fedora-security/audit fc4,1.61,1.62

[Mark Cox (mjc)]

Author: mjc

Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv12718

Modified Files:
	fc4 
Log Message:
Deal with kernel issues fixed in fc4 released kernel



Index: fc4
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc4,v
retrieving revision 1.61
retrieving revision 1.62
diff -u -r1.61 -r1.62
--- fc4	22 Sep 2005 12:34:50 -0000	1.61
+++ fc4	23 Sep 2005 07:45:40 -0000	1.62
@@ -1,8 +1,9 @@
-Up to date CVE as of CVE email 20050921
-Up to date FC4 as of 20050921
+Up to date CVE as of CVE email 20050922
+Up to date FC4 as of 20050922
 
 ** are items that need attention
 
+2005-3044 VULNERABLE (kernel, fixed 2.6.13.2)
 2005-3011 ** texinfo
 2005-2991 ignore (ncompress) don't ship zdiff or zcmp scripts
 2005-2968 version (mozilla, not 1.7.10) +we include a different mozilla sh
@@ -17,7 +18,7 @@
 2005-2871 VULNERABLE (thunderbird) (moderate only)
 2005-2811 version (net-snmp, not upstream gentoo only)
 2005-2801 version (kernel, fixed 2.6.11)
-2005-2800 VULNERABLE (kernel)
+2005-2800 backport (kernel, fixed 2.6.12.6) [since FEDORA-2005-906]
 2005-2798 version (openssh, fixed 4.2) [since FEDORA-2005-860]
 2005-2797 version (openssh, fixed 4.2) [since FEDORA-2005-860]
 2005-2796 backport (squid, fixed after 2.5.STABLE10) [since FEDORA-2005-851]
@@ -51,8 +52,8 @@
 2005-2491 backport (pcre, fixed 6.2) [since FEDORA-2005-803]
 2005-2491 ignore (httpd, pcre uses system pcre)
 2005-2491 ignore (php, pcre uses system pcre)
-2005-2492 VULNERABLE (kernel, fixed 2.6.13.1)
-2005-2490 VULNERABLE (kernel, fixed 2.6.13.1) bz#166249
+2005-2492 backport (kernel, fixed 2.6.13.1) [since FEDORA-2005-906]
+2005-2490 backport (kernel, fixed 2.6.13.1) [since FEDORA-2005-906]
 2005-2475 VULNERABLE (unzip) bz#164928
 2005-2471 backport (netpbm) [since FEDORA-2005-728]
 2005-2459 ignore (kernel, fixed 2.6.12.5) dropped as code path not possible