046 CVE-2002-1363 version (libpng, fixed 1.2.6)
2047 CVE-2002-0517 version (XFree86, didn't affect Linux)
2048 CVE-2002-0164 version (XFree86, fixed 4.2.1)
2049 CVE-2001-1490 version (mozilla, fixed 1.0.0)
2050 CVE-2001-1494 version (util-linux, fixed 2.11n)
2051 CVE-2001-0955 version (XFree86, fixed 4.2.0)
2052 CVE-2001-0474 version (mesa, fixed 3.3-14)
2053 CVE-2000-1199 backport (htdig) fixed htdig-3.2.0b6-unescaped_output.patch
2054 CVE-2000-0504 version (libICE, fixed XFree86:4.0.1)
2055 CVE-1999-1572 backport (cpio)

admin@fedoraproject.org
ViewVC Help
Powered by ViewVC 1.1.2