Bug 233353 (CVE-2007-1547)

Summary:	nas < 1.8a svn 237 multiple vulnerabilities
Product:	[Fedora] Fedora	Reporter:	Ville Skyttä <ville.skytta>
Component:	nas	Assignee:	Frank Büttner <bugzilla>
Status:	CLOSED NEXTRELEASE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	6	CC:	fedora-security-list
Target Milestone:	---	Keywords:	Reopened, Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2007-03-22 09:11:44 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Ville Skyttä 2007-03-21 19:27:22 UTC

Several vulnerabilities reported against nas < 1.8a svn 237, seemingly affecting
all FC5+ versions:

http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-1543
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-1544
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-1545
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-1546
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-1547

Comment 1 Frank Büttner 2007-03-21 21:01:45 UTC

Fixed at devel but need some testing.

Comment 2 Ville Skyttä 2007-03-21 21:41:07 UTC

The version imported in CVS seems to be the upstream 1.8a release from last
November, but like the initial comment and bug summary says, these issues affect
svn revisions up to 237.  The current upstream trunk revision is 237, committed
3 days ago.

Comment 3 Frank Büttner 2007-03-22 09:11:44 UTC

Ok repacked with svn one.