fedora-security/audit fc4,1.51,1.52

[Mark Cox (mjc)]

Author: mjc

Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv2917

Modified Files:
	fc4 
Log Message:
Update from morning email; also catch up with xpdf



Index: fc4
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc4,v
retrieving revision 1.51
retrieving revision 1.52
diff -u -r1.51 -r1.52
--- fc4	25 Aug 2005 08:22:32 -0000	1.51
+++ fc4	26 Aug 2005 08:40:22 -0000	1.52
@@ -1,8 +1,9 @@
-Up to date CVE as of CVE email 20050824
-Up to date FC4 as of 20050824 except xpdf
+Up to date CVE as of CVE email 20050825
+Up to date FC4 as of 20050825
 
 ** are items that need attention
 
+2005-2693 backport (cvs) [since FEDORA-2005-790]
 2005-2672 VULNERABLE (lm_sensors) bz#166673
 2005-2666 ** openssh (hmm)
 2005-2558 ignore (mysql) not an issue
@@ -25,7 +26,7 @@
 2005-2547 version (bluez-pin, fixed 2.19) not before 2.16
 2005-2541 ignore (tar) is documented behaviour
 2005-2500 version (kernel, flaw introduced after 2.6.12)
-2005-2498 VULNERABLE (php xmlrpc) bz#165847
+2005-2498 version (php xml_rpc, fixed 1.4.0) [since FEDORA-2005-810]
 2005-2475 VULNERABLE (unzip) bz#164928
 2005-2471 backport (netpbm) [since FEDORA-2005-728]
 2005-2459 VULNERABLE (kernel, fixed 20050805)
@@ -85,7 +86,7 @@
 2005-2099 VULNERABLE (kernel, fixed 20050804) bz#164989
 2005-2098 VULNERABLE (kernel, fixed 20050804) bz#164988
 2005-2097 backport (cups) [since FEDORA-2005-732]
-2005-2097 backport (xpdf) [since FEDORA-2005-729]
+2005-2097 version (xpdf, fixed 3.0.1) [since FEDORA-2005-755] was backport since FEDORA-2005-729
 2005-2096 backport (zlib) [since FEDORA-2005-523]
 2005-2096 backport (rpm) [since FEDORA-2005-565]
 2005-2095 version (squirrelmail, fixed 1.4.5) since [FEDORA-2005-780]
@@ -384,7 +385,7 @@
 2005-0064 version (tetex, fixed 3.0)
 2005-0064 version (kpdf, not 3.4)
 2005-0064 backport (cups) patch in SRPM
-2005-0064 backport (xpdf) xpdf-3.00-CAN-2005-0064.patch
+2005-0064 version (xpdf, fixed 3.0.1) [since FEDORA-2005-775] was backport since release
 2005-0039 ignore (not a vulnerability) don't do this says the rfc
 2005-0034 version (bind, fixed after 9.3.0)
 2005-0033 version (bind, not 9)
@@ -495,7 +496,7 @@
 2004-1137 version (kernel, fixed 2.6.10)
 2004-1125 version (kdegraphics, not 3.4)
 2004-1125 version (tetex, at least 3.0)
-2004-1125 backport (xpdf) xpdf-3.00-can-2004-1125.patch
+2004-1125 version (xpdf, fixed 3.0.1) [since FEDORA-2005-775] was backport since ga
 2004-1096 version (perl-Archive-Zip, fixed 1.14)
 2004-1093 version (mc, fixed 4.6.0)
 2004-1092 version (mc, fixed 4.6.0)
@@ -575,11 +576,11 @@
 2004-0903 version (mozilla #133016, fixed 1.7.3)
 2004-0902 version (mozilla #133023, fixed 1.7.3)
 2004-0891 version (gaim, fixed 1.0.2)
-2004-0889 backport (xpdf) xpdf-3.00-can-2004-1125.patch
+2004-0889 version (xpdf, fixed 3.0.1) [since FEDORA-2005-775] was backport since ga
 2004-0888 version (kpdegraphics, not 3.4)
 2004-0888 version (tetex, fixed 3.0)
 2004-0888 backport (cups) patch in SRPM
-2004-0888 backport (xpdf) xpdf-3.00-can-2004-1125.patch
+2004-0888 version (xpdf, fixed 3.0.1) [since FEDORA-2005-775] was backport since ga
 2004-0887 version (kernel, fixed 2.6.10)
 2004-0886 version (kdegraphics, fixed by Update on 20041109)
 2004-0886 version (libtiff, fixed 3.7.1 at least)