| 21 |
|
|
| 22 |
-- |
-- |
| 23 |
|
|
| 24 |
|
backuppc (CVE-2009-3369) |
| 25 |
|
#542218 |
| 26 |
|
notified maintainer |
| 27 |
|
|
| 28 |
|
-- |
| 29 |
|
|
| 30 |
bugzilla (CVE-2009-0481 to CVE-2009-0485) |
bugzilla (CVE-2009-0481 to CVE-2009-0485) |
| 31 |
notified maintainer |
notified maintainer |
| 32 |
|
|
| 33 |
-- |
-- |
| 34 |
|
|
| 35 |
|
buildbot (CVE-2009-2959, CVE-2009-2967) |
| 36 |
|
#543822 |
| 37 |
|
notified maintainer |
| 38 |
|
|
| 39 |
|
-- |
| 40 |
|
|
| 41 |
compiz-fusion-plugins-main (CVE-2008-6514) |
compiz-fusion-plugins-main (CVE-2008-6514) |
| 42 |
notified maintainer |
notified maintainer |
| 43 |
|
|
| 49 |
|
|
| 50 |
-- |
-- |
| 51 |
|
|
| 52 |
|
dopewars (CVE-2009-3591) |
| 53 |
|
#550913 |
| 54 |
|
notified maintainer |
| 55 |
|
|
| 56 |
|
-- |
| 57 |
|
|
| 58 |
|
evolution (CVE-2009-1631) |
| 59 |
|
#526409 |
| 60 |
|
notified maintainer through initial bugreport |
| 61 |
|
|
| 62 |
|
-- |
| 63 |
|
|
| 64 |
|
firebird2.0 (CVE-2009-2620) |
| 65 |
|
#539477 |
| 66 |
|
notified maintainer |
| 67 |
|
|
| 68 |
|
-- |
| 69 |
|
|
| 70 |
|
glib2.0 (CVE-2009-3289) |
| 71 |
|
https://bugzilla.gnome.org/show_bug.cgi?id=593406 |
| 72 |
|
notified maintainer |
| 73 |
|
|
| 74 |
|
-- |
| 75 |
|
|
| 76 |
gnutls26 (CVE-2009-1417) |
gnutls26 (CVE-2009-1417) |
| 77 |
#531614 |
#531614 |
| 78 |
notified maintainer |
notified maintainer |
| 79 |
|
|
| 80 |
-- |
-- |
| 81 |
|
|
| 82 |
lcms (CVE-2009-0793) |
gri (no CVE) |
| 83 |
|
fixed in gri 2.12.18-1: |
| 84 |
|
"Improve security when creating temporary files." |
| 85 |
|
notified maintainer |
| 86 |
|
|
| 87 |
|
-- |
| 88 |
|
|
| 89 |
|
gupnp (CVE-2009-2174) |
| 90 |
|
#534594 |
| 91 |
|
notified maintainer |
| 92 |
|
|
| 93 |
|
-- |
| 94 |
|
|
| 95 |
|
htmldoc (CVE-2009-3050) |
| 96 |
|
#537637 |
| 97 |
notified maintainer through initial bugreport |
notified maintainer through initial bugreport |
| 98 |
|
|
| 99 |
-- |
-- |
| 100 |
|
|
| 101 |
|
kde4libs (CVE-2009-2702) |
| 102 |
|
#546218 |
| 103 |
|
notified maintainer |
| 104 |
|
|
| 105 |
|
-- |
| 106 |
|
|
| 107 |
|
kfreebsd-6 |
| 108 |
|
[freebsd Missing permission check on SIOCSIFINFO_IN6 ioctl] |
| 109 |
|
http://security.freebsd.org/advisories/FreeBSD-SA-09:10.ipv6.asc |
| 110 |
|
notified maintainer |
| 111 |
|
|
| 112 |
|
[freebsd Local information disclosure via direct pipe writes] (CVE-2009-1935) |
| 113 |
|
http://security.freebsd.org/advisories/FreeBSD-SA-09:09.pipe.asc |
| 114 |
|
notified maintainer |
| 115 |
|
|
| 116 |
|
-- |
| 117 |
|
|
| 118 |
|
kfreebsd-7 |
| 119 |
|
[freebsd Missing permission check on SIOCSIFINFO_IN6 ioctl] |
| 120 |
|
http://security.freebsd.org/advisories/FreeBSD-SA-09:10.ipv6.asc |
| 121 |
|
notified maintainer |
| 122 |
|
|
| 123 |
|
[freebsd Local information disclosure via direct pipe writes] (CVE-2009-1935) |
| 124 |
|
http://security.freebsd.org/advisories/FreeBSD-SA-09:09.pipe.asc |
| 125 |
|
notified maintainer |
| 126 |
|
|
| 127 |
|
-- |
| 128 |
|
|
| 129 |
kvm 82-1 (CVE-2008-5714) |
kvm 82-1 (CVE-2008-5714) |
| 130 |
#509997 |
#509997 |
| 131 |
notified maintainer |
notified maintainer |
| 132 |
|
|
| 133 |
-- |
-- |
| 134 |
|
|
| 135 |
|
lcms (CVE-2009-0793) |
| 136 |
|
notified maintainer through initial bugreport |
| 137 |
|
|
| 138 |
|
-- |
| 139 |
|
|
| 140 |
|
libpam-ssh (CVE-2009-1273) |
| 141 |
|
#535877 |
| 142 |
|
maintainer notified through initial bug report, said he would work on an update |
| 143 |
|
|
| 144 |
|
-- |
| 145 |
|
|
| 146 |
|
libpng (CVE-2009-2042) |
| 147 |
|
#533676 |
| 148 |
|
notified maintainer |
| 149 |
|
|
| 150 |
|
-- |
| 151 |
|
|
| 152 |
|
libsndfile |
| 153 |
|
potential dos via crafted input |
| 154 |
|
#530831 |
| 155 |
|
|
| 156 |
|
-- |
| 157 |
|
|
| 158 |
libvorbis (CVE-2008-2009) |
libvorbis (CVE-2008-2009) |
| 159 |
notified maintainer and release team |
notified maintainer and release team |
| 160 |
|
|
| 161 |
-- |
-- |
| 162 |
|
|
| 163 |
|
memcached (CVE-2009-1255) |
| 164 |
|
notified maintainer |
| 165 |
|
|
| 166 |
|
-- |
| 167 |
|
|
| 168 |
|
mimedecode |
| 169 |
|
potential dos/crash due to invalid input |
| 170 |
|
orphaned |
| 171 |
|
#530430 |
| 172 |
|
|
| 173 |
|
-- |
| 174 |
|
|
| 175 |
|
movabletype-opensource (CVE-2009-2492) |
| 176 |
|
#537935 |
| 177 |
|
notified maintainer |
| 178 |
|
|
| 179 |
|
-- |
| 180 |
|
|
| 181 |
mpg123 (CVE-2009-1301) |
mpg123 (CVE-2009-1301) |
| 182 |
notified maintainer |
notified maintainer |
| 183 |
|
|
| 184 |
-- |
-- |
| 185 |
|
|
| 186 |
|
neon27 (CVE-2009-2474) |
| 187 |
|
#542926 |
| 188 |
|
notified maintainer |
| 189 |
|
|
| 190 |
|
-- |
| 191 |
|
|
| 192 |
|
neon26 (CVE-2009-2474) |
| 193 |
|
#542926 |
| 194 |
|
notified maintainer |
| 195 |
|
|
| 196 |
|
-- |
| 197 |
|
|
| 198 |
|
ntop (CVE-2009-2732) |
| 199 |
|
#543312 |
| 200 |
|
notified maintainer through initial bugreport |
| 201 |
|
|
| 202 |
|
-- |
| 203 |
|
|
| 204 |
|
postfix (CVE-2009-2939) |
| 205 |
|
notified maintainer |
| 206 |
|
|
| 207 |
|
-- |
| 208 |
|
|
| 209 |
|
squid (CVE-2009-0801) |
| 210 |
|
#521053 |
| 211 |
|
|
| 212 |
|
-- |
| 213 |
|
|
| 214 |
|
squid3 (CVE-2009-0801) |
| 215 |
|
#521052 |
| 216 |
|
|
| 217 |
|
-- |
| 218 |
|
|
| 219 |
net-snmp (CVE-2008-6123) |
net-snmp (CVE-2008-6123) |
| 220 |
Noah will see to it. |
Noah will see to it. |
| 221 |
|
|
| 222 |
-- |
-- |
| 223 |
|
|
| 224 |
|
ocsinventory-server (CVE-2009-3040, CVE-2009-3042, CVE-2009-1443) |
| 225 |
|
#541995 |
| 226 |
|
notified maintainer |
| 227 |
|
|
| 228 |
|
-- |
| 229 |
|
|
| 230 |
|
open-iscsi (CVE-2009-1297) |
| 231 |
|
notified maintainer in initial bug report |
| 232 |
|
|
| 233 |
|
-- |
| 234 |
|
|
| 235 |
openldap |
openldap |
| 236 |
#253838 |
#253838 |
| 237 |
notified maintainer |
notified maintainer |
| 238 |
|
|
| 239 |
-- |
-- |
| 240 |
|
|
| 241 |
|
overkill (no CVE yet) |
| 242 |
|
#549310 |
| 243 |
|
|
| 244 |
|
-- |
| 245 |
|
|
| 246 |
|
owl (CVE-2009-0363) |
| 247 |
|
#515118 |
| 248 |
|
notified maintainer |
| 249 |
|
|
| 250 |
|
-- |
| 251 |
|
|
| 252 |
pam (CVE-2009-0579) |
pam (CVE-2009-0579) |
| 253 |
#514437 |
#514437 |
| 254 |
asked maintainer in mail |
asked maintainer in mail |
| 255 |
|
|
| 256 |
-- |
-- |
| 257 |
|
|
| 258 |
|
pidgin (CVE-2009-1889, CVE-2009-3083, CVE-2009-3084, CVE-2009-3085) |
| 259 |
|
#535790 |
| 260 |
|
http://developer.pidgin.im/ticket/9483 |
| 261 |
|
http://developer.pidgin.im/viewmtn/revision/info/9bac0a540156fb1848eedd61c8630737dee752c7 |
| 262 |
|
notified maintainer |
| 263 |
|
|
| 264 |
|
-- |
| 265 |
|
|
| 266 |
pptp-linux (no CVE) |
pptp-linux (no CVE) |
| 267 |
#523476 |
#523476 |
| 268 |
Ola will prepare a fix in a point update |
Ola will prepare a fix in a point update |
| 269 |
|
|
| 270 |
-- |
-- |
| 271 |
|
|
| 272 |
slim (CVE-2009-1756) |
puppet (CVE-2009-3564) |
| 273 |
bug #529306 |
#551073 |
| 274 |
Maintainer notified through followup in #529306 |
notified maintainer in initial bug report |
| 275 |
|
|
| 276 |
-- |
-- |
| 277 |
|
|
| 278 |
smarty (CVE-2009-1669) |
rails (CVE-2009-3086) |
| 279 |
#529810 |
bug #545063 |
|
http://groups.google.com/group/smarty-svn/browse_thread/thread/b2da2e5d1ef8b462 |
|
| 280 |
notified maintainer |
notified maintainer |
| 281 |
|
|
| 282 |
-- |
-- |
| 283 |
|
|
| 284 |
|
slim (CVE-2009-1756) |
| 285 |
|
bug #529306 |
| 286 |
|
Maintainer notified through followup in #529306 |
| 287 |
|
|
| 288 |
|
-- |
| 289 |
|
|
| 290 |
tau (CVE-2008-5157) |
tau (CVE-2008-5157) |
| 291 |
#506348 |
#506348 |
| 292 |
notified maintainer |
notified maintainer |
| 299 |
|
|
| 300 |
-- |
-- |
| 301 |
|
|
| 302 |
|
udev (#462655) |
| 303 |
|
notified maintainer |
| 304 |
|
|
| 305 |
|
-- |
| 306 |
|
|
| 307 |
|
planet (CVE-2009-2937) |
| 308 |
|
bug #546178 |
| 309 |
|
notified maintainer through initial bugreport |
| 310 |
|
|
| 311 |
|
-- |
| 312 |
|
|
| 313 |
|
webkit (CVE-2008-4724) |
| 314 |
|
#520052 |
| 315 |
|
asked maintainer |
| 316 |
|
|
| 317 |
|
-- |
| 318 |
|
|
| 319 |
xemacs21 (CVE-2008-2142) |
xemacs21 (CVE-2008-2142) |
| 320 |
bug #480877 |
bug #480877 |
| 321 |
notified maintainer |
notified maintainer |
| 322 |
|
|
| 323 |
|
xemacs21 (CVE-2009-2688) |
| 324 |
|
#540470 |
| 325 |
|
Patches at https://bugzilla.redhat.com/show_bug.cgi?id=511994 |
| 326 |
|
notified maintainer |
| 327 |
|
|
| 328 |
-- |
-- |
| 329 |
|
|
| 330 |
xen-3 (CVE-2008-4993) |
xen-3 (CVE-2008-4993) |
| 333 |
|
|
| 334 |
-- |
-- |
| 335 |
|
|
| 336 |
|
xerces-c2 (CVE-2009-1885) |
| 337 |
|
#541986 |
| 338 |
|
notified maintainer |
| 339 |
|
|
| 340 |
|
|
| 341 |
|
-- |
| 342 |
|
|
| 343 |
xfig |
xfig |
| 344 |
25_mkstemp added in :3.2.5.a-1 |
25_mkstemp added in 1:3.2.5.a-1 |
| 345 |
|
notified maintainer |
| 346 |
|
|
| 347 |
|
-- |
| 348 |
|
|
| 349 |
|
xmp (CVE-2007-6731, CVE-2007-6732) |
| 350 |
|
#546730 |
| 351 |
|
|
| 352 |
-- |
-- |
| 353 |
|
|