Contents of /fedora-security/audit/fc7

# $Id: fc7,v 1.381 2008/06/20 08:50:45 thoger Exp $

# ** are items that need attention
# *CVE are items that need verification for Fedora 7
# (mozilla) = (firefox, seamonkey, thunderbird, yelp, devhelp, galeon, liferea. epiphany)
# A couple of first F7 updates were marked as FEDORA-2007-0001

rhbz293031 fixed (nx) #293031 [since FEDORA-2008-2258] 
rhbz249840 version (tor, fixed 0.1.2.15) #249840 [since FEDORA-2007-1674] 
CVE-2008-2575 fixed (cbrpager) [since FEDORA-2008-4440] 
CVE-2008-2426 fixed (imlib2) [since FEDORA-2008-4950] 
CVE-2008-2420 fixed (stunnel, fixed 4.24) [since FEDORA-2008-4606] 
CVE-2008-2392 ignore (wordpress) issue only in certain deployments, not affected by default
CVE-2008-2363 VULNERABLE (pan) 
CVE-2008-2362 fixed (xorg-x11-server) #450924 [since FEDORA-2008-5285] 
CVE-2008-2361 fixed (xorg-x11-server) #450924 [since FEDORA-2008-5285] 
CVE-2008-2360 fixed (xorg-x11-server) #450924 [since FEDORA-2008-5285] 
CVE-2008-2359 ignore (system-config-network) F8 specific issue
CVE-2008-2357 fixed (mtr, fixed 0.73) 
CVE-2008-2302 fixed (Django, fixed 0.96.2) #447257 [since FEDORA-2008-4191] 
CVE-2008-2292 fixed (net-snmp, fixed 5.4.2.pre1) [since FEDORA-2008-5224] 
CVE-2008-2276 VULNERABLE (mantis) upstream fix in 1.2.0a1 seems useless
CVE-2008-2266 ignore (perl-Convert-UUlib) embedded uulib copy uses mkstemp
CVE-2008-2168 ignore (httpd) browser issue, not apache
CVE-2008-2152 fixed (openoffice.org, fixed 2.4.1) #450649 [since FEDORA-2008-5239] 
CVE-2008-2146 version (wordpress, fixed 2.2.3) 
CVE-2008-2119 ignore (asterisk, fixed 1.2.29) AST-2008-008, only for 1.0.x and 1.2.x
CVE-2008-2109 fixed (libid3tag) #445813 [since FEDORA-2008-3874] 
CVE-2008-2108 fixed (php, fixed 5.2.6) [since FEDORA-2008-1734] 
CVE-2008-2107 fixed (php, fixed 5.2.6) [since FEDORA-2008-1734] 
CVE-2008-2105 fixed (bugzilla, fixed 3.0.4, 3.1.4) #445821 [since FEDORA-2008-3488] 
CVE-2008-2104 ignore (bugzilla, fixed 3.1.4) only affects 3.1.3, not in Fedora
CVE-2008-2103 fixed (bugzilla, fixed 3.0.4, 3.1.4) #445821 [since FEDORA-2008-3488] 
CVE-2008-2085 VULNERABLE (sipp) #446219 
CVE-2008-2079 VULNERABLE (mysql, fixed 5.0.60) #445804 
CVE-2008-2068 version (wordpress, fixed 2.5.1) [since FEDORA-2008-3319] 
CVE-2008-2051 fixed (php, fixed 5.2.6) [since FEDORA-2008-1734] 
CVE-2008-2050 ignore (php, fixed 5.2.6) 
CVE-2008-2033 ignore (zoneminder) duplicate of CVE-2008-1381
CVE-2008-2004 VULNERABLE (xen) disables format autodetection by default [since xen-3.1.2-3.fc7]
CVE-2008-2004 VULNERABLE (qemu) fix mostly useless without libvirt changes
CVE-2008-2004 VULNERABLE (kvm) fix mostly useless without libvirt changes
CVE-2008-2000 ignore (WebKit) browser DoS
CVE-2008-1999 VULNERABLE (WebKit) 
CVE-2008-1996 fixed (licq, fixed 1.3.6) #445237 [since FEDORA-2008-3909] 
CVE-2008-1974 fixed (kronolith, fixed 3.1.8) #444403 [since FEDORA-2008-3460] 
CVE-2008-1964 ignore (xine-lib) bogus vulnerability report
CVE-2008-1959 fixed (sipp, fixed 3.1) [since FEDORA-2008-3508] 
CVE-2008-1950 fixed (gnutls, fixed 2.2.4) #447509 [since FEDORA-2008-4274] 
CVE-2008-1949 fixed (gnutls, fixed 2.2.4) #447509 [since FEDORA-2008-4274] 
CVE-2008-1948 fixed (gnutls, fixed 2.2.4) #447509 [since FEDORA-2008-4274] 
CVE-2008-1947 VULNERABLE (tomcat5, fixed 5.5.27) 
CVE-2008-1944 VULNERABLE (xen, fixed 3.2) [since xen-3.1.2-3.fc7]
CVE-2008-1943 VULNERABLE (xen) [since xen-3.1.2-3.fc7]
CVE-2008-1937 ignore (moin, fixed 1.6.3) 1.6.x only
CVE-2008-1930 ignore (wordpress, fixed 2.5.1) [since wordpress-2.5.1-1.fc7] only for wp 2.5.0
CVE-2008-1928 fixed (perl-Imager, fixed 0.64) #443939 [since FEDORA-2008-3920] 
CVE-2008-1927 fixed (perl) [since FEDORA-2008-3399] 
CVE-2008-1926 VULNERABLE (util-linux) 
CVE-2008-1924 version (phpMyAdmin, fixed 2.11.5.2) [since FEDORA-2008-3560] PMASA-2008-3
CVE-2008-1923 version (asterisk) upstream fix incomplete, resulting in CVE-2008-1897
CVE-2008-1897 fixed (asterisk, fixed 1.4.19.1) [since FEDORA-2008-3365] 
CVE-2008-1878 fixed (xine-lib, fixed 1.1.12.1) #443054 [since FEDORA-2008-3326] nsf demuxer overflow
CVE-2008-1845 version (mksh, fixed 33d) [since FEDORA-2008-3070] 
CVE-2008-1837 ignore (clamav, fixed 0.93) unrar code not shipped
CVE-2008-1836 ignore (clamav, fixed 0.93) affected code introduced after 0.92.1
CVE-2008-1835 ignore (clamav, fixed 0.93) unrar code not shipped
CVE-2008-1833 fixed (clamav, fixed 0.93-rc1) #442362 [since FEDORA-2008-3358] 
CVE-2008-1808 VULNERABLE (freetype, fixed 2.3.6) 
CVE-2008-1807 VULNERABLE (freetype, fixed 2.3.6) 
CVE-2008-1806 VULNERABLE (freetype, fixed 2.3.6) 
CVE-2008-1804 fixed (snort, fixed 2.8.1) [since FEDORA-2008-5045] 
CVE-2008-1803 fixed (rdesktop, fixed 1.6.0) #445841 [since FEDORA-2008-3985] 
CVE-2008-1802 fixed (rdesktop, fixed 1.6.0) #445841 [since FEDORA-2008-3985] 
CVE-2008-1801 fixed (rdesktop, fixed 1.6.0) #445841 [since FEDORA-2008-3985] 
CVE-2008-1796 fixed (comix) [since FEDORA-2008-2993] 
CVE-2008-1767 version (libxslt, fixed 1.1.24) [since libxslt-1.1.24-1.fc7] 
CVE-2008-1729 ignore (drupal) 6.x only
CVE-2008-1722 fixed (cups) #445801 [since FEDORA-2008-3449] 
CVE-2008-1720 fixed (rsync, fixed 3.0.2) #441689 [since FEDORA-2008-3060] 
CVE-2008-1693 version (xpdf, fixed 3.02) 
CVE-2008-1693 ignore (kdegraphics) not affected
CVE-2008-1693 ignore (koffice) not affected
CVE-2008-1693 fixed (poppler, fixed 0.6.2) #443026 [since FEDORA-2008-3312] 
CVE-2008-1688 ignore (m4, fixed 1.4.11) not really a security issue
CVE-2008-1687 ignore (m4, fixed 1.4.11) not really a security issue
CVE-2008-1686 fixed (libfishsound, fixed 0.9.1) #441246 [since FEDORA-2008-3117] 
CVE-2008-1686 fixed (speex) #442571 [since FEDORA-2008-3191] 
CVE-2008-1678 ignore (httpd) only affects systems with openssl >= 0.9.8e
CVE-2008-1677 VULNERABLE (fedora-ds-base) #445808 
CVE-2008-1672 ignore (openssl, fixed 0.9.8h) not affected
CVE-2008-1671 ignore (kdelibs) start_kdeinit not setuid
CVE-2008-1670 ignore (kdelibs) kdelibs 4.x only
CVE-2008-1670 fixed (kdelibs4) #444398 [since FEDORA-2008-3379] kdelibs 4.x only
CVE-2008-1657 VULNERABLE (openssh, fixed 4.9) #280461
CVE-2008-1652 version (Perlbal, fixed 1.70) [since FEDORA-2008-2788] 
CVE-2008-1637 fixed (pdns-recursor, fixed 3.1.5) #440248 [since FEDORA-2008-3010] 
CVE-2008-1628 ignore (audit) affected function not used by anything
CVE-2008-1614 version (mod_suphp, fixed 0.6.3) [since FEDORA-2008-2815]
CVE-2008-1612 backport (squid, fixed 2.6.STABLE19) [since FEDORA-2008-2729] 
CVE-2008-1568 fixed (comix) improper shell escaping, bz#430635 [since FEDORA-2008-2993]
CVE-2008-1567 fixed (phpMyAdmin, fixed 2.11.5.1) [since FEDORA-2008-2874] 
CVE-2008-1563 fixed (wireshark, fixed 1.0) #435485 [since FEDORA-2008-2941] 
CVE-2008-1562 fixed (wireshark, fixed 1.0) #435485 [since FEDORA-2008-2941] 
CVE-2008-1561 fixed (wireshark, fixed 1.0) #435485 [since FEDORA-2008-2941] 
CVE-2008-1552 fixed (libsilc, fixed 1.1.7) #438382 [since FEDORA-2008-2641] 
CVE-2008-1532 version (Perlbal, fixed 1.70) #439055 [since FEDORA-2008-2788] 
CVE-2008-1531 fixed (lighttpd) #439067 [since FEDORA-2008-3343] 
CVE-2008-1515 fixed (otrs) #439933 [since FEDORA-2008-3100] 
CVE-2008-1488 VULNERABLE (php-pecl-apc) #438846 
CVE-2008-1483 ignore (openssh) was alrady fixed by another patch
CVE-2008-1482 fixed (xine-lib) #438669 [since FEDORA-2008-2945] 
CVE-2008-1475 VULNERABLE (roundup, fixed 1.4.5) 
CVE-2008-1474 fixed (roundup) #436548 [since FEDORA-2008-2471] 
CVE-2008-1468 fixed (namazu, fixed 2.0.18) #438666 [since FEDORA-2008-2678] 
CVE-2008-1467 fixed (centerim) #438871 [since FEDORA-2008-2869] 
CVE-2008-1423 fixed (libvorbis) #446341 [since FEDORA-2008-3898] 
CVE-2008-1420 fixed (libvorbis) #446341 [since FEDORA-2008-3898] 
CVE-2008-1419 fixed (libvorbis) #446341 [since FEDORA-2008-3898] 
CVE-2008-1394 ignore (plone) 
CVE-2008-1390 fixed (asterisk, fixed 1.4.19-rc3) #438132 [since FEDORA-2008-2620] 
CVE-2008-1387 fixed (clamav, fixed 0.93) #442362 [since FEDORA-2008-3358] 
CVE-2008-1384 ignore (php, fixed 5.2.6) 
CVE-2008-1382 fixed (libpng, fixed 1.2.27) [since FEDORA-2008-4947] 
CVE-2008-1382 fixed (libpng10) [since FEDORA-2008-3979] 
CVE-2008-1381 fixed (zoneminder, fixed 1.23.3) #444435 [since FEDORA-2008-3516] 
CVE-2008-1380 VULNERABLE (firefox, fixed 2.0.0.14) 
CVE-2008-1380 fixed (seamonkey, fixed 1.1.10) #442850 [since FEDORA-2008-3231] 
CVE-2008-1380 fixed (thunderbird, fixed 2.0.0.14) #442855 [since FEDORA-2008-3519] 
CVE-2008-1379 fixed (xorg-x11-server) #450924 [since FEDORA-2008-5285] 
CVE-2008-1377 fixed (xorg-x11-server) #450924 [since FEDORA-2008-5285] 
CVE-2008-1374 ignore (cups) only affects old cups versions in RHEL
CVE-2008-1373 fixed (cups) #440042 [since FEDORA-2008-2897] 
CVE-2008-1372 fixed (bzip2, fixed 1.0.5) #439855 [since FEDORA-2008-2970] 
CVE-2008-1364 ignore (dhcp) not affected
CVE-2008-1360 VULNERABLE (nagios, fixed 2.11) #437851
CVE-2008-1353 ignore (zabbix) #437848 Needs authorization
CVE-2008-1333 ignore (asterisk) not affected
CVE-2008-1332 fixed (asterisk, fixed 1.4.18.1) #438132 [since FEDORA-2008-2620] 
CVE-2008-1318 ignore (mediawiki) 1.11.2 security fix applies only for 1.11 we never shipped
CVE-2008-1304 ignore (wordpress) bogus CVE id description?
CVE-2008-1292 fixed (viewvc) #435349 [since FEDORA-2008-2159] 
CVE-2008-1291 fixed (viewvc) #435349 [since FEDORA-2008-2159] 
CVE-2008-1290 fixed (viewvc) #435349 [since FEDORA-2008-2159] 
CVE-2008-1289 fixed (asterisk, fixed 1.4.18.1) #438132 [since FEDORA-2008-2620] 
CVE-2008-1284 version (horde, fixed 3.1.7) #436628 [since FEDORA-2008-2406] 
CVE-2008-1270 ignore (lighttpd) Not a bug, requires unlikely and incredibly stupid configuration change with well-documented effects.
CVE-2008-1241 version (firefox, fixed 2.0.0.13) 
CVE-2008-1241 version (seamonkey, fixed 1.1.9) 
CVE-2008-1240 version (firefox, fixed 2.0.0.13) 
CVE-2008-1240 version (seamonkey, fixed 1.1.9) 
CVE-2008-1238 version (firefox, fixed 2.0.0.13) 
CVE-2008-1238 version (seamonkey, fixed 1.1.9) 
CVE-2008-1237 version (firefox, fixed 2.0.0.13) 
CVE-2008-1237 version (seamonkey, fixed 1.1.9) 
CVE-2008-1237 fixed (thunderbird, fixed 2.0.0.14) #442855 [since FEDORA-2008-3519] 
CVE-2008-1236 version (firefox, fixed 2.0.0.13) 
CVE-2008-1236 version (seamonkey, fixed 1.1.9) 
CVE-2008-1236 fixed (thunderbird, fixed 2.0.0.14) #442855 [since FEDORA-2008-3519] 
CVE-2008-1235 version (firefox, fixed 2.0.0.13) 
CVE-2008-1235 version (seamonkey, fixed 1.1.9) 
CVE-2008-1235 fixed (thunderbird, fixed 2.0.0.14) #442855 [since FEDORA-2008-3519] 
CVE-2008-1234 version (firefox, fixed 2.0.0.13) 
CVE-2008-1234 version (seamonkey, fixed 1.1.9) 
CVE-2008-1234 fixed (thunderbird, fixed 2.0.0.14) #442855 [since FEDORA-2008-3519] 
CVE-2008-1233 version (firefox, fixed 2.0.0.13) 
CVE-2008-1233 version (seamonkey, fixed 1.1.9) 
CVE-2008-1233 fixed (thunderbird, fixed 2.0.0.14) #442855 [since FEDORA-2008-3519] 
**CVE-2008-1227 fixed (libsilc) We updated this as non-security
CVE-2008-1218 version (dovecot, fixed 1.0.13) [since FEDORA-2008-2475] marginally affected
CVE-2008-1199 version (dovecot, fixed 1.0.11) [since FEDORA-2008-2475] not in default config
CVE-2008-1195 version (firefox, fixed 2.0.0.13) 
CVE-2008-1195 version (seamonkey, fixed 1.1.9) 
CVE-2008-1184 version (dnssec-tools, fixed 1.3.2) [since FEDORA-2008-1758] 
CVE-2008-1161 version (xine-lib, fixed 1.1.10.1) [since FEDORA-2008-1581] 
CVE-2008-1149 version (phpMyAdmin, fixed 2.11.5) [since FEDORA-2008-2229] 
CVE-2008-1145 version (ruby, fixed 1.8.6-p114) [since FEDORA-2008-2458]
CVE-2008-1136 VULNERABLE (vdccm, fixed 0.10.1) #436025 
CVE-2008-1133 ignore (drupal) #435815 drupal 6.x only
CVE-2008-1131 ignore (drupal) #435815 drupal 6.x only
CVE-2008-1111 fixed (lighttpd) #435808 [since FEDORA-2008-2278] 
CVE-2008-1110 version (xine-lib, fixed 1.1.10) [since FEDORA-2008-1047]
CVE-2008-1109 fixed (evolution) #449922 [since FEDORA-2008-5018] 
CVE-2008-1108 fixed (evolution) #449922 [since FEDORA-2008-5018] 
CVE-2008-1105 fixed (samba, fixed 3.0.30) [since FEDORA-2008-4797] 
CVE-2008-1103 VULNERABLE (blender) not fixed upstream
CVE-2008-1102 fixed (blender) #443935 [since FEDORA-2008-3862] 
CVE-2008-1100 fixed (clamav, fixed 0.93) #442362 [since FEDORA-2008-3358] 
CVE-2008-1099 fixed (moin) #438672 [since FEDORA-2008-3328] 
CVE-2008-1098 fixed (moin) #438672 [since FEDORA-2008-3328] 
CVE-2008-1078 ignore (am-utils) does not seem used by any other Fedora package
CVE-2008-1072 fixed (wireshark, fixed 0.99.8) #435485 [since FEDORA-2008-2941] 
CVE-2008-1071 fixed (wireshark, fixed 0.99.8) #435485 [since FEDORA-2008-2941] 
CVE-2008-1070 fixed (wireshark, fixed 0.99.8) #435485 [since FEDORA-2008-2941] 
CVE-2008-1066 version (php-Smarty, fixed 2.6.19) #435812 [since FEDORA-2008-1928]
CVE-2008-1066 fixed (gallery2) #438059 [since FEDORA-2008-2650] 
CVE-2008-1066 fixed (php-pear-PhpDocumentor) #438063 [since FEDORA-2008-2656] 
CVE-2008-1033 ignore (cups) only affected 1.3.6
CVE-2008-1026 fixed (WebKit, fixed r31388) [since FEDORA-2008-3415] 
CVE-2008-1025 fixed (WebKit, fixed r31438) [since FEDORA-2008-3415] 
CVE-2008-1011 fixed (WebKit) [since FEDORA-2008-3415] 
CVE-2008-1010 fixed (WebKit) [since FEDORA-2008-3415] 
CVE-2008-0983 fixed (lighttpd) #435808 [since FEDORA-2008-2278] 
CVE-2008-0960 fixed (net-snmp, fixed 5.4.1.1) [since FEDORA-2008-5224] 
CVE-2008-0947 fixed (krb5, fixed 1.6.4) #438022 [since FEDORA-2008-2637] 
CVE-2008-0932 fixed (sword) #433725 [since FEDORA-2008-1951] why? diatheke.pl is not shipped...
CVE-2008-0928 fixed (qemu) #433562 [since FEDORA-2008-1995] 
CVE-2008-0928 fixed (kvm) #433565 [since FEDORA-2008-1993] 
CVE-2008-0928 fixed (xen) #434638 [since FEDORA-2008-2083] 
CVE-2008-0891 ignore (openssl, fixed 0.9.8h) not affected
CVE-2008-0888 ignore (unzip) caught by glibc malloc checks
CVE-2008-0887 fixed (gnome-screensaver) #440255 [since FEDORA-2008-2967] 
CVE-2008-0806 fixed (wyrd) #433721 [since FEDORA-2008-1986] 
CVE-2008-0882 fixed (cups, fixed 1.3.6) #433802 [since FEDORA-2008-1976] 
CVE-2008-0782 fixed (moin) #432020 [since FEDORA-2008-1486] 
CVE-2008-0781 fixed (moin) #432749 [since FEDORA-2008-1880] 
CVE-2008-0780 fixed (moin) #432749 [since FEDORA-2008-1880] 
CVE-2008-0807 fixed (turba) #433318 [since FEDORA-2008-2040] 
CVE-2008-0786 version (cacti, fixed 0.8.7b) #432759 
CVE-2008-0785 version (cacti, fixed 0.8.7b) #432759 
CVE-2008-0784 version (cacti, fixed 0.8.7b) #432759 
CVE-2008-0783 version (cacti, fixed 0.8.7b) #432759 
CVE-2008-0728 fixed (clamav, fixed 0.92.1) [since FEDORA-2008-1608] 
CVE-2008-0674 fixed (pcre, fixed 7.6) #431676 [since FEDORA-2008-1842] 
CVE-2008-0668 fixed (gnumeric, fixed 1.8.1) #431228 [since FEDORA-2008-1313] SA28725
CVE-2008-0664 fixed (wordpress, fixed 2.3.3) #431550 [since FEDORA-2008-1559] 
CVE-2008-0658 fixed (openldap) #432013 [since FEDORA-2008-1568] 
CVE-2008-0646 fixed (deluge, fixed 0.5.8.3) [since FEDORA-2008-1198]
CVE-2008-0646 fixed (rb_libtorrent) [since FEDORA-2008-1245]
CVE-2008-0599 fixed (php, fixed 5.2.6) [since FEDORA-2008-1734] 
CVE-2008-0597 version (cups) only old CUPS versions affected
CVE-2008-0596 version (cups) only old CUPS versions affected
CVE-2008-0595 backport (dbus, fixed 1.1.20) [since FEDORA-2008-2043]
CVE-2008-0594 fixed (firefox, fixed 2.0.0.12) #432042 [since FEDORA-2008-1435] 
CVE-2008-0593 fixed (firefox, fixed 2.0.0.12) #432042 [since FEDORA-2008-1435] 
CVE-2008-0593 fixed (seamonkey, fixed 1.1.8) #432045 [since FEDORA-2008-1669] 
CVE-2008-0593 fixed (thunderbird, fixed 2.0.0.12) #432047 [since FEDORA-2008-2118] 
CVE-2008-0592 fixed (firefox, fixed 2.0.0.12) #432042 [since FEDORA-2008-1435] 
CVE-2008-0592 fixed (seamonkey, fixed 1.1.8) #432045 [since FEDORA-2008-1669] 
CVE-2008-0592 fixed (thunderbird, fixed 2.0.0.12) #432047 [since FEDORA-2008-2118] 
CVE-2008-0591 fixed (firefox, fixed 2.0.0.12) #432042 [since FEDORA-2008-1435] 
CVE-2008-0591 fixed (seamonkey, fixed 1.1.8) #432045 [since FEDORA-2008-1669] 
CVE-2008-0591 fixed (thunderbird, fixed 2.0.0.12) #432047 [since FEDORA-2008-2118] 
CVE-2008-0564 backport (mailman, fixed 2.1.10b1) [since FEDORA-2008-1356]
CVE-2008-0554 version (netpbm, fixed 10.27) 
CVE-2008-0553 fixed (perl-Tk) #431531 [since FEDORA-2008-1384] 
CVE-2008-0553 backport (tk, fixed 8.5.1) [since FEDORA-2008-1131]
CVE-2008-0553 fixed (tkimg) #444950 [since FEDORA-2008-3545] 
CVE-2008-0544 fixed (SDL_image) #430695 [since FEDORA-2008-1208] ILBM overflow
CVE-2008-0486 fixed (xine-lib, fixed 1.1.10.1) #431542 [since FEDORA-2008-1581] 
CVE-2008-0460 fixed (mediawiki) #430287 [since FEDORA-2008-2245] 
CVE-2008-0420 version (firefox, fixed 2.0.0.12) [since FEDORA-2008-1435]
CVE-2008-0420 version (seamonkey, fixed 1.1.8) [since FEDORA-2008-1669]
CVE-2008-0420 fixed (thunderbird, fixed 2.0.0.12) #432047 [since FEDORA-2008-2118] 
CVE-2008-0419 fixed (firefox, fixed 2.0.0.12) #432042 [since FEDORA-2008-1435] 
CVE-2008-0419 fixed (seamonkey, fixed 1.1.8) #432045 [since FEDORA-2008-1669] 
CVE-2008-0419 fixed (thunderbird, fixed 2.0.0.12) #432047 [since FEDORA-2008-2118] 
CVE-2008-0418 fixed (firefox, fixed 2.0.0.12) #432042 [since FEDORA-2008-1435] 
CVE-2008-0418 fixed (seamonkey, fixed 1.1.8) #432045 [since FEDORA-2008-1669] 
CVE-2008-0418 fixed (thunderbird, fixed 2.0.0.12) #432047 [since FEDORA-2008-2118] 
CVE-2008-0417 fixed (firefox, fixed 2.0.0.12) #432042 [since FEDORA-2008-1435] 
CVE-2008-0417 fixed (seamonkey, fixed 1.1.8) #432045 [since FEDORA-2008-1669] 
CVE-2008-0416 version (firefox, fixed 2.0.0.12) 
CVE-2008-0416 version (thunderbird, fixed 2.0.0.12) 
CVE-2008-0416 version (seamonkey, fixed 1.1.8) 
CVE-2008-0415 fixed (firefox, fixed 2.0.0.12) #432042 [since FEDORA-2008-1435] 
CVE-2008-0415 fixed (seamonkey, fixed 1.1.8) #432045 [since FEDORA-2008-1669] 
CVE-2008-0415 fixed (thunderbird, fixed 2.0.0.12) #432047 [since FEDORA-2008-2118] 
CVE-2008-0414 fixed (firefox, fixed 2.0.0.12) #432042 [since FEDORA-2008-1435] 
CVE-2008-0414 fixed (seamonkey, fixed 1.1.8) #432045 [since FEDORA-2008-1669] 
CVE-2008-0413 fixed (firefox, fixed 2.0.0.12) #432042 [since FEDORA-2008-1435] 
CVE-2008-0413 fixed (seamonkey, fixed 1.1.8) #432045 [since FEDORA-2008-1669] 
CVE-2008-0413 fixed (thunderbird, fixed 2.0.0.12) #432047 [since FEDORA-2008-2118] 
CVE-2008-0412 fixed (firefox, fixed 2.0.0.12) #432042 [since FEDORA-2008-1435] 
CVE-2008-0412 fixed (seamonkey, fixed 1.1.8) #432045 [since FEDORA-2008-1669] 
CVE-2008-0412 fixed (thunderbird, fixed 2.0.0.12) #432047 [since FEDORA-2008-2118] 
CVE-2008-0411 fixed (ghostscript) #435145 [since FEDORA-2008-2084] 
CVE-2008-0404 fixed (mantis) #429552 [since FEDORA-2008-0796] 
CVE-2008-0386 fixed (xdg-utils) #429513 [since FEDORA-2008-1015] 
CVE-2008-0364 ignore (bittorrent) Windows only
CVE-2008-0320 fixed (openoffice.org, fixed 2.4) #442845 [since FEDORA-2008-4104] 
CVE-2008-0318 fixed (clamav, fixed 0.92.1) [since FEDORA-2008-1608] 
CVE-2008-0314 fixed (clamav, fixed 0.93) #442362 [since FEDORA-2008-3358] 
CVE-2008-0304 version (seamonkey, fixed 1.1.8) [since FEDORA-2008-1669]
CVE-2008-0304 fixed (thunderbird, fixed 2.0.0.12) #432047 [since FEDORA-2008-2118] 
CVE-2008-0299 fixed (python-paramiko) #428729 [since FEDORA-2008-0644] 
CVE-2008-0274 version (drupal, fixed 5.6) DRUPAL-SA-2008-007 [since FEDORA-2008-0469]
CVE-2008-0273 version (drupal, fixed 5.6) DRUPAL-SA-2008-006 [since FEDORA-2008-0469]
CVE-2008-0272 version (drupal, fixed 5.6) DRUPAL-SA-2008-005 [since FEDORA-2008-0469]
CVE-2008-0285 ignore (ngircd) Not yet in Fedora, review request #234926
CVE-2008-0252 backport (python-cherrypy) [since FEDORA-2008-0333] 
CVE-2008-0238 version (xine-lib, fixed 1.1.9.1) [since FEDORA-2008-1047]
CVE-2008-0225 version (xine-lib, fixed 1.1.9.1) [since FEDORA-2008-1047]
**CVE-2008-0196 version (wordpress, not fixed 2.0.11) 
CVE-2008-0195 ignore (wordpress) File path is not a sensitive information
**CVE-2008-0194 version (wordpress, not fixed 2.0.4) 
CVE-2008-0193 ignore (wordpress, not fixed 2.0.11, and possibly 2.1.x and 2.3.x) wp-db-backup not in wp 2.3.2
**CVE-2008-0192 version (wordpress, not fixed 2.0.9) 
CVE-2008-0191 ignore (wordpress) File path is not a sensitive information
CVE-2008-0172 fixed (boost) #428974 [since FEDORA-2008-0880] 
CVE-2008-0171 fixed (boost) #428974 [since FEDORA-2008-0880] 
CVE-2008-0166 ignore (openssl) Debian specific
CVE-2008-0128 VULNERABLE (tomcat5) #429903 
CVE-2008-0123 fixed (moodle) #428731 [since FEDORA-2008-0610] 
CVE-2008-0122 fixed (bind) #429149 [since FEDORA-2008-0904] 
CVE-2008-0095 version (asterisk, fixed 1.4.17) AST-2008-001 [since FEDORA-2008-0198]
CVE-2008-0073 fixed (xine-lib, fixed 1.1.11) #438191 [since FEDORA-2008-2945] 
CVE-2008-0072 fixed (evolution) #436080 [since FEDORA-2008-2290] 
CVE-2008-0063 fixed (krb5, fixed 1.6.4) #438022 [since FEDORA-2008-2637] 
CVE-2008-0062 fixed (krb5, fixed 1.6.4) #438022 [since FEDORA-2008-2637] 
CVE-2008-0053 fixed (cups) #440042 [since FEDORA-2008-2897] 
CVE-2008-0047 fixed (cups) #440042 [since FEDORA-2008-2897] 
CVE-2008-0008 fixed (pulseaudio) #425481 [since FEDORA-2008-0994] 
CVE-2008-0006 fixed (libXfont) #429131 [since FEDORA-2008-0891] 
CVE-2008-0005 fixed (httpd, fixed 2.2.8) #427983 [since FEDORA-2008-1695] 
CVE-2008-0003 fixed (tog-pegasus, fixed 2.7.0) #427828 [since FEDORA-2008-0506] 
CVE-2008-0002 ignore (tomcat5) #432475 tomcat 6.x only
CVE-2007-6714 fixed (dbmail, fixed 2.2.9) #443020 [since FEDORA-2008-3371] 
CVE-2007-6703 VULNERABLE (vdccm, fixed 0.10.1) #436025 
CVE-2007-6698 fixed (openldap, fixed 2.3.36) #431409 [since FEDORA-2008-1307] 
CVE-2007-6697 fixed (SDL_image, fixed 1.2.7) #430239 [since FEDORA-2008-1231] 
CVE-2007-6693 version (gallery2, fixed 2.2.4) [since FEDORA-2007-4777] 
CVE-2007-6692 version (gallery2, fixed 2.2.4) [since FEDORA-2007-4777] 
CVE-2007-6691 version (gallery2, fixed 2.2.4) [since FEDORA-2007-4777] 
CVE-2007-6690 version (gallery2, fixed 2.2.4) [since FEDORA-2007-4777] 
CVE-2007-6689 version (gallery2, fixed 2.2.4) [since FEDORA-2007-4777] 
CVE-2007-6688 version (gallery2, fixed 2.2.4) [since FEDORA-2007-4777] 
CVE-2007-6687 version (gallery2, fixed 2.2.4) [since FEDORA-2007-4777] 
CVE-2007-6686 version (gallery2, fixed 2.2.4) [since FEDORA-2007-4777] 
CVE-2007-6685 version (gallery2, fixed 2.2.4) [since FEDORA-2007-4777] 
CVE-2007-6613 fixed (libcdio) #427198 [since FEDORA-2008-0104] 
CVE-2007-6612 ignore (rubygem-mongrel, only affects 1.0.4) affected version was not shipped
CVE-2007-6611 fixed (mantis) #427279 [since FEDORA-2008-0353] 
CVE-2007-6601 fixed (postgresql, fixed 8.2.6) #427772 [since FEDORA-2008-0552] 
CVE-2007-6600 fixed (postgresql, fixed 8.2.6) #427772 [since FEDORA-2008-0552] 
CVE-2007-6598 ignore (dovecot) Needs knowledge of victim's password
CVE-2007-6596 ignore (clamav) Might be considered a mail client flaw, not security for upstream
CVE-2007-6595 version (clamav, fixed 0.92.1) #427287 issue (2) not security for upstream
CVE-2007-6532 version (libxfcegui4) #412751 [since FEDORA-2007-4385]
CVE-2007-6531 version (xfce-panel) #412751 [since FEDORA-2007-4385]
CVE-2007-6465 version (ganglia, fixed 3.0.6) [since FEDORA-2007-4584]
CVE-2007-6451 version (wireshark, fixed 0.99.7) [since FEDORA-2007-4690]
CVE-2007-6450 version (wireshark, fixed 0.99.7) [since FEDORA-2007-4690]
CVE-2007-6441 version (wireshark, fixed 0.99.7) [since FEDORA-2007-4690]
CVE-2007-6439 version (wireshark, fixed 0.99.7) [since FEDORA-2007-4690]
CVE-2007-6438 version (wireshark, fixed 0.99.7) [since FEDORA-2007-4690]
CVE-2007-6429 fixed (xorg-x11-server, fixed 1.4.1) #429125 [since FEDORA-2008-0831] 
CVE-2007-6428 fixed (xorg-x11-server, fixed 1.4.1) #429125 [since FEDORA-2008-0831] 
CVE-2007-6427 fixed (xorg-x11-server, fixed 1.4.1) #429125 [since FEDORA-2008-0831] 
CVE-2007-6423 ignore (httpd) can not be reproduced by upstream
CVE-2007-6422 fixed (httpd, fixed 2.2.8) #427983 [since FEDORA-2008-1695] 
CVE-2007-6421 fixed (httpd, fixed 2.2.8) #427983 [since FEDORA-2008-1695] 
CVE-2007-6420 ignore (httpd, fixed 2.2.9) wontfix by upstream
CVE-2007-6415 fixed (scponly, fixed 4.8) #429731 [since FEDORA-2008-1728] 
CVE-2007-6388 fixed (httpd, fixed 2.2.8) #427983 [since FEDORA-2008-1695] 
CVE-2007-6341 ignore (perl-Net-DNS) no impact
CVE-2007-6337 fixed (clamav, fixed 0.92) #426211 [since FEDORA-2008-0170] 
CVE-2007-6336 fixed (clamav, fixed 0.92) #426211 [since FEDORA-2008-0170] 
CVE-2007-6335 fixed (clamav, fixed 0.92) #426211 [since FEDORA-2008-0170] 
CVE-2007-6437 fixed (syslog-ng) #426305 [since FEDORA-2008-0559] 
CVE-2007-6430 version (asterisk, fixed 1.4.16) [since FEDORA-2007-4593]
CVE-2007-6389 fixed (gnome-screensaver) #426169 [since FEDORA-2008-2818] 
CVE-2007-6353 fixed (exiv2) #425922 [since FEDORA-2007-4551] 
CVE-2007-6352 fixed (libexif) #425621 [since FEDORA-2007-4608] 
CVE-2007-6351 fixed (libexif) #425621 [since FEDORA-2007-4608] 
CVE-2007-6350 fixed (scponly) #429731 [since FEDORA-2008-1728] rsync vector only
CVE-2007-6348 ignore (squirrelmail) trojaned version was not shipped
CVE-2007-6328 ignore (dosbox) design decision
CVE-2007-6321 fixed (roundcubemail) #423281 [since FEDORA-2008-5315] 
CVE-2007-6318 VULNERABLE (wordpress)
CVE-2007-6313 ignore (mysql) 5.1+ only
CVE-2007-6304 ignore (mysql, fixed 5.0.52) federated engine not built
CVE-2007-6303 backport (mysql, fixed 5.0.52) #424921 [since FEDORA-2007-4471]
CVE-2007-6299 version (drupal, fixed 5.4) [since FEDORA-2007-4136] SA-2007-031
CVE-2007-6286 fixed (tomcat5) #432475 [since FEDORA-2008-1603] 
CVE-2007-6285 fixed (autofs) #426399 [since FEDORA-2007-4709] 
CVE-2007-6284 version (libxml2, fixed 2.6.31) [since FEDORA-2008-0477]
CVE-2007-6283 backport (bind) #423061 [since FEDORA-2007-4658]
CVE-2007-6239 version (squid, fixed 2.6.17) #412381 [since FEDORA-2007-4161]
CVE-2007-6210 backport (zabbix) #407181 [since FEDORA-2007-4160]
CVE-2007-6209 ignore (zsh) #409871 We don't ship the script
CVE-2007-6208 ignore (claws) We don't ship the script
CVE-2007-6207 ignore (kernel-xen) Xen cross-domain memory read, ia64 only
CVE-2007-6206 version (kernel, fixed 2.6.22.17) Core dump owner issue
CVE-2007-6203 ignore (httpd) #409831 User can't unput garbage before method name
CVE-2007-6201 version (wesnoth, fixed 1.2.8) [since FEDORA-2007-3986]
CVE-2007-6183 version (ruby-gnome2) #405591 [since FEDORA-2007-4229]
CVE-2007-6131 VULNERABLE (scanbuttond) 
CVE-2007-6121 version (wireshark, fixed 0.99.7) [since FEDORA-2007-4690]
CVE-2007-6120 version (wireshark, fixed 0.99.7) [since FEDORA-2007-4690]
CVE-2007-6119 version (wireshark, fixed 0.99.7) [since FEDORA-2007-4690]
CVE-2007-6118 version (wireshark, fixed 0.99.7) [since FEDORA-2007-4690]
CVE-2007-6117 version (wireshark, fixed 0.99.7) [since FEDORA-2007-4690]
CVE-2007-6116 version (wireshark, fixed 0.99.7) [since FEDORA-2007-4690]
CVE-2007-6115 version (wireshark, fixed 0.99.7) [since FEDORA-2007-4690]
CVE-2007-6114 version (wireshark, fixed 0.99.7) [since FEDORA-2007-4690]
CVE-2007-6113 version (wireshark, fixed 0.99.7) [since FEDORA-2007-4690]
CVE-2007-6112 version (wireshark, fixed 0.99.7) [since FEDORA-2007-4690]
CVE-2007-6111 version (wireshark, fixed 0.99.7) [since FEDORA-2007-4690]
CVE-2007-6110 backport (htdig) [since FEDORA-2007-3907]
CVE-2007-6100 version (phpMyAdmin, fixed 2.11.2.2) [since FEDORA-2007-3666]
CVE-2007-6067 fixed (postgresql, fixed 8.2.6) #427772 [since FEDORA-2008-0552] 
CVE-2007-6061 fixed (audacity) #393251 [since FEDORA-2008-3456] 
CVE-2007-6035 version (cacti, fixed 0.8.7a) #391981 [since FEDORA-2007-3683]
CVE-2007-6029 ignore (clamav) insufficient information about the issue
CVE-2007-6018 fixed (horde) #428629 [since FEDORA-2008-2087] 
CVE-2007-6018 fixed (imp) #428633 [since FEDORA-2008-2087] 
CVE-2007-6018 fixed (wordpress) #426432 [since FEDORA-2008-0126] 
CVE-2007-6015 version (samba, fixed 3.0.28) [since FEDORA-2007-4269]
CVE-2007-6013 fixed (wordpress, fixed 2.5) [since wordpress-2.5.1-1.fc7]
CVE-2007-5977 version (phpMyAdmin, fixed 2.11.2.1) #385891 [since FEDORA-2007-3627]
CVE-2007-5976 version (phpMyAdmin, fixed 2.11.2.1) #385891 [since FEDORA-2007-3627]
CVE-2007-5972 ignore (krb5, fixed 1.6.4) not exploitable
CVE-2007-5971 fixed (krb5, fixed 1.6.4) #438022 [since FEDORA-2008-2637] 
CVE-2007-5970 ignore (mysql, fixed 5.1.23) mysql 5.1+ only, affects partitioning
CVE-2007-5969 backport (mysql, fixed 5.0.51) #424921 [since FEDORA-2007-4471]
CVE-2007-5965 version (qt4, fixed 4.3.3) [since FEDORA-2007-4354]
CVE-2007-5964 backport (autofs) #421351 [since FEDORA-2007-4469]
CVE-2007-5963 backport (kdebase) [since FEDORA-2008-1264] 
CVE-2007-5962 fixed (vsftpd) [since FEDORA-2008-4373] 
CVE-2007-5960 version (mozilla, fixed ff 2.0.0.10, sm 1.1.7) [since FEDORA-2007-3952]
CVE-2007-5959 version (mozilla, fixed ff 2.0.0.10, sm 1.1.7) [since FEDORA-2007-3952]
CVE-2007-5958 fixed (xorg-x11-server, fixed 1.4.1) #429125 [since FEDORA-2008-0831] 
CVE-2007-5947 version (mozilla, fixed ff 2.0.0.10, sm 1.1.7) [since FEDORA-2007-3952]
CVE-2007-5938 fixed (kernel) #385861 iwlwifi [since kernel-2.6.23.9-39.fc7]
CVE-2007-5937 backport (tetex) #379831 [since FEDORA-2007-3390] Multiple dviljk buffer overflows
CVE-2007-5936 backport (tetex) #379831 [since FEDORA-2007-3390] dviljk uses insecure temporary file
CVE-2007-5935 backport (tetex) #379831 [since FEDORA-2007-3390] dvips -z buffer overflow with long href
CVE-2007-5934 backport (php-pear-MDB2) #379091 [since FEDORA-2007-3369]
CVE-2007-5934 backport (php-pear-MDB2-Driver-mysql) #379121 [since FEDORA-2007-3369]
CVE-2007-5934 backport (php-pear-MDB2-Driver-mysqli) #379151 [since FEDORA-2007-3369]
CVE-2007-5925 backport (mysql, fixed 5.0.54) #424921 [since FEDORA-2007-4471]
CVE-2007-5907 VULNERABLE (xen) #390101
CVE-2007-5906 VULNERABLE (xen) #390101
CVE-2007-5902 ignore (krb5, fixed 1.6.4) not exploitable
CVE-2007-5901 fixed (krb5, fixed 1.6.4) #438022 [since FEDORA-2008-2637] 
CVE-2007-5900 ignore (php, fixed 5.2.5) 
CVE-2007-5899 fixed (php, fixed 5.2.5) [since FEDORA-2008-1734] 
CVE-2007-5898 fixed (php, fixed 5.2.5) [since FEDORA-2008-1734] 
CVE-2007-5894 ignore (krb5, fixed 1.6.4) not exploitable
CVE-2007-5849 ignore (cups, fixed 1.3.5) minimal impact, see #415131
CVE-2007-5848 version (cups, fixed 1.2.0) 
CVE-2007-5846 backport (net-snmp) [since FEDORA-2007-3019]
CVE-2007-5803 VULNERABLE (nagios, fixed 2.12) #437851
CVE-2007-5795 backport (emacs) #367581 [since FEDORA-2007-3056]
CVE-2007-5770 backport (ruby) #373381 [since FEDORA-2007-2685]
CVE-2007-5760 fixed (xorg-x11-server, fixed 1.4.1) #429125 [since FEDORA-2008-0831] 
CVE-2007-5759 ignore (clamav, fixed 0.92) duplicate of CVE-2007-6335
CVE-2007-5751 backport (liferea, fixed 1.4.6) #360641 [since FEDORA-2007-2725]
CVE-2007-5747 fixed (openoffice.org, fixed 2.4) #442845 [since FEDORA-2008-4104] 
CVE-2007-5746 fixed (openoffice.org, fixed 2.4) #442845 [since FEDORA-2008-4104] 
CVE-2007-5745 fixed (openoffice.org, fixed 2.4) #442845 [since FEDORA-2008-4104] 
CVE-2007-5742 version (wesnoth, fixed 1.2.8) [since FEDORA-2007-3986]
CVE-2007-5728 version (phpPgAdmin) seems to be fixed for some time
CVE-2007-5715 backport (denyhosts) fixed long ago
CVE-2007-5712 version (Django, fixed 0.96.1) #362761 [since FEDORA-2007-3157]
CVE-2007-5708 backport (openldap, fixed 2.3.39) #360081 [since FEDORA-2007-3124]
CVE-2007-5707 backport (openldap, fixed 2.3.39) #360081 [since FEDORA-2007-3124]
CVE-2007-5690 version (zaptel) [since FEDORA-2007-3094] not really an issue
CVE-2007-5626 ignore (bacula) known, documented limitation
CVE-2007-5624 version (nagios, fixed 2.10) #362791 [since FEDORA-2007-4123]
CVE-2007-5623 backport (nagios-plugins) #348731 [since FEDORA-2007-2713]
CVE-2007-5597 version (drupal, fixed 5.3) [since FEDORA-2007-2649]
CVE-2007-5596 version (drupal, fixed 5.3) [since FEDORA-2007-2649]
CVE-2007-5595 version (drupal, fixed 5.3) [since FEDORA-2007-2649]
CVE-2007-5594 version (drupal, fixed 5.3) [since FEDORA-2007-2649]
CVE-2007-5593 version (drupal, fixed 5.3) [since FEDORA-2007-2649]
CVE-2007-5589 version (phpmyadmin, fixed 2.11.1.2) #333661 PMASA-2007-6 [since FEDORA-2007-2738]
CVE-2007-5585 backport (rss-glx) #336331 [since FEDORA-2007-2652]
CVE-2007-5585 backport (tempest) #336331 [since FEDORA-2007-2652]
CVE-2007-5503 version (cairo, fixed 1.4.12) [since FEDORA-2007-3818] 
CVE-2007-5501 version (kernel) [since FEDORA-2007-3751]
CVE-2007-5500 version (kernel) [since FEDORA-2007-3751]
CVE-2007-5497 fixed (e2fsprogs) #414571 [since FEDORA-2007-4461] 
CVE-2007-5496 ignore (setroubleshoot, fixed 2.0) 
CVE-2007-5495 version (setroubleshoot, fixed 1.9.4) 
CVE-2007-5461 version (tomcat5) #334511 [since FEDORA-2007-3456]
CVE-2007-5416 ignore (drupal) Vulnerability in PHP<5.1.3, we're safe
CVE-2007-5398 version (samba) [since FEDORA-2007-3402]
CVE-2007-5395 version (link-grammar) #372341 [since FEDORA-2007-3339]
CVE-2007-5393 backport (xpdf) #372461 [since FEDORA-2007-3031]
CVE-2007-5393 backport (cups) [since FEDORA-2007-3100]
CVE-2007-5393 fixed (poppler) #372501 [since FEDORA-2008-1651] 
CVE-2007-5393 backport (kdegraphics) #372561 [since FEDORA-2007-2985]
CVE-2007-5393 backport (koffice) #372591 [since FEDORA-2007-3059]
CVE-2007-5393 backport (tetex) #372651 [since FEDORA-2007-3390]
CVE-2007-5392 backport (xpdf) #372461 [since FEDORA-2007-3031]
CVE-2007-5392 backport (cups) [since FEDORA-2007-3100]
CVE-2007-5392 fixed (poppler) #372501 [since FEDORA-2008-1651] 
CVE-2007-5392 backport (kdegraphics) #372561 [since FEDORA-2007-2985]
CVE-2007-5392 backport (koffice) #372591 [since FEDORA-2007-3059]
CVE-2007-5392 backport (tetex) #372651 [since FEDORA-2007-3390]
CVE-2007-5386 version (phpmyadmin, fixed 2.11.1.1) #333661 PMASA-2007-5 [since FEDORA-2007-2738]
CVE-2007-5340 version (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 [since FEDORA-2007-2664]
CVE-2007-5339 version (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 [since FEDORA-2007-2664]
CVE-2007-5339 version (thunderbird) [since FEDORA-2007-3431]
CVE-2007-5338 version (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 [since FEDORA-2007-2664]
CVE-2007-5337 version (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 [since FEDORA-2007-2664]
CVE-2007-5335 version (mozilla) ff 2.0.0.8, does not affect ff1.5 [since FEDORA-2007-2664]
CVE-2007-5334 version (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 [since FEDORA-2007-2664]
CVE-2007-5333 fixed (tomcat5) #428256 [since FEDORA-2008-1603] 
CVE-2007-5269 version (libpng10) [since FEDORA-2007-2521]
CVE-2007-5269 version (libpng, fixed 1.2.21) #337461 [since FEDORA-2007-2666]
CVE-2007-5268 ignore (libpng) shipped version too old and not affected
CVE-2007-5267 ignore (libpng) shipped version too old and not affected
CVE-2007-5266 ignore (libpng) shipped version too old and not affected
CVE-2007-5226 backport (dircproxy) #319301 [since FEDORA-2007-2419]
CVE-2007-5208 backport (hplip) #329111 [since FEDORA-2007-2527]
CVE-2007-5201 fixed (duplicity) #362821 [since FEDORA-2008-1584] 
CVE-2007-5200 backport (hugin) #362851 [since FEDORA-2007-2989]
CVE-2007-5198 fixed (nagios-plugins, fixed 1.4.10) #362881 [since FEDORA-2008-3146] 
CVE-2007-5197 backport (mono, fixed 1.2.5.1) #367531 [since FEDORA-2007-3130]
CVE-2007-5191 backport (util-linux) #320141 [since FEDORA-2007-2462]
CVE-2007-5162 version (ruby) #313801 [since FEDORA-2007-2406]
CVE-2007-5159 backport (ntfs-3g) #298651 [since FEDORA-2007-2295]
CVE-2007-5137 backport (tk, fixed 8.4.16) #332061 [since FEDORA-2007-2564]
CVE-2007-5135 backport (openssl, fixed 0.9.8d) [since FEDORA-2007-2530]
CVE-2007-5116 backport (perl) #378131 [since FEDORA-2007-3255]
CVE-2007-5106 ignore (wordpress) affects old 2.0.x versions
CVE-2007-5105 ignore (wordpress) affects old 2.0.x versions
CVE-2007-5079 VULNERABLE (gdm) #363011
CVE-2007-5038 version (bugzilla, fixed 3.0.2, 3.1.2) #299981 [since FEDORA-2007-2299]
CVE-2007-5037 version (inotify-tools) #299771 [since FEDORA-2007-3074]
CVE-2007-5034 version (elinks) #297981 [since FEDORA-2007-2224]
CVE-2007-5007 version (balsa) #297601 [since FEDORA-2007-2302]
CVE-2007-5000 fixed (httpd, fixed 2.2.8) #427983 [since FEDORA-2008-1695] 
CVE-2007-4999 version (pidgin, fixed 2.2.2) [since FEDORA-2007-2714]
CVE-2007-4996 version (pidgin, fixed 2.2.1) [since FEDORA-2007-2368]
CVE-2007-4995 backport (openssl, fixed 0.9.8f) [since FEDORA-2007-2530]
CVE-2007-4993 backport (xen) [since FEDORA-2007-2270]
CVE-2007-4990 version (xorg-x11-xfs, fixed 1.0.5) #373331 [since FEDORA-2007-4263]
CVE-2007-4974 backport (libsndfile) #296221 [since FEDORA-2007-2236]
CVE-2007-4965 backport (python) imageop module heap overflow [since FEDORA-2007-2663]
CVE-2007-4924 version (opal, fixed 2.2.10) #297551 [since FEDORA-2007-2245]
CVE-2007-4897 version (opal, fixed 2.2.9)
CVE-2007-4894 version (wordpress, fixed 2.2.3) [since FEDORA-2007-2143]
CVE-2007-4893 version (wordpress, fixed 2.2.3) [since FEDORA-2007-2143]
CVE-2007-4887 ignore (php, fixed 5.2.5) 
CVE-2007-4879 version (firefox, fixed 2.0.0.13) 
CVE-2007-4879 version (seamonkey, fixed 1.1.9) 
CVE-2007-4851 ignore (tk) duplicate of CVE-2007-5137
CVE-2007-4850 ignore (php, fixed 5.2.6) 
CVE-2007-4841 ignore (mozilla) Windows only
CVE-2007-4841 version (thunderbird) [since FEDORA-2007-3431] windows only anyway
CVE-2007-4840 ignore (php, fixed 5.2.5) 
CVE-2007-4829 VULNERABLE (perl-Archive-Tar) #315321
CVE-2007-4828 version (mediawiki, fixed 1.11.0, 1.10.2, 1.9.4) #287881 [since FEDORA-2007-2189]
CVE-2007-4826 version (quagga, fixed 0.99.9) [since FEDORA-2007-2196]
CVE-2007-4825 ignore (php, fixed 5.2.5) 
CVE-2007-4784 ignore (php, fixed 5.2.5) 
CVE-2007-4783 ignore (php, fixed 5.2.5) 
CVE-2007-4782 fixed (php, fixed 5.2.5) [since FEDORA-2008-1734] 
CVE-2007-4772 fixed (postgresql, fixed 8.2.6) #427772 [since FEDORA-2008-0552] 
CVE-2007-4771 fixed (icu) #430232 [since FEDORA-2008-1076] 
CVE-2007-4770 fixed (icu) #430232 [since FEDORA-2008-1076] 
CVE-2007-4769 fixed (postgresql, fixed 8.2.6) #427772 [since FEDORA-2008-0552] 
CVE-2007-4768 fixed (pcre, fixed 7.3) #378411 [since FEDORA-2008-1842] 
CVE-2007-4767 fixed (pcre, fixed 7.3) #378411 [since FEDORA-2008-1842] 
CVE-2007-4766 fixed (pcre, fixed 7.3) #378411 [since FEDORA-2008-1842] 
CVE-2007-4752 VULNERABLE (openssh) #280461
CVE-2007-4743 backport (krb5) incomplete CVE-2007-3999 fix [since FEDORA-2007-2066]
CVE-2007-4730 ignore (xorg-x11) #286051 ajax says F7 is not vulnerable
CVE-2007-4727 version (lighttpd) #284511 [since FEDORA-2007-2132]
CVE-2007-4721 ignore (wireshark) duplicate of CVE-2007-6113
CVE-2007-4663 ignore (php, fixed 5.2.4) #277991 safe_mode
CVE-2007-4662 ignore (php, fixed 5.2.4) #278101 triggerable only by modification to openssl.conf
CVE-2007-4661 ignore (php, fixed 5.2.4) 5.2.3, incomplete CVE-2007-2872 fix
CVE-2007-4660 version (php, fixed 5.2.4) [since FEDORA-2007-2215]
CVE-2007-4659 version (php, fixed 5.2.4) #276531 [since FEDORA-2007-2215]
CVE-2007-4658 version (php, fixed 5.2.4) #278011 [since FEDORA-2007-2215]
CVE-2007-4657 version (php, fixed 5.2.4) [since FEDORA-2007-2215]
CVE-2007-4650 version (gallery2) #267421 [since FEDORA-2007-2020]
CVE-2007-4629 version (mapserver, fixed 4.10.3) #272081 [since FEDORA-2007-2018]
CVE-2007-4631 version (qgit) #268381 [since FEDORA-2007-2108]
CVE-2007-4619 version (flac, fixed 1.2) #332571 [since FEDORA-2007-2596]
CVE-2007-4575 backport (openoffice.org, fixed 2.3.1) [since FEDORA-2007-4120]
CVE-2007-4573 version (kernel) [since FEDORA-2007-2298]
CVE-2007-4572 version (samba) [since FEDORA-2007-3402]
CVE-2007-4571 version (kernel) [since FEDORA-2007-2349]
CVE-2007-4569 backport (kdebase) #299731 [since FEDORA-2007-2361]
CVE-2007-4568 version (xorg-x11-xfs, fixed 1.0.5) #373261 [since FEDORA-2007-4263]
CVE-2007-4565 backport (fetchmail) #260861 [since FEDORA-2007-1983]
CVE-2007-4560 version (clamav) #260583 [since FEDORA-2007-2050]
CVE-2007-4559 VULNERABLE (python, not fixed upstream) #315281 Upstream WONTFIX. See where we use the code.
CVE-2007-4558 ignore (star, fixed 1.5a84) duplicate of CVE-2007-4134
CVE-2007-4543 version (bugzilla, fixed 3.0.1) #256021 [since FEDORA-2007-1853]
CVE-2007-4542 version (mapserver, fixed 4.10.3) #256561 [since FEDORA-2007-2018]
CVE-2007-4539 version (bugzilla, fixed 3.0.1) #256021 [since FEDORA-2007-1853]
CVE-2007-4538 version (bugzilla, fixed 3.0.1) #256021 [since FEDORA-2007-1853]
CVE-2007-4534 backport (vavoom) #256621 [since FEDORA-2007-1977]
CVE-2007-4533 backport (vavoom) #256621 [since FEDORA-2007-1977]
CVE-2007-4532 backport (vavoom) #256621 [since FEDORA-2007-1977]
CVE-2007-4510 version (clamav, fixed 0.91.2) #253780 [since FEDORA-2007-2050]
CVE-2007-4476 backport (cpio) [since FEDORA-2007-2744]
CVE-2007-4476 backport (tar) [since FEDORA-2007-2673]
CVE-2007-4465 version (httpd) [since FEDORA-2007-2214]
CVE-2007-4462 version (po4a) #253541 [since FEDORA-2007-1763]
CVE-2007-4460 backport (id3lib) #253553 [since FEDORA-2007-1774]
CVE-2007-4400 fixed (konversation) #362911 [since FEDORA-2008-2122] 
CVE-2007-4357 ignore (firefox) status bar can be overwrittten
CVE-2007-4352 backport (xpdf) #372461 [since FEDORA-2007-3031]
CVE-2007-4352 backport (cups) [since FEDORA-2007-3100]
CVE-2007-4352 fixed (poppler) #372501 [since FEDORA-2008-1651] 
CVE-2007-4352 backport (kdegraphics) #372561 [since FEDORA-2007-2985]
CVE-2007-4352 backport (koffice) #372591 [since FEDORA-2007-3059]
CVE-2007-4352 backport (tetex) #372651 [since FEDORA-2007-3390]
CVE-2007-4351 backport (cups) #361661 [since FEDORA-2007-2715]
CVE-2007-4323 backport (denyhosts) #252291 [since FEDORA-2007-0589]
CVE-2007-4321 backport (fail2ban) #252290 [since FEDORA-2007-0621] version since FEDORA-2007-1643
CVE-2007-4255 ignore (php) msql extension not shipped
CVE-2007-4251 ignore (openoffice.org) just a crash
CVE-2007-4229 ignore (kdebase) just an ASSERT fail
CVE-2007-4255 backport (kdelibs) [since FEDORA-2007-1699]
CVE-2007-4225 backport (kdebase) [since FEDORA-2007-1700]
CVE-2007-4224 backport (kdelibs) [since FEDORA-2007-1699]
CVE-2007-4224 backport (kdebase) [since FEDORA-2007-1700]
CVE-2007-4211 version (dovecot, fixed 1.0.3) #251008 [since FEDORA-2007-1485]
CVE-2007-4174 version (tor, fixed 0.1.2.16) [since FEDORA-2007-1674]
CVE-2007-4168 backport (libexif) #243892 [since FEDORA-2007-0414]
CVE-2007-4153 ignore (wordpress) "remote authenticated administrators"
CVE-2007-4154 ignore (wordpress) "remote authenticated administrators"
CVE-2007-4139 version (wordpress) #250751 [since FEDORA-2007-1885]
CVE-2007-4138 version (samba, fixed 3.0.26) #286311 [since FEDORA-2007-2145]
CVE-2007-4137 backport (qt) #292941 [since FEDORA-2007-2216]
CVE-2007-4134 version (star, fixed 1.5a84) #254128 [since FEDORA-2007-1852]
CVE-2007-4131 backport (tar) #253684 [since FEDORA-2007-1890]
CVE-2007-4129 VULNERABLE (coolkey) #280091 
CVE-2007-4066 backport (libvorbis) #245991 [since FEDORA-2007-1765]
CVE-2007-4065 backport (libvorbis) #245991 [since FEDORA-2007-1765]
CVE-2007-4045 backport (cups) [since FEDORA-2007-3100]
CVE-2007-4033 backport (t1lib) #303021 [since FEDORA-2007-2343]
CVE-2007-4033 backport (tetex) [since FEDORA-2007-3390]
CVE-2007-4029 backport (libvorbis) #245991 [since FEDORA-2007-1765]
CVE-2007-4000 backport (krb5) [since FEDORA-2007-2017]
CVE-2007-3999 backport (krb5) [since FEDORA-2007-2017]
CVE-2007-3999 VULNERABLE (nfs-utils-lib) #294901
CVE-2007-3999 VULNERABLE (libtirpc) #294921
CVE-2007-3962 ignore (gftp) multiple buffer overflows in fsplib, not on Linux
CVE-2007-3961 ignore (gftp) off-by-one error in fsplib
CVE-2007-3920 fixed (compiz) #357071 [since xorg-x11-server-1.3.0.0-16.fc7]
CVE-2007-3852 backport (sysstat) #252295 [since FEDORA-2007-1697]
CVE-2007-3950 version (lighttpd, fixed 1.4.16) #249162 [since FEDORA-2007-1299]
CVE-2007-3949 version (lighttpd, fixed 1.4.16) #249162 [since FEDORA-2007-1299]
CVE-2007-3948 version (lighttpd, fixed 1.4.16) #249162 [since FEDORA-2007-1299]
CVE-2007-3947 version (lighttpd, fixed 1.4.16) #249162 [since FEDORA-2007-1299]
CVE-2007-3946 version (lighttpd, fixed 1.4.16) #249162 [since FEDORA-2007-1299]
CVE-2007-3919 backport (xen) #361981 [since FEDORA-2007-2708]
CVE-2007-3917 version (wesnoth, fixed 1.2.7) #324841 [since FEDORA-2007-2496]
CVE-2007-3848 version (kernel) [since FEDORA-2007-1785]
CVE-2007-3847 version (httpd) #250755 [since FEDORA-2007-2214]
CVE-2007-3845 ignore (firefox) windows specific
CVE-2007-3844 version (firefox, fixed 2.0.0.6) #250648 "fixed on next update"
CVE-2007-3843 version (kernel) #246595
CVE-2007-3841 ignore (pidgin) ethically disclosed
CVE-2007-3820 backport (kdelibs) [since FEDORA-2007-1699]
CVE-2007-3820 backport (kdebase) #248537 [since FEDORA-2007-1700]
CVE-2007-3799 ** (php)
CVE-2007-3782 version (mysql, fixed 5.0.44) [since FEDORA-2007-1197]
CVE-2007-3781 version (mysql, fixed 5.0.44) [since FEDORA-2007-1197]
CVE-2007-3780 version (mysql, fixed 5.0.44) [since FEDORA-2007-1197]
CVE-2007-3770 backport (terminal/xfce) [since FEDORA-2007-1620]
CVE-2007-3738 version (mozilla) #248518 [since FEDORA-2007-1138]
CVE-2007-3737 version (mozilla) #248518 [since FEDORA-2007-1138]
CVE-2007-3736 version (mozilla) #248518 [since FEDORA-2007-1138]
CVE-2007-3735 version (mozilla) #248518 [since FEDORA-2007-1138]
CVE-2007-3728 ignore (libsilc, only 1.1.1)
CVE-2007-3725 version (clamav) [since FEDORA-2007-2050]
CVE-2007-3713 backport (centericq) #247979 [since FEDORA-2007-1160]
CVE-2007-3656 version (mozilla) #248518 [since FEDORA-2007-1138]
CVE-2007-3642 version (kernel, fixed 2.6.22.1) [since FEDORA-2007-1130]
CVE-2007-3628 version (php-pear-Structures-DataGrid-DataSource-MDB2, fixed 0.1.10)
CVE-2007-3568 backport (imlib) [since FEDORA-2007-4561]
CVE-2007-3555 version (moodle) #247528 [since FEDORA-2007-1445]
CVE-2007-3546 ignore (nessus-core) Windows only
CVE-2007-3528 version (dar, fixed 2.3.4) #246760 [since FEDORA-2007-0904]
CVE-2007-3544 fixed (wordpress, NOT fixed 2.2.1) #245211 [since FEDORA-2007-0894] Incomplete fix for CVE-2007-3543
CVE-2007-3543 version (wordpress, fixed 2.2.1) #245211 [since FEDORA-2007-0894]
CVE-2007-3511 version (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 [since FEDORA-2007-2664]
CVE-2007-3508 ignore (glibc) not an issue
CVE-2007-3506 version (freetype, fixed 2.3.4) #235479 [since FEDORA-2007-0033]
CVE-2007-3507 version (flac123, fixed 0.0.10) #246322 [since FEDORA-2007-1045]
CVE-2007-3478 version (gd, fixed 2.0.35) #277411 [since FEDORA-2007-2055]
CVE-2007-3477 version (gd, fixed 2.0.35) #277411 [since FEDORA-2007-2055]
CVE-2007-3476 version (gd, fixed 2.0.35) #277411 [since FEDORA-2007-2055]
CVE-2007-3475 version (gd, fixed 2.0.35) #277411 [since FEDORA-2007-2055]
CVE-2007-3474 version (gd, fixed 2.0.35) #277411 [since FEDORA-2007-2055]
CVE-2007-3473 version (gd, fixed 2.0.35) #277411 [since FEDORA-2007-2055]
CVE-2007-3472 version (gd, fixed 2.0.35) #277411 [since FEDORA-2007-2055]
CVE-2007-3410 backport (HelixPlayer) #245838 [since FEDORA-2007-0756]
CVE-2007-3409 version (perl-Net-DNS, fixed 0.60) #245807
CVE-2007-3393 version (wireshark, fixed 0.99.6) [since FEDORA-2007-0982]
CVE-2007-3392 version (wireshark, fixed 0.99.6) [since FEDORA-2007-0982]
CVE-2007-3391 version (wireshark, fixed 0.99.6) [since FEDORA-2007-0982]
CVE-2007-3390 version (wireshark, fixed 0.99.6) [since FEDORA-2007-0982]
CVE-2007-3389 version (wireshark, fixed 0.99.6) [since FEDORA-2007-0982]
CVE-2007-3388 backport (qt, fixed qt-3.3.8-20070727) patch available: 170529.diff [since FEDORA-2007-2216]
CVE-2007-3387 version (xpdf, fixed 3.02pl1) [since FEDORA-2007-1383]
CVE-2007-3387 backport (tetex) #251514 [since FEDORA-2007-1547]
CVE-2007-3387 fixed (poppler) #251512 [since FEDORA-2008-1651] 
CVE-2007-3387 backport (kdegraphics) #251509 [since FEDORA-2007-1594]
CVE-2007-3387 backport (koffice) #251522 [since FEDORA-2007-1614]
CVE-2007-3387 backport (cups) #251518 [since FEDORA-2007-1541]
CVE-2007-3387 ignore (libextractor) http://bugs.gentoo.org/show_bug.cgi?id=188169
CVE-2007-3386 version (tomcat5) [since FEDORA-2007-3456]
CVE-2007-3385 version (tomcat5) [since FEDORA-2007-3456]
CVE-2007-3384 ignore (tomcat) only affects 3.3.x and just affects an example
CVE-2007-3382 version (tomcat5) [since FEDORA-2007-3456]
CVE-2007-3381 version (gdm, fixed 2.18.4) #250277 [since FEDORA-2007-1362]
CVE-2007-3378 ignore (php) safe mode escape
CVE-2007-3377 version (perl-Net-DNS, fixed 0.60) #245612 [since FEDORA-2007-0668]
CVE-2007-3304 backport (httpd) #244665 [since FEDORA-2007-0704]
CVE-2007-3294 ignore (php-extras) win only
CVE-2007-3280 ignore (postgresql) bogus CVE assignment
CVE-2007-3279 ignore (postgresql) bogus CVE assignment
CVE-2007-3278 version (postgresql, fixed 8.2.5) 
CVE-2007-3257 backport (evolution) #244283 [since FEDORA-2007-0464]
CVE-2007-3241 version (wordpress, fixed 2.2.1) #245211 [since FEDORA-2007-0894]
CVE-2007-3240 version (wordpress, fixed 2.2.1) #245211 [since FEDORA-2007-0894]
CVE-2007-3239 version (wordpress, fixed 2.2.1) #245211 [since FEDORA-2007-0894]
CVE-2007-3238 version (wordpress, fixed 2.2.1) #245211 [since FEDORA-2007-0894]
CVE-2007-3231 version (mecab, fixed 0.96) [since FEDORA-2007-0366]
CVE-2007-3209 ignore (mail-notification) shipped with SSL enabled
CVE-2007-3165 version (tor, fixed 0.1.2.14) #244502 [since FEDORA-2007-1674]
CVE-2007-3153 version (c-ares, fixed 1.4.0) #243591 [since FEDORA-2007-0724]
CVE-2007-3152 version (c-ares, fixed 1.4.0) #243591 [since FEDORA-2007-0724]
CVE-2007-3145 ignore (galeon) in 2.0.3 the truncation still occurs, but at reasonable length
CVE-2007-3140 version (wordpress, fixed 2.2.1) #245211 [since FEDORA-2007-0894]
CVE-2007-3126 ignore (gimp) just a crash
CVE-2007-3123 version (clamav, fixed 0.90.3) #245219 [since FEDORA-2007-2050]
CVE-2007-3122 version (clamav, fixed 0.90.3) #245219 [since FEDORA-2007-2050]
CVE-2007-3121 version (zvbi, fixed 0.2.25) [since FEDORA-2007-0175]
CVE-2007-3113 backport (cacti) #243592 [since FEDORA-2007-2199]
CVE-2007-3112 backport (cacti) #243592 [since FEDORA-2007-2199]
CVE-2007-3108 backport (openssl) #250574 [since FEDORA-2007-1444]
CVE-2007-3106 backport (libvorbis) #245991 [since FEDORA-2007-1765]
CVE-2007-3100 version (iscsi-initiator-utils, fixed 6.2.0.865) [since FEDORA-2007-0543]
CVE-2007-3099 version (iscsi-initiator-utils, fixed 6.2.0.865) [since FEDORA-2007-0543]
CVE-2007-3089 version (mozilla) #248518 [since FEDORA-2007-1138]
CVE-2007-3025 ignore (clamav, Solaris only)
CVE-2007-3024 version (clamav, fixed 0.90.3) #245219 [since FEDORA-2007-2050]
CVE-2007-3023 version (clamav, fixed 0.90.3) #245219 [since FEDORA-2007-2050]
CVE-2007-3007 ignore (php) safe mode isn't safe
*CVE-2007-2975 ** (openfire)
CVE-2007-2958 version (claws-mail) #254121 [since FEDORA-2007-2009]
CVE-2007-2958 backport (sylpheed) #254123 [since FEDORA-2007-1841]
CVE-2007-2956 backport (qtpfsgui) #251674 [since FEDORA-2007-1581]
CVE-2007-2949 version (gimp, fixed 2.2.16) [since FEDORA-2007-0725]
CVE-2007-2926 version (bind, fixed 9.4.1) [since FEDORA-2007-1247]
CVE-2007-2925 version (bind, fixed 9.4.1) [since FEDORA-2007-1247]
CVE-2007-2894 backport (bochs) #241799 [since FEDORA-2007-1778]
CVE-2007-2893 backport (bochs, fixed 2.3-5) #241799 [since FEDORA-2007-1153]
CVE-2007-2876 version (kernel, fixed 2.6.21.5) [ since FEDORA-2007-0409 ]
CVE-2007-2874 backport (wpa_supplicant) #242455 [since FEDORA-2007-0185]
CVE-2007-2873 version (spamassassin, fixed 3.2.1) [since FEDORA-2007-0390]
CVE-2007-2871 version (mozilla) #241840
CVE-2007-2870 version (mozilla) #241840
CVE-2007-2869 version (mozilla) #241840
CVE-2007-2868 version (mozilla) #241840
CVE-2007-2867 version (mozilla) #241840
CVE-2007-2865 version (phpPgAdmin, fixed 4.1.2) #241489 [since FEDORA-2007-0469]
CVE-2007-2844 ignore (php) #241641
CVE-2007-2843 ignore (konqueror) safari specific
CVE-2007-2834 backport (openoffice.org, fixed 2.3) #293361 [since FEDORA-2007-2372]
CVE-2007-2821 version (wordpress, fixed 2.2) #245211 [since FEDORA-2007-0894]
CVE-2007-2807 backport (eggdrop) [since FEDORA-2007-4325]
CVE-2007-2799 version (file, fixed 4.21) #241034 [since FEDORA-2007-0836]
CVE-2007-2798 version (krb5, fixed 1.6.1) [since FEDORA-2007-0740]
CVE-2007-2797 version (xterm) fixed in fc5 and fc6 before f7 release
CVE-2007-2768 ignore (openssh) needs pam OPIE which is not shipped.
CVE-2007-2756 ignore (gd) DoS only
CVE-2007-2754 backport (freetype) [since FEDORA-2007-0033]
CVE-2007-2721 backport (jasper, fixed 1.900.1-2) #240397
CVE-2007-2693 ignore (mysql, fixed 5.1.18) mysql 5.1+ only, requires partitioning
CVE-2007-2692 version (mysql, fixed 5.0.45) [since FEDORA-2007-1197]
CVE-2007-2691 version (mysql, fixed 5.0.45) [since FEDORA-2007-1197]
CVE-2007-2683 backport (mutt)
CVE-2007-2654 version (xfsdump) #240396
CVE-2007-2650 version (clamav, fixed 0.90.3) #240395 [since FEDORA-2007-1154]
CVE-2007-2645 backport (libexif) #240055 [since FEDORA-2007-0414]
*CVE-2007-2637 backport (moin, fixed 1.5.7-2)
CVE-2007-2627 version (wordpress, fixed 2.2.1) #239904 [since FEDORA-2007-0894]
*CVE-2007-2589 ** (squirrelmail)
CVE-2007-2583 version (mysql, fixed 5.0.41)
CVE-2007-2519 ignore (php-pear) no trust boundary is crossed
CVE-2007-2511 ignore (php) #239011 see the bug
CVE-2007-2510 version (php, fixed 5.2.2)
CVE-2007-2509 version (php, fixed 5.2.2)
*CVE-2007-2500 backport (gnash, fixed 0.7.2-2) #239213
CVE-2007-2459 ignore (perl-Imager, fixed 0.57) not security according to upstream
CVE-2007-2453 version (kernel, fixed 2.6.21.4) [ since FEDORA-2007-0409 ]
CVE-2007-2451 version (kernel, fixed 2.6.21.4) [ since FEDORA-2007-0409 ]
*CVE-2007-2452 ** (locate)
CVE-2007-2450 version (tomcat5) #244810 [since FEDORA-2007-3456]
CVE-2007-2449 version (tomcat5) #244810 [since FEDORA-2007-3456]
CVE-2007-2448 version (subversion, fixed 1.4.4) #243856 [since FEDORA-2007-2635]
*CVE-2007-2447 ** (samba)
*CVE-2007-2446 ** (samba)
CVE-2007-2445 version (libpng10, fixed 1.0.25) #240398
*CVE-2007-2444 ** (samba)
CVE-2007-2443 version (krb5, fixed 1.6.1) [since FEDORA-2007-0740]
CVE-2007-2442 version (krb5, fixed 1.6.1) [since FEDORA-2007-0740]
CVE-2007-2438 version (vim, fixed 7.0.235) #238734 [since FEDORA-2007-492]
CVE-2007-2437 ignore (xorg-x11) DoS only
*CVE-2007-2435 ** (java)
*CVE-2007-2423 backport (moin, fixed 1.5.7-2) #238722
CVE-2007-2413 version (perl-Imager, fixed 0.57) #238615
CVE-2007-2381 ignore (MochiKit) #238616
*CVE-2007-2356 ** (gimp)
*CVE-2007-2353 ** (axis)
CVE-2007-2292 version (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 [since FEDORA-2007-2664]
CVE-2007-2245 version (phpMyAdmin, fixed 2.10.1) #237882
CVE-2007-2243 ignore (openssh, fixed 4.6) needs S/KEY support which is not shipped.
CVE-2007-2241 backport (bind) [since FEDORA-2007-0300]
CVE-2007-2241 version (bind, fixed 9.4.1) 
CVE-2007-2176 ignore (firefox) only affects the java quicktime interaction
CVE-2007-2172 version (kernel, fixed 2.6.21-rc6)
CVE-2007-2165 version (proftpd) #237533 [since FEDORA-2007-2613]
CVE-2007-2138 version (postgresql, fixed 8.2.4) #237682 [since FEDORA-2007-0174]
CVE-2007-2057 version (aircrack-ng, fixed 0.8-0.1)
CVE-2007-2029 version (clamav, fixed 0.90.3) #245219 [since FEDORA-2007-2050]
CVE-2007-2028 version (freeradius)
*CVE-2007-2026 ** (file)
CVE-2007-2016 ignore (phpMyAdmin) < 2.8.0.2 never shipped
CVE-2007-1997 version (clamav, fixed in 0.90.2)
CVE-2007-1995 version (quagga, fixed CVE-2007-1995) #240488
CVE-2007-1897 version (wordpress, fixed 2.1.3) #235912
CVE-2007-1894 version (wordpress, fixed 2.1.3-0.rc2)
CVE-2007-1893 version (wordpress, fixed 2.1.3) #235912
CVE-2007-1870 version (lighttpd, fixed 1.4.14) #236489
CVE-2007-1869 version (lighttpd, fixed 1.4.14) #236489
CVE-2007-1864 version (php, fixed 5.2.2)
CVE-2007-1863 backport (httpd) #244665 [since FEDORA-2007-0704]
CVE-2007-1862 backport (httpd) #242606 [since FEDORA-2007-0704]
*CVE-2007-1859 ** (xscreensaver)
*CVE-2007-1858 ** (tomcat)
CVE-2007-1856 backport (vixie-cron) #235882 vixie-cron-4.1-hardlink.patch
CVE-2007-1841 version (ipsec-tools) #238052
CVE-2007-1804 version (pulseaudio) #235013
CVE-2007-1799 version (ktorrent, fixed 2.1.3) #235014
CVE-2007-1797 version (GraphicsMagick, fixed 1.1.8) [since FEDORA-2007-1340]
CVE-2007-1745 version (clamav, fixed in 0.90.2) #236703
*CVE-2007-1743 ** (httpd)
*CVE-2007-1742 ** (httpd)
*CVE-2007-1741 ** (httpd)
CVE-2007-1732 ignore (wordpress) #235015
CVE-2007-1718 version (php, fixed 5.2.2)
CVE-2007-1717 version (php, fixed 5.2.2)
CVE-2007-1711 version (php, 4.4.5 and 4.4.6 only)
CVE-2007-1710 version (php, fixed 5.2.2)
CVE-2007-1709 ignore (php) no security impact
*CVE-2007-1667 ** (xorg-x11)
CVE-2007-1665 version (ekg) #246034 [since FEDORA-2007-0791]
CVE-2007-1664 version (ekg) #246034 [since FEDORA-2007-0791]
CVE-2007-1663 version (ekg) #246034 [since FEDORA-2007-0791]
CVE-2007-1662 fixed (pcre, fixed 7.3) #378411 [since FEDORA-2008-1842] 
CVE-2007-1661 fixed (pcre, fixed 7.3) #378411 [since FEDORA-2008-1842] 
CVE-2007-1660 fixed (pcre, fixed 7.3) #378411 [since FEDORA-2008-1842] 
CVE-2007-1659 fixed (pcre, fixed 7.3) #378411 [since FEDORA-2008-1842] 
CVE-2007-1649 version (php, fixed 5.2.2)
CVE-2007-1622 version (wordpress, fixed 2.1.3-0.rc2) #233703
CVE-2007-1614 version (zziplib, fixed 0.13.49) #233700
CVE-2007-1599 version (wordpress, fixed 2.1.3-0.rc2) #233703
CVE-2007-1583 version (php, fixed 5.2.2)
CVE-2007-1565 ignore (konqueror) client crash, duplicate of CVE-2007-1308
CVE-2007-1564 version (kdelibs) affects konqueror
CVE-2007-1562 version (mozilla) #241840
CVE-2007-1560 version (squid, fixed 2.6.STABLE12)
CVE-2007-1558 version (balsa) [since FEDORA-2007-1447]
CVE-2007-1558 version (claws-mail, fixed 2.9.1) #237293
*CVE-2007-1558 backport (sylpheed, fixed 2.3.1-1)
CVE-2007-1558 version (evolution)
CVE-2007-1547 version (nas, fixed 1.8a-2) #233353
CVE-2007-1546 version (nas, fixed 1.8a-2) #233353
CVE-2007-1545 version (nas, fixed 1.8a-2) #233353
CVE-2007-1544 version (nas, fixed 1.8a-2) #233353
CVE-2007-1543 version (nas, fixed 1.8a-2) #233353
*CVE-2007-1536 ** (file)
CVE-2007-1521 ignore (php) See NVD
CVE-2007-1515 version (imp, fixed 4.1.4)
CVE-2007-1496 version (kernel, fixed 2.6.20.3)
CVE-2007-1484 ignore (php) See NVD
CVE-2007-1475 ignore (php) unshipped ibase extension
CVE-2007-1474 version (horde, fixed 3.1.4)
CVE-2007-1474 ignore (imp, < 4.x only)
CVE-2007-1473 version (horde, fixed 3.1.4)
*CVE-2007-1466 ** (openoffice.org)
CVE-2007-1464 version (inkscape, fixed 0.45.1)
CVE-2007-1463 version (inkscape, fixed 0.45.1)
CVE-2007-1460 version (php, fixed 5.2.2)
CVE-2007-1429 version (moodle, fixed 1.6.5) #232103
CVE-2007-1420 version (mysql, fixed 5.0.36) #232604
CVE-2007-1413 ignore (php) Windows NT SNMP specific
CVE-2007-1412 ignore (php) unshipped cpdf extension
CVE-2007-1411 ignore (php) unshipped mssql extension
CVE-2007-1406 version (trac, fixed 0.10.3.1) #231729
CVE-2007-1405 version (trac, fixed 0.10.3.1) #231729
CVE-2007-1401 ignore (php) unshipped cracklib extension
CVE-2007-1399 version (php-pecl-zip, fixed 1.8.5)
CVE-2007-1398 ignore (snort, inline mode not shipped) #232109, new upstream [since FEDORA-2007-2060]
CVE-2007-1396 ignore (php) feature, not a flaw
*CVE-2007-1395 version (phpMyAdmin, fixed 2.10.0.2)
*CVE-2007-1387 backport (xine-lib, fixed 1.1.4-3)
*CVE-2007-1385 version (ktorrent, fixed 2.1.2)
*CVE-2007-1384 version (ktorrent, fixed 2.1.2)
CVE-2007-1375 version (php, fixed 5.2.2)
*CVE-2007-1366 ** (qemu) #238723
CVE-2007-1362 version (seamonkey, fixed 1.0.9) #241840
*CVE-2007-1359 backport (mod_security, fixed 2.1.0-3) #231728
CVE-2007-1358 version (tomcat5) #244810 [since FEDORA-2007-3456]
CVE-2007-1355 version (tomcat5) [since FEDORA-2007-3456]
*CVE-2007-1354 ** (jboss)
CVE-2007-1352 version (libXfont) #235265
CVE-2007-1351 version (libXfont) #235265
CVE-2007-1349 backport (mod_perl) [since FEDORA-2007-0316]
CVE-2007-1325 version (phpMyAdmin, fixed 2.10.0.2)
*CVE-2007-1322 ** (qemu) #238723
*CVE-2007-1321 ** (qemu) #238723
CVE-2007-1321 backport (xen) [since FEDORA-2007-2270]
CVE-2007-1320 VULNERABLE (qemu) 
CVE-2007-1320 VULNERABLE (kvm) 
CVE-2007-1308 version (kdelibs)
CVE-2007-1287 ignore (php) See NVD
CVE-2007-1286 version (php, PHP4 only)
CVE-2007-1285 version (php, fixed 5.2.2)
CVE-2007-1282 version (seamonkey, fixed 1.0.8)
CVE-2007-1277 version (wordpress, fixed 2.1.2)
CVE-2007-1267 ignore (sylpheed) uses gpgme  #231733
CVE-2007-1263 version (gpgme, fixed 1.1.4)
CVE-2007-1263 version (gnupg, fixed 1.4.7) [since FEDORA-2007-315]
*CVE-2007-1262 ** (squirrelmail)
*CVE-2007-1253 backport (blender, fixed 2.42a-21) #239338
*CVE-2007-1246 backport (xine-lib, fixed 1.1.4-3)
CVE-2007-1244 version (wordpress, fixed 2.1.2) #230898
CVE-2007-1230 version (wordpress, fixed 2.1.2)
*CVE-2007-1218 backport (tcpdump) 232349 [since FEDORA-2007-347]
CVE-2007-1216 version (krb5, fixed 1.6-3) #231537
CVE-2007-1103 version (tor) #230927
CVE-2007-1095 version (mozilla) ff 2.0.0.8, tb 2.0.0.6, sm 1.1.5 [since FEDORA-2007-2664]
CVE-2007-1092 version (seamonkey, fixed 1.0.8)
CVE-2007-1055 version (mediawiki, fixed 1.8.3)
CVE-2007-1054 version (mediawiki, fixed 1.9.3) [since FEDORA-2007-1442]
CVE-2007-1049 version (wordpress, fixed 2.1.1) #229991
*CVE-2007-1036 ** (jboss)
*CVE-2007-1030 ** (libevent)
*CVE-2007-1007 ** (ekiga)
*CVE-2007-1006 version (ekiga, fixed 2.0.5) #229259 [since FEDORA-2007-322]
CVE-2007-1004 version (mozilla)
CVE-2007-1003 version (xorg-x11-server, fixed  > X11R7.2) #235263
CVE-2007-1002 version (evolution) #233587
CVE-2007-1001 version (php, fixed 5.2.2)
CVE-2007-1000 version (kernel, fixed 2.6.20.2) [since FEDORA-2007-335]
*CVE-2007-0999 ** (ekiga)
CVE-2007-0998 version (qemu, fixed 0.8.2)
*CVE-2007-0998 backport (xen) #230295 [since FEDORA-2007-343]
CVE-2007-0996 version (seamonkey, fixed 1.0.8)
CVE-2007-0995 version (seamonkey, fixed 1.0.8)
CVE-2007-0988 version (php, fixed 5.2.1)
CVE-2007-0981 version (mozilla)
CVE-2007-0981 version (seamonkey, fixed 1.0.8) #229253
CVE-2007-0957 backport (krb5, fixed 1.6-3) #231528
CVE-2007-0956 backport (krb5, fixed 1.6-3) #229782
CVE-2007-0911 version (php, 5.2.1 only)
CVE-2007-0910 version (php, fixed 5.2.1)
CVE-2007-0909 version (php, fixed 5.2.1)
CVE-2007-0908 version (php, fixed 5.2.1)
CVE-2007-0907 version (php, fixed 5.2.1)
CVE-2007-0906 version (php, fixed 5.2.1)
CVE-2007-0903 version (ejabberd, fixed 1.1.3)
*CVE-2007-0902 backport (moin, fixed 1.5.7-2) #228764
*CVE-2007-0901 backport (moin, fixed 1.5.7-2) #228764
CVE-2007-0898 version (clamav, fixed 0.90) #229202
CVE-2007-0897 version (clamav, fixed 0.90) #229202
CVE-2007-0894 version (mediawiki, fixed 1.8.4) #228763
CVE-2007-0884 ignore (mimedefang) #228757 2.59/2.60 not shipped
CVE-2007-0857 version (moin, fixed 1.5.7) #228139
CVE-2007-0844 version (pam_ssh, fixed 1.92) #253959 [since FEDORA-2007-1793]
CVE-2007-0823 ignore (xterm) feature, not a bug
CVE-2007-0822 ignore (util-linux) NULL dereference
CVE-2007-0780 version (seamonkey, fixed 1.0.8)
CVE-2007-0779 version (seamonkey, fixed 1.0.8)
CVE-2007-0778 version (seamonkey, fixed 1.0.8)
CVE-2007-0777 version (seamonkey, fixed 1.0.8)
CVE-2007-0775 version (seamonkey, fixed 1.0.8)
*CVE-2007-0774 ** (mod_jk)
CVE-2007-0772 version (kernel, fixed 2.6.20.1) [since FEDORA-2007-291]
CVE-2007-0771 backport (kernel, fixed 2.6.20-1.2933) #227952
CVE-2007-0770 backport (GraphicsMagick, fixed 1.1.7-7) #228758
CVE-2007-0770 ignore (ImageMagick) only if incomplete CVE-2006-5456
CVE-2007-0720 ignore (cups, fixed 1.2.7) cups is already updated
CVE-2007-0657 ignore (nexuiz, 2.2.2 only (not shipped), fixed 2.2.3)
*CVE-2007-0650 ignore (tetex) needs user's assistance
CVE-2007-0619 version (chmlib, fixed 0.3.9) #225919
*CVE-2007-0578 ** (mpg321)
*CVE-2007-0555 ** (postgresql)
CVE-2007-0541 version (wordpress, fixed 2.1-0) #225469
CVE-2007-0540 version (wordpress, fixed 2.1-0) #225469
CVE-2007-0539 version (wordpress, fixed 2.1-0) #225469
CVE-2007-0537 version (kdebase) #225420
CVE-2007-0494 version (bind, fixed 9.3.4) #225268 [since FEDORA-2007-147]
CVE-2007-0493 version (bind, fixed 9.3.4) #224443 [since FEDORA-2007-147]
CVE-2007-0475 version (smb4k, fixed 0.8.0)
CVE-2007-0474 version (smb4k, fixed 0.8.0)
CVE-2007-0473 version (smb4k, fixed 0.8.0)
CVE-2007-0472 version (smb4k, fixed 0.8.0)
CVE-2007-0469 version (rubygems, fixed 0.9.1)
CVE-2007-0459 version (wireshark, fixed 0.99.5) #227140
CVE-2007-0458 version (wireshark, fixed 0.99.5) #227140
CVE-2007-0457 version (wireshark, fixed 0.99.5) #227140
CVE-2007-0456 version (wireshark, fixed 0.99.5) #227140
CVE-2007-0455 version (gd, fixed 2.0.34) #224610
*CVE-2007-0454 ** (samba)
*CVE-2007-0452 ** (samba)
CVE-2007-0451 version (spamassassin, fixed 3.1.8) [since FEDORA-2007-241]
*CVE-2007-0450 ** (tomcat)
CVE-2007-0448 ignore (php) safe mode isn't safe
CVE-2007-0405 version (Django, fixed 0.95.1)
CVE-2007-0404 version (Django, fixed 0.95.1)
CVE-2007-0341 ignore (phpMyAdmin, 2.8.x only)
*CVE-2007-0262 version (wordpress, fixed 2.1-0) #223101
CVE-2007-0248 version (squid, fixed 2.6.STABLE7) [since FEDORA-2007-073]
CVE-2007-0247 version (squid, fixed 2.6.STABLE7) #222883 [since FEDORA-2007-073]
CVE-2007-0245 backport (openoffice.org) [since FEDORA-2007-0410]
*CVE-2007-0242 backport (qt4, fixed 4.2.3-7)
*CVE-2007-0240 backport (zope, fixed 2.9.6-2) #233378
*CVE-2007-0239 ** (openoffice.org)
*CVE-2007-0238 ** (openoffice.org)
CVE-2007-0235 version (libgtop2, 2.14.6) #222637
*CVE-2007-0227 ** (slocate)
CVE-2007-0177 version (mediawiki, fixed 1.8.3) #221958
*CVE-2007-0160 backport (centericq, fixed 4.21.0-9) #227791
*CVE-2007-0157 ** (neon)
CVE-2007-0109 version (wordpress, fixed 2.1-0) #223101
CVE-2007-0107 version (wordpress, fixed 2.1-0) #223101
CVE-2007-0106 version (wordpress, fixed 2.1-0) #223101
CVE-2007-0104 ignore (poppler) only client DoS
CVE-2007-0104 ignore (kdegraphics) only client DoS
CVE-2007-0095 backport (phpMyAdmin) #221694 [since FEDORA-2007-4298]
CVE-2007-0086 ignore (apache) not a security issue
*CVE-2007-0080 ** (freeradius)
CVE-2007-0063 ignore (dhcp) duplicate of CVE-2007-5365
CVE-2007-0062 ignore (dhcp, fixed 3.0.7) 
CVE-2007-0061 ignore (dhcp) not affected
*CVE-2007-0010 ** (gtk2)
CVE-2007-0009 version (nss, fixed 3.11.5) (nspr, fixed 4.6.5) [since FEDORA-2007-279]
CVE-2007-0008 version (nss, fixed 3.11.5) (nspr, fixed 4.6.5) [since FEDORA-2007-279]
CVE-2007-0007 version (gnucash, fixed 2.0.5) since [FEDORA-2007-256] #223233
CVE-2007-0006 version (kernel, fixed 2.6.20) [since FEDORA-2007-335]
CVE-2007-0005 version (kernel, fixed 2.6.20) [since FEDORA-2007-335]
CVE-2007-0002 version (libwpd, fixed 0.8.9) #222808 [since FEDORA-2007-351]
CVE-2007-0001 ignore (kernel) rhel4 2.6.9 only known affected
CVE-2006-7232 version (mysql, fixed 5.0.32) 
CVE-2006-7228 version (pcre, fixed 6.7)
CVE-2006-7227 version (pcre, fixed 6.7)
CVE-2006-7221 ignore (gftp) single zero byte overflow in fsplib
CVE-2006-7205 ignore (php) See NVD
CVE-2006-7204 ignore (php) See NVD
*CVE-2006-7197 ** (tomcat)
*CVE-2006-7196 ** (tomcat)
*CVE-2006-7195 ** (tomcat)
*CVE-2006-7195 ** (tomcat)
CVE-2006-7193 ignore (php-Smarty) SMARTY_DIR is a constant
*CVE-2006-7176 ** (sendmail)
*CVE-2006-7175 ** (sendmail)
CVE-2006-7162 version (putty, fixed 0.59) #231726
*CVE-2006-7151 ** (libtool)
*CVE-2006-7139 ** (kmail)
*CVE-2006-7108 ** (util-linux)
*CVE-2006-6979 backport (amarok, fixed 1.4.5-2) #228138
*CVE-2006-6948 ** (myodbc)
CVE-2006-6944 version (phpMyAdmin, fixed 2.9.1.1)
CVE-2006-6943 version (phpMyAdmin, fixed 2.9.1.1)
CVE-2006-6942 version (phpMyAdmin, fixed 2.9.1.1)
CVE-2006-6939 version (ed, fixed 0.3) #223075
CVE-2006-6899 version (bluez-utils, fixed 2.23)
CVE-2006-6870 version (avahi, fixed 0.6.16) #221440 [since FEDORA-2007-019]
CVE-2006-6811 ignore (ksirc) DoS only
CVE-2006-6808 version (wordpress, fixed 2.1-0) #221023
*CVE-2006-6799 backport (cacti, fixed 0.8.6i-5) #222410
*CVE-2006-6772 backport (w3m) #221484 [since FEDORA-2007-077]
*CVE-2006-6745 ** (java-ibm)
*CVE-2006-6736 ** (java-ibm)
*CVE-2006-6731 ** (java-ibm)
*CVE-2006-6719 backport (wget) #221469 [since FEDORA-2007-043]
*CVE-2006-6698 ignore (GConf2) #219280 minimal impact
CVE-2006-6698 fixed (GConf2) [since GConf2-2.22.0-5.fc10] 
CVE-2006-6693 ignore (zabbix, fixed 1.1.3, < 1.1.4 not shipped)
CVE-2006-6692 ignore (zabbix, fixed 1.1.3, < 1.1.4 not shipped)
CVE-2006-6660 ignore (kdelibs) client Dos only, not reproducible
*CVE-2006-6628 ** (openoffice.org)
CVE-2006-6626 version (moodle, fixed 1.6.5) #220041
CVE-2006-6625 version (moodle, fixed 1.6.5) #220041
CVE-2006-6610 version (nexuiz, fixed 2.2.1) #220034
CVE-2006-6609 version (nexuiz, fixed 2.2.1) #220034
*CVE-2006-6574 backport (mantis, fixed 1.0.6-2) #219937
*CVE-2006-6563 backport (proftpd, fixed 1.3.0a-3) #219938
*CVE-2006-6561 ** (openoffice.org)
CVE-2006-6515 version (mantis, fixed 1.0.6) #219720
CVE-2006-6505 version (seamonkey, fixed 1.0.7) #220516
CVE-2006-6504 version (seamonkey, fixed 1.0.7) #220516
CVE-2006-6503 version (seamonkey, fixed 1.0.7) #220516
CVE-2006-6502 version (seamonkey, fixed 1.0.7) #220516
CVE-2006-6501 version (seamonkey, fixed 1.0.7) #220516
CVE-2006-6500 version (seamonkey, fixed 1.0.7) #220516
CVE-2006-6499 version (seamonkey, fixed 1.0.7) #220516
CVE-2006-6498 version (seamonkey, fixed 1.0.7) #220516
CVE-2006-6497 version (seamonkey, fixed 1.0.7) #220516
*CVE-2006-6493 ** (openldap)
CVE-2006-6481 version (clamav, fixed 0.88.7)
CVE-2006-6406 version (clamav, fixed 0.88.7) #219095
CVE-2006-6385 ignore (kernel) windows only
CVE-2006-6383 ignore (php) safe mode isn't safe
*CVE-2006-6374 ** (phpMyAdmin) #218853
CVE-2006-6373 version (phpMyAdmin, fixed 2.9.1.1) #218853
CVE-2006-6333 version (kernel, fixed 2.6.19.1) [since FEDORA-2007-058]
CVE-2006-6332 ignore (kernel) no support for madwifi
CVE-2006-6305 ignore (net-snmp) already have the backported patch
CVE-2006-6304 version (kernel, fixed 2.6.19.1) [since FEDORA-2007-058]
CVE-2006-6303 version (ruby, fixed 1.8.5.2) [since FEDORA-2006-1441]
CVE-2006-6301 version (denyhosts, fixed 2.6-2) #218824
CVE-2006-6297 ignore (kdegraphics) just a crash
CVE-2006-6238 ignore (konqueror) safari only
*CVE-2006-6235 backport (gnupg2, fixed 2.0.1-2) #218821
*CVE-2006-6235 backport (gnupg, fixed 1.4.6) [since FEDORA-2006-1406]
*CVE-2006-6171 backport (proftpd, fixed 1.3.0a-1) #214820
*CVE-2006-6170 backport (proftpd, fixed 1.3.0a-1) #214820
CVE-2006-6169 version (gnupg2, fixed 2.0.1) #217950
*CVE-2006-6169 backport (gnupg, fixed 1.4.6) [since FEDORA-2006-1406]
CVE-2006-6144 backport (krb5, fixed 1.5-14) #218456
CVE-2006-6143 backport (krb5, fixed 1.5-14) #218456
*CVE-2006-6142 backport (squirrelmail) #218297 [since FEDORA-2007-089]
CVE-2006-6128 VULNERABLE (kernel, fixed **)
CVE-2006-6122 ignore (tin, <= 1.8.1 not shipped)
CVE-2006-6120 version (koffice, fixed 1.6.1) #218030
CVE-2006-6107 version (dbus, fixed 1.0.2) #219665
CVE-2006-6106 version (kernel, fixed 2.6.19.2, fixed 2.6.20-rc5) [since FEDORA-2006-1471]
CVE-2006-6105 version (gdm, fixed 2.14.11) [since FEDORA-2006-1468]
*CVE-2006-6104 backport (mono, fixed 1.1.13.8.2) #220853 [since FEDORA-2007-067]
*CVE-2006-6103 ** (xorg-x11)
*CVE-2006-6102 ** (xorg-x11)
*CVE-2006-6101 ** (xorg-x11)
*CVE-2006-6097 backport (tar) [since FEDORA-2006-1393]
CVE-2006-6085 version (kile, fixed 1.9.3) #217238
CVE-2006-6077 version (firefox, fixed 1.5.0.10)
CVE-2006-6060 ignore (kernel, fixed 2.6.19-rc2) no NTFS support
CVE-2006-6058 version (kernel, fixed 2.6.23.7) 250623
CVE-2006-6057 version (kernel, fixed **)
CVE-2006-6056 version (kernel, fixed 2.6.19) [since FEDORA-2007-058] was backport since FEDORA-2006-1471
CVE-2006-6054 version (kernel, fixed fixed 2.6.19.2) [since FEDORA-2007-058]
CVE-2006-6053 version (kernel, fixed 2.6.19.2) [since FEDORA-2007-058] was backport since FEDORA-2006-1223
*CVE-2006-6015 ** (pcre)
CVE-2006-5989 ignore (mod_auth_kerb) did not affect fc6
CVE-2006-5974 ignore (fetchmail, fixed 6.3.6) only 6.3.5
CVE-2006-5973 version (dovecot, fixed 1.0.rc15) #216508 [since ???]
*CVE-2006-5969 ** (fvwm)
CVE-2006-5941 ignore (net-snmp) dupe CVE-2005-2177
*CVE-2006-5925 backport (elinks) [since FEDORA-2006-1278] but was never vulneable as didn't have smbclient support
*CVE-2006-5876 version (libsoup) #223144 [since FEDORA-2007-109]
CVE-2006-5875 version (enemies-of-carlotta, fixed 1.2.4)
CVE-2006-5874 version (clamav, fixed 0.88.1)
CVE-2006-5871 version (kernel, fixed 2.6.10)
*CVE-2006-5870 ** (openoffice.org)
CVE-2006-5868 version (ImageMagick, fixed 6.2.9.1) #217560
CVE-2006-5867 version (fetchmail, fixed 6.3.6) #221984 [since FEDORA-2007-042]
CVE-2006-5864 backport (evince) #217672
*CVE-2006-5864 backport (gv, fixed 3.6.2-2) #215136
CVE-2006-5848 version (trac, fixed 0.10.1) #215077
CVE-2006-5823 version (kernel, fixed 2.6.19.2) [since FEDORA-2007-058] was backport since FEDORA-2006-1223
CVE-2006-5815 version (proftpd, fixed 1.3.0a) #214820
CVE-2006-5794 version (openssh, fixed 4.5) #214641 [since FEDORA-2006-1215]
CVE-2006-5793 version (libpng10, fixed 1.0.21) #216263
CVE-2006-5793 ignore (libpng, fixed 1.2.13) just a client crash
CVE-2006-5783 ignore (firefox) disputed
CVE-2006-5779 version (openldap, fixed 2.3.29) #214768
CVE-2006-5757 version (kernel, fixed 2.6.19) [since FEDORA-2007-058] was backport since FEDORA-2006-1223
*CVE-2006-5754 ** (kernel)
*CVE-2006-5753 backport (kernel, fixed 2.6.20.1) [since FEDORA-2007-291]
CVE-2006-5752 backport (httpd) #244665 [since FEDORA-2007-0704]
CVE-2006-5751 version (kernel, fixed 2.6.19, fixed 2.6.18.4) [since FEDORA-2006-1471]
*CVE-2006-5750 ** (jboss)
CVE-2006-5749 version (kernel, fixed 2.6.20-rc2)
CVE-2006-5748 version (thunderbird, fixed 1.5.0.8) [since FEDORA-2006-1192]
CVE-2006-5748 version (seamonkey, fixed 1.0.6) #214822
CVE-2006-5748 version (firefox, fixed 1.5.0.8) [since FEDORA-2006-1191]
CVE-2006-5747 version (thunderbird, fixed 1.5.0.8) [since FEDORA-2006-1192]
CVE-2006-5747 version (seamonkey, fixed 1.0.6) #214822
CVE-2006-5747 version (firefox, fixed 1.5.0.8) [since FEDORA-2006-1191]
CVE-2006-5706 ignore (php, fixed 5.2.0) safe mode isn't safe
*CVE-2006-5705 backport (wordpress, fixed 2.0.4-3) #213985
CVE-2006-5701 version (kernel) squashfs is not included upstream
CVE-2006-5633 ignore (firefox) just a client DoS
CVE-2006-5619 version (kernel, fixed 2.6.18.2, fixed 2.6.19-rc4) [since FEDORA-2006-1223]
CVE-2006-5602 version (xsupplicant, fixed 1.2.6)
CVE-2006-5601 version (xsupplicant, fixed 1.2.8) #212700
CVE-2006-5595 version (wireshark, fixed 0.99.4) [since FEDORA-2006-1140]
CVE-2006-5542 version (postgresql, fixed 8.1.5) #212360 [since FEDORA-2007-053]
CVE-2006-5541 version (postgresql, fixed 8.1.5) #212360 [since FEDORA-2007-053]
CVE-2006-5540 version (postgresql, fixed 8.1.5) #212360 [since FEDORA-2007-053]
CVE-2006-5470 version (wireshark, fixed 0.99.4) [since FEDORA-2006-1140]
CVE-2006-5469 version (wireshark, fixed 0.99.4) [since FEDORA-2006-1140]
CVE-2006-5468 version (wireshark, fixed 0.99.4) [since FEDORA-2006-1140]
*CVE-2006-5467 backport (ruby) #212396 [since FEDORA-2006-1109]
CVE-2006-5466 version (rpm) #212833
CVE-2006-5465 backport (php, fixed 5.2.0) #213732 [since FEDOA-2006-1169]
CVE-2006-5464 version (thunderbird, fixed 1.5.0.8) [since FEDORA-2006-1192]
CVE-2006-5464 version (seamonkey, fixed 1.0.6) #214822
CVE-2006-5464 version (firefox, fixed 1.5.0.8) [since FEDORA-2006-1191]
CVE-2006-5463 version (thunderbird, fixed 1.5.0.8) [since FEDORA-2006-1192]
CVE-2006-5463 version (seamonkey, fixed 1.0.6) #214822
CVE-2006-5463 version (firefox, fixed 1.5.0.8) [since FEDORA-2006-1191]
CVE-2006-5462 version (thunderbird, fixed 1.5.0.8) [since FEDORA-2006-1192]
CVE-2006-5462 version (firefox, fixed 1.5.0.8) [since FEDORA-2006-1191]
CVE-2006-5461 version (avahi, fixed 0.6.15)
*CVE-2006-5456 backport (ImageMagick) #210921 [since FEDORA-2006-1285]
CVE-2006-5456 version (GraphicsMagick, fixed 1.1.7) [since FEDORA-2007-1340]
*CVE-2006-5455 backport (bugzilla, fixed 2.22-7) #212355
*CVE-2006-5454 backport (bugzilla, fixed 2.22-7) #212355
*CVE-2006-5453 backport (bugzilla, fixed 2.22-7) #212355
CVE-2006-5397 backport (libX11, 1.0.2 and 1.0.3 only) #213280
CVE-2006-5331 version (kernel, fixed 2.6.19) [since FEDORA-2007-058]
*CVE-2006-5298 backport (mutt) [since FEDORA-2006-1063]
*CVE-2006-5297 backport (mutt) [since FEDORA-2006-1063]
CVE-2006-5295 version (clamav, fixed 0.88.5) #210973
CVE-2006-5276 version (snort) #229265 [since FEDORA-2007-2060]
CVE-2006-5229 ignore (openssh) not reproduced
CVE-2006-5215 backport (xorg-x11-xinit) #212167 [since FEDORA-2007-1409]
*CVE-2006-5215 version (xorg-x11-xdm)
CVE-2006-5215 ignore (kdebase) #212166 links to xinit Xsession
CVE-2006-5214 version (xorg-x11-xinit) #212167
*CVE-2006-5214 version (xorg-x11-xdm)
CVE-2006-5214 ignore (kdebase) #212166 links to xinit Xsession
CVE-2006-5178 ignore (php) safe_mode WONTFIX
CVE-2006-5174 ignore (kernel, fixed 2.6.19-rc1) s390 only
CVE-2006-5173 ignore (kernel, fixed 2.6.18) protected by exec-shield
CVE-2006-5170 version (nss_ldap, fixed 183)
CVE-2006-5160 ignore (firefox) unverified
CVE-2006-5159 ignore (firefox) unverified
CVE-2006-5158 version (kernel, fixed 2.6.15)
CVE-2006-5129 version (moodle, fixed 1.6.3) #206516
CVE-2006-5111 version (libksba, fixed 0.9.14)
*CVE-2006-5072 backport (mono)
CVE-2006-5052 version (openssh, fixed 4.4)
CVE-2006-5051 version (openssh, fixed 4.4) #208459
CVE-2006-4997 version (kernel, fixed 2.6.18)
CVE-2006-4980 version (python, fixed 2.4.4 at least) [since FEDORA-2006-1050] was backport since GA
*CVE-2006-4976 ** (php-adodb) #208299
CVE-2006-4965 ignore (firefox, fixed 2.0.0.7) windows only
CVE-2006-4965 ignore (seamonkey) windows only
CVE-2006-4943 version (moodle, fixed 1.6.3) #206516
CVE-2006-4942 version (moodle, fixed 1.6.3) #206516
CVE-2006-4941 version (moodle, fixed 1.6.3) #206516
CVE-2006-4940 version (moodle, fixed 1.6.3) #206516
CVE-2006-4939 version (moodle, fixed 1.6.3) #206516
CVE-2006-4938 version (moodle, fixed 1.6.3) #206516
CVE-2006-4937 version (moodle, fixed 1.6.3) #206516
CVE-2006-4936 version (moodle, fixed 1.6.3) #206516
CVE-2006-4935 version (moodle, fixed 1.6.3) #206516
CVE-2006-4925 ignore (openssh) client crash only
CVE-2006-4924 version (openssh, fixed 4.4) #207957
*CVE-2006-4842 ignore (nspr) Nothing setuid links with nspr
*CVE-2006-4816 ** (php)
CVE-2006-4814 version (kernel, fixed 2.6.19.2) [since FEDORA-2007-058]
CVE-2006-4813 version (kernel, fixed 2.6.13)
CVE-2006-4812 version (php, fixed 5.2)
CVE-2006-4811 version (qt, fixed 3.3.7) [since FEDORA-2006-1055]
*CVE-2006-4810 backport (texinfo) [since FEDORA-2006-1203]
*CVE-2006-4809 backport (imlib2, fixed 1.3.0-3) #214676
*CVE-2006-4808 backport (imlib2, fixed 1.3.0-3) #214676
*CVE-2006-4807 backport (imlib2, fixed 1.3.0-3) #214676
*CVE-2006-4806 backport (imlib2, fixed 1.3.0-3) #214676
CVE-2006-4805 version (wireshark, fixed 0.99.4) [since FEDORA-2006-1140]
*CVE-2006-4790 backport (gnutls, fixed 1.4.4)
CVE-2006-4786 version (moodle, fixed 1.6.3) #206516
CVE-2006-4785 version (moodle, fixed 1.6.3) #206516
CVE-2006-4784 version (moodle, fixed 1.6.3) #206516
CVE-2006-4743 ignore (wordpress) dupe of an old non-issue #206514
CVE-2006-4684 version (zope, fixed 2.9.2)
*CVE-2006-4663 ignore (kernel) not a vulnerability
CVE-2006-4625 ignore (php) safe mode isn't safe
CVE-2006-4624 version (mailman, fixed 2.1.9rc1)
CVE-2006-4623 version (kernel, fixed 2.6.18-rc1)
CVE-2006-4600 version (openldap, fixed 2.3.25)
CVE-2006-4574 version (wireshark, fixed 0.99.4) [since FEDORA-2006-1140]
CVE-2006-4573 version (screen, fixed 4.0.3) #212057
CVE-2006-4572 version (kernel, fixed 2.6.19) [since FEDORA-2007-058]
CVE-2006-4571 version (thunderbird, fixed 1.5.0.7)
CVE-2006-4571 version (seamonkey, fixed 1.0.5) #209167
CVE-2006-4571 version (firefox, fixed 1.5.0.7)
CVE-2006-4570 version (thunderbird, fixed 1.5.0.7)
CVE-2006-4570 version (seamonkey, fixed 1.0.5) #209167
CVE-2006-4569 version (firefox, fixed 1.5.0.7)
CVE-2006-4568 version (seamonkey, fixed 1.0.5) #209167
CVE-2006-4568 version (firefox, fixed 1.5.0.7)
CVE-2006-4567 version (thunderbird, fixed 1.5.0.7)
CVE-2006-4567 version (firefox, fixed 1.5.0.7)
CVE-2006-4566 version (thunderbird, fixed 1.5.0.7)
CVE-2006-4566 version (seamonkey, fixed 1.0.5) #209167
CVE-2006-4566 version (firefox, fixed 1.5.0.7)
CVE-2006-4565 version (thunderbird, fixed 1.5.0.7)
CVE-2006-4565 version (seamonkey, fixed 1.0.5) #209167
CVE-2006-4565 version (firefox, fixed 1.5.0.7)
CVE-2006-4561 ignore (firefox) Needs DNS spoofing; https is for this.
CVE-2006-4538 version (kernel, fixed after 2.6.18-rc6)
CVE-2006-4535 version (kernel, fixed 2.6.18-rc6)
CVE-2006-4519 version (gimp, fixed 2.2.16) #247566 [since FEDORA-2007-1044]
*CVE-2006-4514 backport (libgsf) [since FEDORA-2006-1417]
CVE-2006-4513 version (wv, fixed 1.2.4) #212696
*CVE-2006-4513 ** (abiword) #212698
CVE-2006-4507 ignore (libtiff) can't reproduce
CVE-2006-4486 version (php, fixed 5.1.6)
CVE-2006-4485 version (php, fixed 5.1.5)
CVE-2006-4484 version (php, fixed 5.1.5)
CVE-2006-4484 ignore (gd)
CVE-2006-4483 ignore (php) not linux
CVE-2006-4482 version (php, fixed 5.1.5)
CVE-2006-4481 ignore (php) safe mode isn't safe
CVE-2006-4455 ignore (xchat) client DoS
CVE-2006-4447 ignore (xorg) not a security issue
CVE-2006-4434 ignore (sendmail, fixed 8.13.8) not exploitable
CVE-2006-4433 version (php, fixed 5.1.4)
CVE-2006-4433 version (php, fixed 5.1.4)
CVE-2006-4380 version (mysql, fixed 4.1.13)
*CVE-2006-4343 backport (openssl, fixed 0.9.8d)
CVE-2006-4342 ignore (kernel) rhel3 only
CVE-2006-4340 version (seamonkey, fixed 1.0.5) #209167
CVE-2006-4340 version (nss, fixed 3.11.3)
*CVE-2006-4339 backport (openssl, fixed 0.9.8c)
*CVE-2006-4339 backport (openssl097)
CVE-2006-4338 backport (gzip)
CVE-2006-4337 backport (gzip)
CVE-2006-4336 backport (gzip)
CVE-2006-4335 backport (gzip)
CVE-2006-4334 backport (gzip)
CVE-2006-4333 version (wireshark, fixed 0.99.3)
CVE-2006-4332 version (wireshark, fixed 0.99.3)
CVE-2006-4331 version (wireshark, fixed 0.99.3)
CVE-2006-4330 version (wireshark, fixed 0.99.3)
CVE-2006-4310 ignore (firefox) crash only
*CVE-2006-4262 backport (cscope) 
CVE-2006-4253 version (thunderbird, fixed 1.5.0.7)
CVE-2006-4253 version (seamonkey, fixed 1.0.5) #209167
CVE-2006-4253 version (firefox, fixed 1.5.0.7)
*CVE-2006-4249 backport (plone, fixed 2.5.1-3) #213983
CVE-2006-4248 ignore (thttpd) Debian specific issue
*CVE-2006-4247 backport (plone, fixed 2.5-4) #209163
CVE-2006-4227 version (mysql, fixed 5.0.26,5.1.12) #203434 [since FEDORA-2006-1297]
CVE-2006-4226 version (mysql, fixed 5.0.26,5.1.12) #203428 [since FEDORA-2006-1297]
*CVE-2006-4192 backport (libmodplug, fixed 0.8-3)
CVE-2006-4182 version (clamav, fixed 0.88.5) #210973
*CVE-2006-4181 ** (gnuradius)
CVE-2006-4146 backport (gdb)
CVE-2006-4145 version (kernel, fixed 2.6.17.10, fixed 2.6.18-rc5) needs a better upstream fix
*CVE-2006-4144 backport (ImageMagick, fixed 6.2.9)
CVE-2006-4144 version (GraphicsMagick, fixed 1.1.8) [since FEDORA-2007-1340]
*CVE-2006-4124 ** (lesstif)
CVE-2006-4096 version (bind, fixed 9.3.2-P1)
CVE-2006-4095 version (bind, fixed 9.3.2-P1)
CVE-2006-4093 version (kernel, fixed 2.6.17.9, fixed 2.6.18-rc5)
CVE-2006-4031 version (mysql, fixed 5.0.24) #202675 [since FEDORA-2006-1297]
CVE-2006-4028 version (wordpress, fixed 2.0.4) #201989
CVE-2006-4020 version (php, fixed 5.1.5)
CVE-2006-4019 version (squirrelmail, fixed 1.4.8)
CVE-2006-4018 version (clamav, fixed 0.88.4-1) #201688
CVE-2006-3918 version (httpd, fixed 2.2.2)
CVE-2006-3913 backport (freeciv, fixed 2.0.9) #200545
CVE-2006-3879 version (libmikmod, loaders/load_gt2 not in bundled libmikmod-3.1.11)
CVE-2006-3835 version (tomcat, fixed 5.5.17)
CVE-2006-3816 version (krusader, fixed 1.70.1) #200323
CVE-2006-3815 version (heartbeat, fixed 2.0.6)
CVE-2006-3813 version (perl) only Red Hat Enterprise Linux affected
CVE-2006-3812 version (mozilla) #200455
CVE-2006-3811 version (mozilla) #200455
CVE-2006-3810 version (mozilla) #200455
CVE-2006-3809 version (mozilla) #200455
CVE-2006-3808 version (mozilla) #200455
CVE-2006-3807 version (mozilla) #200455
CVE-2006-3806 version (mozilla) #200455
CVE-2006-3805 version (mozilla) #200455
CVE-2006-3804 version (mozilla) #200455
CVE-2006-3803 version (mozilla) #200455
CVE-2006-3802 version (mozilla) #200455
CVE-2006-3801 version (mozilla) #200455
CVE-2007-3798 version (tcpdump, fixed 3.9.7) #244860 [since FEDORA-2007-1361]
CVE-2006-3747 version (httpd, fixed 2.2.3)
CVE-2006-3746 version (gnupg, fixed 1.4.5)
CVE-2006-3745 version (kernel, fixed 2.6.17.10, fixed 2.6.18-rc5)
*CVE-2006-3744 backport (ImageMagick)
*CVE-2006-3743 backport (ImageMagick)
*CVE-2006-3742 backport (kdebase) inside kdebase-3.5.5-redhat-pam.patch
*CVE-2006-3741 ignore (kernel, fixed 2.6.18-rc7) ia64 only
CVE-2006-3740 version (libXfont, fixed 1.2.2)
CVE-2006-3739 version (libXfont, fixed 1.2.2)
*CVE-2006-3738 backport (openssl, fixed 0.9.8d)
CVE-2007-3734 version (mozilla) #248518 [since FEDORA-2007-1138]
*CVE-2006-3733 ignore (jboss) cisco only
CVE-2006-3731 ignore (firefox) just a user complicit crash
CVE-2006-3694 version (ruby, fixed 1.8.5)
CVE-2006-3677 version (thunderbird, fixed 1.5.0.5)
CVE-2006-3677 version (seamonkey, fixed 1.0.4) #200455
CVE-2006-3677 version (firefox, fixed 1.5.0.5)
CVE-2006-3672 ignore (konqueror) just a crash
*CVE-2006-3668 backport (dumb, fixed 0.9.3-4) #200370
CVE-2006-3665 ignore (squirrelmail) don't enable register_globals!
CVE-2006-3636 version (mailman, fixed 2.1.9)
CVE-2006-3634 ignore (kernel, fixed 2.6.17.8) s390 only
CVE-2006-3632 version (wireshark, fixed 0.99.2)
CVE-2006-3631 version (wireshark, fixed 0.99.2)
CVE-2006-3630 version (wireshark, fixed 0.99.2)
CVE-2006-3629 version (wireshark, fixed 0.99.2)
CVE-2006-3628 version (wireshark, fixed 0.99.2)
CVE-2006-3627 version (wireshark, fixed 0.99.2)
CVE-2006-3626 version (kernel, fixed 2.6.17.6)
CVE-2006-3619 version (gcc, fixed 4.1.1-20060828 at least)
CVE-2006-3582 version (adplug, fixed 2.0.1-1) #198108
CVE-2006-3581 version (adplug, fixed 2.0.1-1) #198108
CVE-2006-3486 ignore (mysql, fixed 5.0.23) not exploitable
*CVE-2006-3469 version (mysql)
CVE-2006-3468 version (kernel, fixed 2.6.17.8, fixed 2.6.18-rc4)
CVE-2006-3467 version (freetype, fixed 2.2)
CVE-2006-3467 ignore (vnc) #204052 not a vulnerability
*CVE-2006-3467 backport (libXfont) fdo-7535.patch
*CVE-2006-3465 backport (libtiff) libtiff-3.8.2-ormandy.patch
*CVE-2006-3464 backport (libtiff) libtiff-3.8.2-ormandy.patch
*CVE-2006-3463 backport (libtiff) libtiff-3.8.2-ormandy.patch
*CVE-2006-3462 backport (libtiff) libtiff-3.8.2-ormandy.patch
*CVE-2006-3461 backport (libtiff) libtiff-3.8.2-ormandy.patch
*CVE-2006-3460 backport (libtiff) libtiff-3.8.2-ormandy.patch
*CVE-2006-3459 backport (libtiff) libtiff-3.8.2-ormandy.patch
*CVE-2006-3458 backport (zope, fixed 2.9.3-3) #198106
CVE-2006-3404 version (gimp, fixed 2.2.12)
CVE-2006-3403 version (samba, fixed 3.0.23)
CVE-2006-3390 ignore (wordpress, not an issue) #198107
CVE-2006-3378 ignore (shadow-utils) we don't ship passwd from shadow-utils
*CVE-2006-3376 backport (libwmf) from changelog
CVE-2006-3352 ignore (firefox) not a vulnerability
CVE-2006-3334 ignore (libpng, fixed 1.2.12) not exploitable
*CVE-2006-3276 ** (helixplayer)
CVE-2006-3242 version (mutt, fixed 1.4.2.2, 1.5.12)
CVE-2006-3178 ignore (chmlib, extract_chmLib not shipped)
CVE-2006-3174 version (squirrelmail, fixed 1.4.7)
CVE-2006-3145 version (netpbm, fixed 10.34)
CVE-2006-3127 version (nss, only affected 3.11)
CVE-2006-3122 version (dhcp, only 2.x)
CVE-2006-3121 version (heartbeat, fixed 2.0.7)
*CVE-2006-3119 backport (fbida, fixed 2.0.3-12) #200321
CVE-2006-3117 version (openoffice.org, fixed 2.0.3)
CVE-2006-3113 version (thunderbird, fixed 1.5.0.5)
CVE-2006-3113 version (seamonkey, fixed 1.0.4) #200455
CVE-2006-3113 version (firefox, fixed 1.5.0.5)
CVE-2006-3093 ignore (acroread) windows only
CVE-2006-3085 version (kernel, fixed 2.6.17.1)
CVE-2006-3084 ignore (krb5) seteuid() calls never fail on linux
CVE-2006-3083 backport (krb5, fixed 1.5.1, 1.4.4)
CVE-2006-3082 version (gnupg, fixed 1.4.4)
CVE-2006-3081 version (mysql, fixed 5.1.18)
CVE-2006-3057 version (dhcdbd, fixed 1.14)
CVE-2006-3018 version (php, fixed 5.1.3)
CVE-2006-3017 version (php, fixed 5.1.3)
CVE-2006-3016 version (php, fixed 5.1.3)
CVE-2006-3014 ignore (flash-plugin) windows only
CVE-2006-3011 ignore (php) safe mode isn't safe
CVE-2006-3005 ignore (libjpeg) not a vuln
CVE-2006-2941 version (mailman, fixed 2.1.9)
*CVE-2006-2940 backport (openssl, fixed 0.9.8d)
*CVE-2006-2937 backport (openssl, fixed 0.9.8d)
CVE-2006-2936 version (kernel, fixed 2.6.17.7)
CVE-2006-2935 version (kernel, fixed 2.6.17.7)
CVE-2006-2934 version (kernel, fixed 2.6.17.3)
CVE-2006-2933 version (kde, not 3.2+)
CVE-2006-2932 ignore (kernel) no 4G/4G split support
CVE-2006-2920 version (sylpheed-claws, fixed 2.2.2)
CVE-2006-2916 ignore (arts) not shipped setuid
CVE-2006-2906 backport (gd) from changelog
CVE-2006-2894 version (firefox, fixed 2.0.0.8)
CVE-2006-2894 version (seamonkey, fixed 1.1.5) #194511
CVE-2006-2842 version (squirrelmail, fixed 1.4.6)
CVE-2006-2789 version (evolution, fixed 2.4.X)
CVE-2006-2788 version (firefox, fixed 1.5.0.4)
CVE-2006-2787 version (thunderbird, fixed 1.5.0.4)
CVE-2006-2787 version (firefox, fixed 1.5.0.4)
CVE-2006-2786 version (thunderbird, fixed 1.5.0.4)
CVE-2006-2786 version (firefox, fixed 1.5.0.4)
CVE-2006-2785 version (firefox, fixed 1.5.0.4)
CVE-2006-2784 version (firefox, fixed 1.5.0.4)
CVE-2006-2783 version (thunderbird, fixed 1.5.0.4)
CVE-2006-2783 version (firefox, fixed 1.5.0.4)
CVE-2006-2782 version (firefox, fixed 1.5.0.4)
CVE-2006-2781 version (thunderbird, fixed 1.5.0.4)
CVE-2006-2781 version (seamonkey, fixed 1.0.2-1) #193963
CVE-2006-2780 version (thunderbird, fixed 1.5.0.4)
CVE-2006-2780 version (firefox, fixed 1.5.0.4)
CVE-2006-2779 version (thunderbird, fixed 1.5.0.4)
CVE-2006-2779 version (firefox, fixed 1.5.0.4)
CVE-2006-2778 version (thunderbird, fixed 1.5.0.4)
CVE-2006-2778 version (firefox, fixed 1.5.0.4)
CVE-2006-2777 version (seamonkey, fixed 1.0.2-1) #193962
CVE-2006-2777 version (firefox, fixed 1.5.0.4)
CVE-2006-2776 version (thunderbird, fixed 1.5.0.4)
CVE-2006-2776 version (firefox, fixed 1.5.0.4)
CVE-2006-2775 version (thunderbird, fixed 1.5.0.4)
CVE-2006-2775 version (firefox, fixed 1.5.0.4)
CVE-2006-2769 backport (snort, fixed 2.4.4-4) #193809
CVE-2006-2754 ignore (openldap) This issue is not exploitable
CVE-2006-2753 version (mysql, fixed 5.0.22)
CVE-2006-2723 ignore (firefox) disputed
CVE-2006-2661 version (freetype, fixed 2.2.1)
CVE-2006-2660 ignore (php) see #195539
CVE-2006-2658 version (xsp, fixed 1.1.14) #206510
*CVE-2006-2656 backport (libtiff) tiffsplit-overflow.patch
CVE-2006-2629 ignore (kernel) couldn't be reproduced on FC
CVE-2006-2613 ignore (firefox) This isn't an issue on FC
CVE-2006-2607 backport (vixie-cron) vixie-cron-4.1-_48-security.patch
*CVE-2006-2575 backport (netpanzer, fixed 0.8-4) bz#192983
CVE-2006-2563 ignore (php) safe mode isn't safe
*CVE-2006-2502 ** (cyrus-imapd)
CVE-2006-2489 version (nagios, fixed 2.3.1)
*CVE-2006-2480 backport (dia, fixed 0.95-2) bz#192535
*CVE-2006-2453 backport (dia, fixed 0.95-3) #192830
CVE-2006-2452 version (gdm)
CVE-2006-2451 version (kernel, fixed 2.6.17.4)
*CVE-2006-2450 ** (vnc)
CVE-2006-2449 version (kdebase, fixed 3.5.4)
CVE-2006-2448 version (kernel, fixed 2.6.17)
CVE-2006-2447 version (spamassassin, fixed 3.1.3)
CVE-2006-2446 version (kernel, fixed 2.6.11)
CVE-2006-2445 version (kernel, fixed 2.6.17)
CVE-2006-2444 version (kernel, fixed 2.6.17)
*CVE-2006-2442 backport (kphone, fixed 4.2-9) bz#192202
CVE-2006-2440 version (ImageMagick, fixed 6.2.8 at least)
CVE-2006-2427 ignore (clamav) not an issue bz#192076
CVE-2006-2414 version (dovecot, fixed 1.0.beta8) not a security issue
CVE-2006-2369 version (vnc, fixed 4.1.2)
*CVE-2006-2366 ignore (openobex) we don't ship ircp
CVE-2006-2362 ignore (binutils) minor crash (not exploitable)
CVE-2006-2332 ignore (firefox) disputed
CVE-2006-2314 version (postgresql, fixed 8.1.4) [since FEDORA-2007-0249]
CVE-2006-2313 version (postgresql, fixed 8.1.4) [since FEDORA-2007-0249]
CVE-2006-2276 version (quagga, fixed 0.98.6)
CVE-2006-2275 version (kernel, fixed 2.6.16.15)
CVE-2006-2274 version (kernel, fixed 2.6.16.15)
CVE-2006-2272 version (kernel, fixed 2.6.16.15)
CVE-2006-2271 version (kernel, fixed 2.6.16.15)
*CVE-2006-2237 backport (awstats, fixed 6.5-5) bz#190923
*CVE-2006-2229 ** (openvpn)
CVE-2006-2224 version (quagga, fixed 0.98.6)
CVE-2006-2223 version (quagga, fixed 0.98.6)
CVE-2006-2199 version (openoffice.org, fixed 2.0.3)
CVE-2006-2198 version (openoffice.org, fixed 2.0.3)
CVE-2006-2197 version (wv2, fixed 0.2.3-1) #195019
CVE-2006-2194 ignore (ppp) pppd not suid
*CVE-2006-2193 backport (libtiff) libtiff-3.8.2-CVE-2006-2193.patch
CVE-2006-2191 ignore (mailman) disputed
*CVE-2006-2169 ** (rt3)
CVE-2006-2162 version (nagios, fixed 2.3.1) bz#190612
CVE-2006-2120 version (libtiff, fixed 3.8.2 at least)
CVE-2006-2093 version (nessus, fixed 2.2.7) bz#191053
CVE-2006-2083 version (rsync, fixed 2.6.8)
CVE-2006-2073 ignore (bind) http://www.kb.cert.org/vuls/id/MIMG-6P8GRP
CVE-2006-2071 version (kernel, fixed 2.6.16.6)
CVE-2006-2057 ignore (firefox) not Linux
CVE-2006-2026 version (libtiff, fixed 3.8.1)
CVE-2006-2025 version (libtiff, fixed 3.8.1)
CVE-2006-2024 version (libtiff, fixed 3.8.1)
CVE-2006-2017 version (dnsmasq, fixed 2.30)
CVE-2006-2016 version (phpldapadmin, fixed 0.9.8.1)
CVE-2006-1993 version (firefox, fixed 1.5.0.3)
CVE-2006-1991 version (php, fixed 5.1.3)
CVE-2006-1990 version (php, fixed 5.1.3)
CVE-2006-1989 version (clamav, fixed 0.88.2)
*CVE-2006-1945 backport (awstats, fixed 6.5-4) bz#190922 awstats-6.5-CVE-2006-1945.patch
CVE-2006-1942 version (firefox, fixed 1.5.0.4)
CVE-2006-1940 version (wireshark, fixed 0.99.0)
CVE-2006-1939 version (wireshark, fixed 0.99.0)
CVE-2006-1938 version (wireshark, fixed 0.99.0)
CVE-2006-1937 version (wireshark, fixed 0.99.0)
CVE-2006-1936 version (wireshark, fixed 0.99.0)
CVE-2006-1935 version (wireshark, fixed 0.99.0)
CVE-2006-1934 version (wireshark, fixed 0.99.0)
CVE-2006-1933 version (wireshark, fixed 0.99.0)
CVE-2006-1932 version (wireshark, fixed 0.99.0)
CVE-2006-1931 version (ruby, fixed 1.8.3)
CVE-2006-1902 ignore (gcc) not a vulnerability
CVE-2006-1900 version (amaya, fixed 9.5) bz#190324
CVE-2006-1865 version (beagle, fixed 0.2.5)
CVE-2006-1864 ignore (kernel, fixed 2.6.16.14) not compiled in
CVE-2006-1863 version (kernel, fixed 2.6.16.11)
CVE-2006-1862 version (kernel) not upstream kernels, only RHEL
CVE-2006-1861 version (freetype, fixed 2.2.1)
CVE-2006-1860 version (kernel, fixed 2.6.16.16)
CVE-2006-1859 version (kernel, fixed 2.6.16.16)
CVE-2006-1858 version (kernel, fixed 2.6.16.17)
CVE-2006-1857 version (kernel, fixed 2.6.16.17)
CVE-2006-1856 version (kernel, fixed 2.6.16.12)
CVE-2006-1855 version (kernel, fixed 2.6.11.12)
CVE-2006-1790 version (thunderbird, fixed 1.5.0.2)
CVE-2006-1790 version (firefox, fixed 1.5.0.2)
CVE-2006-1742 version (thunderbird, fixed 1.5.0.2)
CVE-2006-1742 version (seamonkey, fixed 1.0)
CVE-2006-1742 version (firefox, fixed 1.5.0.2)
CVE-2006-1741 version (thunderbird, fixed 1.5.0.2)
CVE-2006-1741 version (seamonkey, fixed 1.0)
CVE-2006-1741 version (firefox, fixed 1.5.0.2)
CVE-2006-1740 version (seamonkey, fixed 1.0)
CVE-2006-1740 version (firefox, fixed 1.5.0.2)
CVE-2006-1739 version (thunderbird, fixed 1.5.0.2)
CVE-2006-1739 version (seamonkey, fixed 1.0)
CVE-2006-1739 version (firefox, fixed 1.5.0.2)
CVE-2006-1738 version (thunderbird, fixed 1.5.0.2)
CVE-2006-1738 version (seamonkey, fixed 1.0)
CVE-2006-1738 version (firefox, fixed 1.5.0.2)
CVE-2006-1737 version (thunderbird, fixed 1.5.0.2)
CVE-2006-1737 version (seamonkey, fixed 1.0)
CVE-2006-1737 version (firefox, fixed 1.5.0.2)
CVE-2006-1736 version (seamonkey, fixed 1.0)
CVE-2006-1736 version (firefox, fixed 1.5.0.2)
CVE-2006-1735 version (thunderbird, fixed 1.5.0.2)
CVE-2006-1735 version (seamonkey, fixed 1.0)
CVE-2006-1735 version (firefox, fixed 1.5.0.2)
CVE-2006-1734 version (thunderbird, fixed 1.5.0.2)
CVE-2006-1734 version (seamonkey, fixed 1.0)
CVE-2006-1734 version (firefox, fixed 1.5.0.2)
CVE-2006-1733 version (thunderbird, fixed 1.5.0.2)
CVE-2006-1733 version (seamonkey, fixed 1.0)
CVE-2006-1733 version (firefox, fixed 1.5.0.2)
CVE-2006-1732 version (thunderbird, fixed 1.5.0.2)
CVE-2006-1732 version (seamonkey, fixed 1.0)
CVE-2006-1732 version (firefox, fixed 1.5.0.2)
CVE-2006-1731 version (thunderbird, fixed 1.5.0.2)
CVE-2006-1731 version (seamonkey, fixed 1.0)
CVE-2006-1731 version (firefox, fixed 1.5.0.2)
CVE-2006-1730 version (thunderbird, fixed 1.5.0.2)
CVE-2006-1730 version (seamonkey, fixed 1.0.1)
CVE-2006-1730 version (firefox, fixed 1.5.0.2)
CVE-2006-1729 version (seamonkey, fixed 1.0.1)
CVE-2006-1729 version (firefox, fixed 1.5.0.2)
CVE-2006-1728 version (thunderbird, fixed 1.5.0.2)
CVE-2006-1728 version (seamonkey, fixed 1.0.1)
CVE-2006-1728 version (firefox, fixed 1.5.0.2)
CVE-2006-1727 version (thunderbird, fixed 1.5.0.2)
CVE-2006-1727 version (seamonkey, fixed 1.0.1)
CVE-2006-1727 version (firefox, fixed 1.5.0.2)
CVE-2006-1726 version (thunderbird, fixed 1.5.0.2)
CVE-2006-1726 version (seamonkey, fixed 1.0.1)
CVE-2006-1726 version (firefox, fixed 1.5.0.2)
CVE-2006-1725 version (seamonkey, fixed 1.0.1)
CVE-2006-1725 version (firefox, fixed 1.5.0.2)
CVE-2006-1724 version (thunderbird, fixed 1.5.0.2)
CVE-2006-1724 version (seamonkey, fixed 1.0.1)
CVE-2006-1724 version (firefox, fixed 1.5.0.2)
CVE-2006-1723 version (thunderbird, fixed 1.5.0.2)
CVE-2006-1723 version (seamonkey, fixed 1.0.1)
CVE-2006-1723 version (firefox, fixed 1.5.0.2)
CVE-2006-1721 version (cyrus-sasl, fixed 2.1.21)
CVE-2006-1712 version (mailman, only 2.1.7)
CVE-2006-1711 version (plone, fixed 2.1.2) bz#188886
*CVE-2006-1695 backport (fbida, fixed 2.03-11) bz#189721
CVE-2006-1656 version (util-vserver, fixed 0.30.210)
CVE-2006-1650 ignore (firefox) a number of reports don't confirm this
CVE-2006-1646 ignore (ipsec-tools) KAME racoon, not ipsec-tools racoon
CVE-2006-1630 version (clamav, fixed 0.88.1) bz#188286
CVE-2006-1629 version (openvpn, fixed 2.0.6) bz#188050
CVE-2006-1624 ignore (sysklogd) Silly configuration is not a security issue
CVE-2006-1615 version (clamav, fixed 0.88.1) bz#188286
CVE-2006-1614 version (clamav, fixed 0.88.1) bz#188286
CVE-2006-1608 ignore (php) safe mode isn't safe
CVE-2006-1577 version (mantis, fixed 1.0.5) bz#191089
CVE-2006-1566 ignore (libtunepimp) Debian-specific problem
CVE-2006-1550 version (dia, fixed 0.95) bz#187556
CVE-2006-1549 ignore (php) this is not a security issue
CVE-2006-1548 version (struts, fixed 1.2.9)
CVE-2006-1547 version (struts, fixed 1.2.9)
CVE-2006-1546 version (struts, fixed 1.2.9)
*CVE-2006-1542 backport (python) python-2.4.1-canonicalize.patch
CVE-2006-1539 ignore (bsd-games) Gentoo-specific problem
CVE-2006-1531 version (thunderbird, fixed 1.5.0.2)
CVE-2006-1531 version (seamonkey, fixed 1.0.1)
CVE-2006-1531 version (firefox, fixed 1.5.0.2)
CVE-2006-1530 version (thunderbird, fixed 1.5.0.2)
CVE-2006-1530 version (seamonkey, fixed 1.0.1)
CVE-2006-1530 version (firefox, fixed 1.5.0.2)
CVE-2006-1529 version (thunderbird, fixed 1.5.0.2)
CVE-2006-1529 version (seamonkey, fixed 1.0.1)
CVE-2006-1529 version (firefox, fixed 1.5.0.2)
CVE-2006-1528 version (kernel, fixed 2.6.13)
CVE-2006-1527 version (kernel, fixed 2.6.17)
CVE-2006-1526 version (xorg-x11-server, fixed 1.1.1 at least)
CVE-2006-1525 version (kernel, fixed 2.6.16.8)
CVE-2006-1524 version (kernel, fixed 2.6.16.7)
CVE-2006-1523 version (kernel, fixed 2.6.16.4)
CVE-2006-1522 version (kernel, fixed 2.6.16.3)
CVE-2006-1518 version (mysql, fixed 5.0.21)
CVE-2006-1517 version (mysql, fixed 5.0.21)
CVE-2006-1516 version (mysql, fixed 5.0.21)
CVE-2006-1498 version (mediawiki, fixed 1.5.8) bz#188122
CVE-2006-1494 version (php, fixed 5.1.3)
CVE-2006-1490 version (php, fixed 5.1.4)
CVE-2006-1470 version (openldap, not 2.3.24 at least)
CVE-2006-1390 VULNERABLE (nethack) bz#187353, but requires other access to games group
*CVE-2006-1370 ** (helixplayer)
CVE-2006-1368 version (kernel, fixed 2.6.16)
CVE-2006-1354 version (freeradius, fixed 1.1.2 at least)
CVE-2006-1343 version (kernel, fixed 2.6.16.19)
CVE-2006-1342 version (kernel, not 2.6)
CVE-2006-1335 version (gnome-screensaver, fixed 2.14)
CVE-2006-1329 version (jabberd, fixed 2.0s11)
CVE-2006-1296 version (beagle, fixed 0.2.4)
CVE-2006-1273 ignore (firefox) this issue only affects IE
*CVE-2006-1269 backport (zoo, fixed 2.10-7) bz#183109
CVE-2006-1251 ignore (exim-sa, configuration not vulnerable) bz#191082
CVE-2006-1242 version (kernel, fixed 2.6.16.1)
CVE-2006-1174 version (shadow-utils, fixed 4.0.3)
CVE-2006-1173 version (sendmail, fixed 8.13.7)
*CVE-2006-1168 backport (ncompress) ncompress-4.2.4-bssUnderflow.patch
CVE-2006-1095 version (mod_python, 3.2.7 only)
*CVE-2006-1079 backport (thttpd, fixed 2.25b-11) bz#191095
CVE-2006-1079 ignore (httpd) not a vulnerability
*CVE-2006-1078 backport (thttpd, fixed 2.25b-11) bz#191095
CVE-2006-1078 ignore (httpd) not a vulnerability
CVE-2006-1066 version (kernel, fixed 2.6.16)
CVE-2006-1061 version (curl, fixed 7.15.3)
CVE-2006-1059 version (samba, fixed 3.0.22 at least)
CVE-2006-1058 version (busybox, fixed 1.2.x)
CVE-2006-1057 version (gdm, fixed 2.14.1)
CVE-2006-1056 version (kernel, fixed 2.6.16.9)
CVE-2006-1055 version (kernel, fixed 2.6.17)
*CVE-2006-1053 ** (fedora-ds-base) Publish CVE!
CVE-2006-1052 version (kernel, fixed 2.6.16)
CVE-2006-1045 version (thunderbird, fixed 1.5.0.2)
CVE-2006-1015 ignore (php) safe mode isn't safe
CVE-2006-1014 ignore (php) safe mode isn't safe
CVE-2006-0996 version (php, fixed 5.1.4)
CVE-2006-0987 ignore (bind) example config file only
CVE-2006-0903 version (mysql, fixed 4.1.19)
CVE-2006-0884 version (thunderbird, fixed 1.5.0.2)
CVE-2006-0883 version (openssh, fixed 3.8.1p1)
*CVE-2006-0855 backport (zoo, patched in OpenSUSE "upstream", fixed 2.10-7)
CVE-2006-0847 version (python-cherrypy, fixed 2.1.1)
CVE-2006-0841 version (mantis, fixed 1.0.1)
CVE-2006-0840 version (mantis, fixed 1.0.1)
CVE-2006-0839 version (snort, fixed in 2.4.4) bz#183297
CVE-2006-0836 ignore (thunderbird) only crash on manual import
CVE-2006-0814 ignore (lighttpd) Windows-specific problem
CVE-2006-0804 ignore (tin, <= 1.8.0 not shipped)
CVE-2006-0760 version (lighttpd, fixed 1.4.10)
CVE-2006-0749 version (thunderbird, fixed 1.5.0.2)
CVE-2006-0749 version (seamonkey, fixed 1.0)
CVE-2006-0749 version (firefox, fixed 1.5.0.2)
CVE-2006-0748 version (thunderbird, fixed 1.5.0.2)
CVE-2006-0748 version (seamonkey, fixed 1.0.1)
CVE-2006-0748 version (firefox, fixed 1.5.0.2)
CVE-2006-0747 version (freetype, fixed 2.2.1)
CVE-2006-0746 version (kdegraphics, fixed 3.4)
CVE-2006-0745 version (xorg-x11-server, fixed 1.1.1 at least)
CVE-2006-0744 version (kernel, fixed 2.6.16.5)
*CVE-2006-0743 ** (log4net)
CVE-2006-0742 version (kernel, fixed 2.6.16)
CVE-2006-0741 version (kernel, fixed 2.6.15.5)
CVE-2006-0730 version (dovecot, 1.0beta[12] only)
*CVE-2006-0709 ** (metamail)
CVE-2006-0678 ignore (postgresql) we don't build --enable-cassert
CVE-2006-0670 version (bluez-hcidump, fixed 1.30)
CVE-2006-0665 version (mantis, fixed 1.0.1)
CVE-2006-0664 version (mantis, fixed 1.0.1)
CVE-2006-0645 version (libtasn1, fixed 0.3.0) bz#184097
CVE-2006-0645 version (gnutls, fixed 1.2.10)
CVE-2006-0591 version (postgresql, fixed 8.0.6)
CVE-2006-0576 version (oprofile, fixed 0.9.2 at least) [since FEDORA-2006-1172] was backport since GA
CVE-2006-0558 version (kernel, fixed 2.6.16)
CVE-2006-0557 version (kernel, fixed 2.6.15.6)
CVE-2006-0555 version (kernel, fixed 2.6.16)
CVE-2006-0554 version (kernel, fixed 2.6.16)
CVE-2006-0553 version (postgresql, only 8.1, fixed 8.1.3)
CVE-2006-0528 version (cairo, fixed 1.0.4)
CVE-2006-0496 ignore (firefox) Feature, not a bug moz #324253
*CVE-2006-0482 ignore (kernel) sparc only
CVE-2006-0481 version (libpng, 1.2.7 only)
*CVE-2006-0459 version (flex) by inspection
CVE-2006-0458 version (irssi, fixed 0.8.10) bz#184509
CVE-2006-0457 version (kernel, fixed 2.6.16)
CVE-2006-0456 ignore (kernel) s390 only
CVE-2006-0455 version (gnupg, fixed 1.4.2.1)
CVE-2006-0454 version (kernel, fixed 2.6.15.3)
CVE-2006-0453 version (fedora-ds-base, 1.1.0-1.2) #179135
CVE-2006-0452 version (fedora-ds-base, 1.1.0-1.2) #179137
CVE-2006-0451 version (fedora-ds-base, 1.1.0-1.2) #179135
CVE-2006-0405 version (libtiff, 3.8.0 only)
CVE-2006-0377 version (squirrelmail, fixed 1.4.6)
CVE-2006-0369 ignore (mysql) this is not a security issue
*CVE-2006-0323 ** (helixplayer)
CVE-2006-0322 version (mediawiki, fixed 1.5.8)
CVE-2006-0321 version (fetchmail, fixed 6.3.2)
CVE-2006-0301 version (poppler, fixed 0.4.5)
CVE-2006-0301 version (kdegraphics, fixed 3.5.2)
CVE-2006-0300 version (tar, fixed 1.15.90 at least)
CVE-2006-0299 version (thunderbird, fixed 1.5)
CVE-2006-0299 version (seamonkey, fixed 1.0)
CVE-2006-0299 version (firefox, fixed 1.5.0.1)
CVE-2006-0298 version (thunderbird, fixed 1.5)
CVE-2006-0298 version (seamonkey, fixed 1.0)
CVE-2006-0298 version (firefox, fixed 1.5.0.1)
CVE-2006-0297 version (thunderbird, fixed 1.5)
CVE-2006-0297 version (seamonkey, fixed 1.0)
CVE-2006-0297 version (firefox, fixed 1.5.0.1)
CVE-2006-0296 version (thunderbird, fixed 1.5)
CVE-2006-0296 version (seamonkey, fixed 1.0)
CVE-2006-0296 version (firefox, fixed 1.5.0.1)
CVE-2006-0295 version (thunderbird, fixed 1.5)
CVE-2006-0295 version (seamonkey, fixed 1.0)
CVE-2006-0295 version (firefox, fixed 1.5.0.1)
CVE-2006-0294 version (thunderbird, fixed 1.5)
CVE-2006-0294 version (seamonkey, fixed 1.0)
CVE-2006-0294 version (firefox, fixed 1.5.0.1)
CVE-2006-0293 version (thunderbird, fixed 1.5)
CVE-2006-0293 version (firefox, fixed 1.5.0.1)
CVE-2006-0292 version (thunderbird, fixed 1.5)
CVE-2006-0292 version (firefox, fixed 1.5.1)
CVE-2006-0254 version (tomcat5, fixed 5.5.16)
CVE-2006-0236 ignore (thunderbird) windows only
CVE-2006-0225 version (openssh, fixed 4.3p2) #168167
CVE-2006-0208 version (php, fixed 5.1.2)
CVE-2006-0207 version (php, fixed 5.1.2)
CVE-2006-0200 version (php, fixed 5.1.2)
CVE-2006-0197 ignore (xorg-x11) not an issue
CVE-2006-0195 version (squirrelmail, fixed 1.4.6)
CVE-2006-0188 version (squirrelmail, fixed 1.4.6)
CVE-2006-0162 version (clamav, fixed 0.88)
CVE-2006-0151 ignore (sudo) only env_reset will properly clean the environment
*CVE-2006-0150 ** (auth_ldap)
CVE-2006-0144 version (php-pear, not 1.4.4)
CVE-2006-0126 version (rxvt-unicode, fixed 7.5)
CVE-2006-0106 version (wine, fixed 0.9.10)
*CVE-2006-0105 ** (postgresql)
CVE-2006-0097 ignore (php) Windows only
CVE-2006-0096 ignore (kernel) minor and requires root
CVE-2006-0095 version (kernel, fixed 2.6.16)
CVE-2006-0082 version (ImageMagick, not 6.2.5.4)
CVE-2006-0082 version (GraphicsMagick, fixed 1.1.8) [since FEDORA-2007-1340]
CVE-2006-0071 ignore (pinentry) Gentoo-specific problem
CVE-2006-0058 version (sendmail, fixed 8.13.6)
CVE-2006-0052 version (mailman, fixed 2.1.6)
CVE-2006-0049 version (gnupg, fixed 1.4.2.2)
CVE-2006-0047 version (freeciv, fixed 2.0.8) bz#184507
CVE-2006-0043 ignore (nfs-server) we use the kernel nfs server
CVE-2006-0042 version (libapreq2, fixed 2.0.7)
CVE-2006-0039 version (kernel, fixed 2.6.16.17)
CVE-2006-0037 version (kernel, only 2.6.14 and 2.6.15)
CVE-2006-0036 version (kernel, only 2.6.14 and 2.6.15)
CVE-2006-0035 version (kernel, only 2.6.14 and 2.6.15)
CVE-2006-0019 version (kdelibs, fixed 3.5.1)
*CVE-2006-0017 ** (fedora-ds-base) Publish CVE!
*CVE-2006-0016 ** (fedora-ds-base) Publish CVE!
CVE-2005-4791 version (liferea, fixed 1.2.8) #393291 [since FEDORA-2007-3733]
*CVE-2005-4838 ** (tomcat)
CVE-2005-4837 version (net-snmp, fixed 5.2.2)
*CVE-2005-4836 ** (tomcat)
CVE-2005-4811 version (kernel, fixed 2.6.13)
CVE-2005-4809 ignore (firefox) Status bar can be modified anyways
CVE-2005-4808 ignore (binutils, gas fixed 20050714) this is a bug
CVE-2005-4807 ignore (binutils, gas fixed 20050721) this is a bug
CVE-2005-4803 version (graphviz, fixed 2.2.1)
CVE-2005-4798 version (kernel, not 2.6)
CVE-2005-4790 backport (blam, fixed 1.8.4) #395751 [since FEDORA-2007-3792]
CVE-2005-4790 backport (tomboy) #362941 [since FEDORA-2007-3011]
CVE-2005-4784 ignore (glibc) struct dirent is big enough
CVE-2005-4746 version (freeradius, fixed 1.0.5)
CVE-2005-4745 version (freeradius, fixed 1.0.5)
CVE-2005-4744 version (freeradius, fixed 1.0.5)
CVE-2005-4720 version (thunderbird, fixed 1.5)
CVE-2005-4720 version (firefox, fixed 1.5)
CVE-2005-4703 ignore (tomcat) windows only
CVE-2005-4685 ignore (firefox) not fixed upstream, low, can't fix
CVE-2005-4684 ignore (kdebase) not fixed upstream, low, can't fix
*CVE-2005-4667 backport (unzip) changelog
CVE-2005-4639 version (kernel, fixed 2.6.15)
CVE-2005-4636 version (openoffice.org, fixed 2.0.1)
CVE-2005-4635 version (kernel, fixed 2.6.15)
CVE-2005-4618 version (kernel, fixed 2.6.15)
CVE-2005-4605 version (kernel, fixed 2.6.15)
*CVE-2005-4601 ** (ImageMagick)
CVE-2005-4601 version (GraphicsMagick, fixed 1.1.8) [since FEDORA-2007-1340]
CVE-2005-4585 version (wireshark, fixed 0.10.14)
CVE-2005-4442 version (openldap) gentoo only
CVE-2005-4352 version (kernel, fixed 2.6.18.3) [since FEDORA-2006-1471]
CVE-2005-4348 version (fetchmail, fixed 6.3.1)
CVE-2005-4268 backport (cpio) cpio-2.6-writeOutHeaderBufferOverflow.patch
CVE-2005-4158 ignore (sudo) only env_reset will properly clean the environment
CVE-2005-4154 ignore (php) don't install untrusted pear packages
*CVE-2005-4153 version (mailman)
CVE-2005-4134 ignore (firefox) http://www.mozilla.org/security/history-title.html
*CVE-2005-4130 ** (helixplayer)
*CVE-2005-4126 ** (helixplayer)
CVE-2005-4077 version (curl, fixed 7.15.1)
*CVE-2005-3964 ** (openmotif)
CVE-2005-3962 version (perl, fixed 5.8.8)
CVE-2005-3896 ignore (mozilla) client DoS
CVE-2005-3883 version (php, fixed 5.1.1 at least)
CVE-2005-3858 version (kernel, fixed 2.6.13)
CVE-2005-3857 version (kernel, fixed 2.6.15)
CVE-2005-3848 version (kernel, fixed 2.6.13)
CVE-2005-3847 version (kernel, fixed 2.6.12.6)
CVE-2005-3810 version (kernel, fixed 2.6.15)
CVE-2005-3809 version (kernel, fixed 2.6.15)
CVE-2005-3808 version (kernel, fixed 2.6.15)
CVE-2005-3807 version (kernel, fixed 2.6.15)
CVE-2005-3806 version (kernel, fixed 2.6.14)
CVE-2005-3805 version (kernel, fixed 2.6.14)
CVE-2005-3784 version (kernel, fixed 2.6.15)
CVE-2005-3783 version (kernel, fixed 2.6.15)
CVE-2005-3753 version (kernel, fixed 2.6.14)
CVE-2005-3745 ignore (struts, fixed 1.2.8) but not through tomcat
CVE-2005-3732 version (ipsec-tools, fixed 0.6.3)
CVE-2005-3675 ignore (kernel) optack, no upstream fix, wontfix upstream
CVE-2005-3671 version (openswan, fixed 2.4.4)
*CVE-2005-3662 version (netpbm)
CVE-2005-3656 version (mod_auth_pgsql, fixed 2.0.3)
CVE-2005-3651 version (wireshark, fixed 0.10.14)
*CVE-2005-3632 version (netpbm)
*CVE-2005-3631 version (udev)
CVE-2005-3630 version (fedora-ds-base, since 1.0) #174837
CVE-2005-3629 version (initscripts, fixed 8.29 at least)
CVE-2005-3628 version (poppler, fixed 0.4.4)
CVE-2005-3628 version (kdegraphics, fixed 3.5.1)
CVE-2005-3628 version (cups, fixed 1.2.0)
*CVE-2005-3628 backport (tetex) tetex-3.0-CVE-2005-3193.patch
CVE-2005-3627 version (poppler, fixed 0.4.4)
CVE-2005-3627 version (kdegraphics, fixed 3.5.1)
CVE-2005-3627 version (cups, fixed 1.2.0)
*CVE-2005-3627 backport (tetex)
CVE-2005-3626 version (poppler, fixed 0.4.4)
CVE-2005-3626 version (kdegraphics, fixed 3.5.1)
CVE-2005-3626 version (cups, fixed 1.2.0)
*CVE-2005-3626 backport (tetex)
CVE-2005-3625 version (poppler, fixed 0.4.4)
CVE-2005-3625 version (kdegraphics, fixed 3.5.1)
CVE-2005-3625 version (cups, fixed 1.2.0)
*CVE-2005-3625 backport (tetex)
CVE-2005-3624 version (poppler, fixed 0.4.4)
CVE-2005-3624 version (kdegraphics, fixed 3.5.1)
CVE-2005-3624 version (cups, fixed 1.2.0)
*CVE-2005-3624 backport (tetex)
CVE-2005-3623 version (kernel, fixed 2.6.14.5)
CVE-2005-3582 version (ImageMagick) gentoo only
CVE-2005-3573 version (mailman, fixed 2.1.7)
CVE-2005-3527 version (kernel, fixed 2.6.14)
*CVE-2005-3510 ** (tomcat)
CVE-2005-3402 ignore (thunderbird) mozilla say by design
CVE-2005-3392 version (php, not 5.0)
CVE-2005-3391 version (php, not 5.0)
CVE-2005-3390 version (php, fixed 5.1.0)
CVE-2005-3389 version (php, fixed 5.1.1)
CVE-2005-3388 version (php, fixed 5.1.1)
CVE-2005-3359 version (kernel, fixed 2.6.14)
CVE-2005-3358 version (kernel, fixed 2.6.11)
CVE-2005-3357 version (httpd, fixed 2.2.1)
CVE-2005-3356 version (kernel, fixed 2.6.16)
*CVE-2005-3354 ** (sylpheed)
CVE-2005-3353 version (php, not 5.0)
CVE-2005-3352 version (httpd, fixed 2.2.1)
CVE-2005-3351 version (spamassassin, fixed 3.1.0)
*CVE-2005-3350 ** (libungif)
CVE-2005-3322 version (squid) not upstream, SUSE only
CVE-2005-3319 ignore (mod_php) no security consequence
CVE-2005-3313 version (wireshark, fixed after 0.10.13)
CVE-2005-3276 version (kernel, fixed 2.6.12.4)
CVE-2005-3275 version (kernel, fixed 2.6.13)
CVE-2005-3274 version (kernel, fixed 2.6.13)
CVE-2005-3273 version (kernel, fixed 2.6.12)
CVE-2005-3272 version (kernel, fixed 2.6.13)
CVE-2005-3271 version (kernel, fixed 2.6.9)
CVE-2005-3269 ignore (fedora-ds-base) "This flaw did not affect Fedora Directory Server"
CVE-2005-3258 version (squid, fixed 2.5STABLE12)
CVE-2005-3257 version (kernel, fixed 2.6.15)
CVE-2005-3249 version (wireshark, fixed 0.10.13)
CVE-2005-3248 version (wireshark, fixed 0.10.13)
CVE-2005-3247 version (wireshark, fixed 0.10.13)
CVE-2005-3246 version (wireshark, fixed 0.10.13)
CVE-2005-3245 version (wireshark, fixed 0.10.13)
CVE-2005-3244 version (wireshark, fixed 0.10.13)
CVE-2005-3243 version (wireshark, fixed 0.10.13)
CVE-2005-3242 version (wireshark, fixed 0.10.13)
CVE-2005-3241 version (wireshark, fixed 0.10.13)
CVE-2005-3193 version (poppler, fixed 0.4.4)
CVE-2005-3193 version (kdegraphics, fixed 3.5.1)
CVE-2005-3193 version (cups, fixed 1.2.0)
*CVE-2005-3193 backport (tetex) tetex-3.0-CVE-2005-3193.patch
CVE-2005-3192 version (poppler, fixed 0.4.4)
CVE-2005-3192 version (kdegraphics, fixed 3.5.1)
CVE-2005-3192 version (cups, fixed 1.2.0)
*CVE-2005-3192 backport (tetex) tetex-3.0-CVE-2005-3193.patch
CVE-2005-3191 version (poppler, fixed 0.4.4)
CVE-2005-3191 version (kdegraphics, fixed 3.5.1)
CVE-2005-3191 version (cups, fixed 1.2.0)
*CVE-2005-3191 backport (tetex) tetex-3.0-CVE-2005-3193.patch
CVE-2005-3186 version (gtk2, fixed 2.8.7 at least)
CVE-2005-3185 version (wget, fixed 1.10.2 at least)
CVE-2005-3185 version (curl, fixed 7.15)
CVE-2005-3184 version (wireshark, fixed 0.10.13)
*CVE-2005-3183 ** (w3c-libwww)
CVE-2005-3181 version (kernel, fixed 2.6.13.4)
CVE-2005-3180 version (kernel, fixed 2.6.13.4)
CVE-2005-3179 version (kernel, fixed 2.6.13.4)
CVE-2005-3164 version (tomcat, not 5)
*CVE-2005-3120 backport (lynx) changelog
CVE-2005-3119 version (kernel, fixed 2.6.13.4)
CVE-2005-3110 version (kernel, fixed 2.6.12)
CVE-2005-3109 version (kernel, fixed 2.6.12)
CVE-2005-3108 version (kernel, fixed 2.6.12)
CVE-2005-3107 version (kernel, fixed 2.6.11)
CVE-2005-3106 version (kernel, fixed 2.6.11)
CVE-2005-3105 version (kernel, fixed 2.6.12)
CVE-2005-3089 version (firefox, fixed 1.0.7)
CVE-2005-3088 ignore (fetchmail) fetchmailconf not shipped
CVE-2005-3055 version (kernel, fixed 2.6.14)
CVE-2005-3054 ignore (php)
CVE-2005-3053 version (kernel, fixed 2.6.12.5)
CVE-2005-3044 version (kernel, fixed 2.6.13.2)
*CVE-2005-3011 backport (texinfo) texinfo-CAN-2005-3011.patch
CVE-2005-2991 ignore (ncompress) don't ship zdiff or zcmp scripts
CVE-2005-2978 version (netpbm, fixed 10.25)
CVE-2005-2977 version (pam, fixed 0.99.2.1 at least)
*CVE-2005-2976 ** (gdk-pixbuf)
CVE-2005-2975 version (gtk2, fixed 2.8.7)
*CVE-2005-2974 ** (libungif)
CVE-2005-2973 version (kernel, fixed 2.6.14)
CVE-2005-2970 version (httpd, not 2.2)
CVE-2005-2969 version (openssl, fixed 0.9.8a)
*CVE-2005-2969 backport (openssl097a, fixed 0.9.7h)
CVE-2005-2968 version (thunderbird)
CVE-2005-2968 version (firefox)
CVE-2005-2959 ignore (sudo) not a vulnerability
*CVE-2005-2958 ** (libgda)
CVE-2005-2946 version (openssl, fixed 0.9.8)
*CVE-2005-2933 version (libc-client, fixed 2004g at least)
*CVE-2005-2929 backport (lynx) changelog
*CVE-2005-2922 ** (helixplayer)
CVE-2005-2917 version (squid, fixed 2.5.STABLE11)
CVE-2005-2876 version (util-linux, fixed 2.13-pre3)
CVE-2005-2874 version (cups, fixed 1.1.23)
CVE-2005-2873 version (kernel, fixed 2.6.18-rc1)
CVE-2005-2872 version (kernel, fixed 2.6.12)
CVE-2005-2871 version (thunderbird)
CVE-2005-2871 version (firefox, fixed 1.0.7)
CVE-2005-2811 version (net-snmp) not upstream, gentoo only
CVE-2005-2801 version (kernel, fixed 2.6.11)
CVE-2005-2800 version (kernel, fixed 2.6.12.6)
CVE-2005-2798 version (openssh, fixed 4.2)
CVE-2005-2797 version (openssh, fixed 4.2)
CVE-2005-2796 version (squid, fixed 2.5.STABLE11)
CVE-2005-2794 version (squid, fixed 2.5.STABLE11)
CVE-2005-2728 version (httpd, not 2.2)
*CVE-2005-2710 ** (helixplayer)
CVE-2005-2709 version (kernel, fixed 2.6.14.3)
CVE-2005-2708 ignore (kernel) not reproducable on x86_64
CVE-2005-2707 version (thunderbird)
CVE-2005-2707 version (firefox, fixed 1.0.7)
CVE-2005-2706 version (thunderbird)
CVE-2005-2706 version (firefox, fixed 1.0.7)
CVE-2005-2705 version (thunderbird)
CVE-2005-2705 version (firefox, fixed 1.0.7)
CVE-2005-2704 version (thunderbird)
CVE-2005-2704 version (firefox, fixed 1.0.7)
CVE-2005-2703 version (thunderbird)
CVE-2005-2703 version (firefox, fixed 1.0.7)
CVE-2005-2702 version (thunderbird)
CVE-2005-2702 version (firefox, fixed 1.0.7)
CVE-2005-2701 version (firefox, fixed 1.0.7)
CVE-2005-2700 version (httpd, not 2.2)
*CVE-2005-2693 backport (cvs) cvs-1.11.19-tmp.patch
CVE-2005-2672 version (lm_sensors, fixed 2.9.2)
CVE-2005-2666 version (openssh, fixed 4.0p1)
CVE-2005-2642 version (mutt) openbsd only
*CVE-2005-2641 version (nss_ldap, fixed pam_ldap:180)
*CVE-2005-2629 ** (helixplayer)
CVE-2005-2617 version (kernel, fixed 2.6.12.5)
CVE-2005-2602 ignore (thunderbird) probably
CVE-2005-2602 ignore (firefox) https://bugzilla.mozilla.org/show_bug.cgi?id=237085
CVE-2005-2558 version (mysql, fixed 4.1.13)
CVE-2005-2558 ignore (mysql) not an issue
CVE-2005-2555 version (kernel, fixed 2.6.12.6)
CVE-2005-2553 version (kernel, not 2.6)
CVE-2005-2550 version (evolution, fixed after 2.3.6.1)
CVE-2005-2549 version (evolution, fixed after 2.3.6.1)
CVE-2005-2548 version (kernel, fixed 2.6.9) only affected 2.6.8
CVE-2005-2547 version (bluez-pin, fixed 2.19) not before 2.16
CVE-2005-2541 ignore (tar) is documented behaviour
CVE-2005-2500 version (kernel, fixed 2.6.13)
CVE-2005-2498 version (php, fixed xml_rpc:1.4.0)
CVE-2005-2496 version (ntp, fixed 4.2.0b)
CVE-2005-2495 version (xorg-x11-server, fixed 0.99.3 at least)
CVE-2005-2494 version (kdebase, fixed after 3.4.2)
CVE-2005-2492 version (kernel, fixed 2.6.13.1)
CVE-2005-2491 version (pcre, fixed 6.2)
CVE-2005-2491 ignore (python) fc6 python does not contain pcre
CVE-2005-2491 ignore (php) php uses system pcre
CVE-2005-2491 ignore (httpd) httpd uses system pcre
CVE-2005-2490 version (kernel, fixed 2.6.13.1)
*CVE-2005-2475 backport (unzip) unzip-5.52-toctou.patch
CVE-2005-2471 version (netpbm, fixed 10.31)
CVE-2005-2459 ignore (kernel, fixed 2.6.12.5) dropped as code path not possible
CVE-2005-2458 version (kernel, fixed 2.6.12.5)
CVE-2005-2457 version (kernel, fixed 2.6.12.5)
CVE-2005-2456 version (kernel, fixed 2.6.12.5)
CVE-2005-2452 version (libtiff, fixed 3.7.0)
CVE-2005-2448 version (kdenetwork, fixed 3.4.2)
CVE-2005-