fedora-security/audit fc6,1.37,1.38

[Mark Cox (mjc)]

Author: mjc

Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv30058

Modified Files:
	fc6 
Log Message:
Go back a bit futher; not worth investigating the ** until we're back 
quite a way as it's quicker to deal with all the issues in the same
package at the same time



Index: fc6
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc6,v
retrieving revision 1.37
retrieving revision 1.38
diff -u -r1.37 -r1.38
--- fc6	25 Aug 2006 10:59:24 -0000	1.37
+++ fc6	25 Aug 2006 12:20:17 -0000	1.38
@@ -1625,17 +1625,83 @@
 CVE-2002-1809 ** mysql
 CVE-2002-1793 version (mod_ssl) not upstream, only hp
 CVE-2002-1783 version (php, fixed after 4.2.3)
-
-older, happened to deal with at same time:
-
 CVE-2002-1765 version (evolution, fixed 1.0.5)
+CVE-2002-1658 ignore (httpd) not a vulnerability
+CVE-2002-1657 ** postgresql
+CVE-2002-1650 version (squirrelmail, fixed 1.2.3)
+CVE-2002-1649 version (squirrelmail, fixed 1.2.3)
+CVE-2002-1648 version (squirrelmail, fixed 1.2.3)
+CVE-2002-1642 ** postgresql
+CVE-2002-1602 ** screen
+CVE-2002-1594 ** shadow-utils
 CVE-2002-1593 version (httpd, not 2.2)
+CVE-2002-1592 version (httpd, not 2.2)
+CVE-2002-1574 version (kernel, not 2.6)
 CVE-2002-1573 version (kernel, not 2.6)
 CVE-2002-1572 version (kernel, not 2.6)
 CVE-2002-1571 version (kernel, not 2.6)
+CVE-2002-1570 ** net-snmp
+CVE-2002-1568 version (openssl, fixed 0.9.6f)
+CVE-2002-1568 version (openssl097a, fixed 0.9.6f)
+CVE-2002-1567 ** tomcat
+CVE-2002-1565 ** wget
+CVE-2002-1511 version (vnc, fixed 3.3.3)
 CVE-2002-1510 version (XFree86, fixed 4.2.0)
+CVE-2002-1509 ** shadow-utils
+CVE-2002-1508 ** openldap
 CVE-2002-1472 version (XFree86, fixed 4.2.1)
+CVE-2002-1471 ** evolution
+CVE-2002-1405 ** lynx
+CVE-2002-1403 ** dhcpcd
+CVE-2002-1402 version (postgresql, fixed 7.2.2)
+CVE-2002-1401 ** postgresql
+CVE-2002-1400 version (postgresql, fixed 7.2.2)
+CVE-2002-1399 ** postgresql
+CVE-2002-1398 version (postgresql, fixed 7.2.2)
+CVE-2002-1397 ** postgresql
+CVE-2002-1396 version (php, fixed 4.3.0)
+CVE-2002-1394 ** tomcat
+CVE-2002-1393 ** kde
+CVE-2002-1392 version (mgetty, fixed 1.1.29)
+CVE-2002-1391 version (mgetty, fixed 1.1.29)
+CVE-2002-1384 ** xpdf
+CVE-2002-1384 version (cups, fixed 1.1.18)
+CVE-2002-1383 version (cups, fixed 1.1.18)
+CVE-2002-1380 ** kernel
+CVE-2002-1379 ** openldap
+CVE-2002-1378 ** openldap
+CVE-2002-1377 ** vim
+CVE-2002-1376 ** mysql
+CVE-2002-1375 version (mysql, fixed 4.0.6)
+CVE-2002-1374 version (mysql, fixed 4.0.6)
+CVE-2002-1373 version (mysql, fixed 3.23.54)
+CVE-2002-1372 version (cups, fixed 1.1.18)
+CVE-2002-1371 version (cups, fixed 1.1.18)
+CVE-2002-1369 version (cups, fixed 1.1.18)
+CVE-2002-1368 version (cups, fixed 1.1.18)
+CVE-2002-1367 version (cups, fixed 1.1.18)
+CVE-2002-1366 version (cups, fixed 1.1.18)
+CVE-2002-1364 ** fetchmail
 CVE-2002-1363 version (libpng, fixed 1.2.6)
+CVE-2002-1356 version (wireshark, fixed after 0.9.7)
+CVE-2002-1355 version (wireshark, fixed after 0.9.7)
+CVE-2002-1350 version (tcpdump, fixed 3.7)
+CVE-2002-1348 version (w3m, fixed 0.3.2.2)
+CVE-2002-1347 ** cyrus-sasl
+CVE-2002-1344 version (wget, fixed 1.8.2)
+CVE-2002-1341 version (squirrelmail, fixed after 1.2.10)
+CVE-2002-1337 version (sendmail, fixed 8.12.8)
+CVE-2002-1335 ** w3m
+CVE-2002-1323 ** perl
+CVE-2002-1319 ** kernel
+CVE-2002-1318 version (samba, fixed 2.2.7)
+CVE-2002-1306 version (kde, fixed 3.0.4)
+CVE-2002-1285 ignore (lprng) actually lpdfilter issue
+CVE-2002-1282 ** kde
+CVE-2002-1281 ** kde
+
+older, happened to deal with at same time:
+
 CVE-2002-0517 version (XFree86) didn't affect Linux
 CVE-2002-0164 version (XFree86, fixed 4.2.1)
 CVE-2001-1494 version (util-linux, fixed 2.11n)