fedora-security/audit fc4,1.169,1.170 fc5,1.76,1.77

[Mark Cox (mjc)]

Author: mjc

Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv23555

Modified Files:
	fc4 fc5 
Log Message:
Latest updates



Index: fc4
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc4,v
retrieving revision 1.169
retrieving revision 1.170
diff -u -r1.169 -r1.170
--- fc4	8 Mar 2006 15:24:33 -0000	1.169
+++ fc4	9 Mar 2006 10:57:35 -0000	1.170
@@ -1,8 +1,10 @@
-Up to date CVE as of CVE email 20060306
-Up to date FC4 as of 20060306
+Up to date CVE as of CVE email 20060308
+Up to date FC4 as of 20060308
 
 ** are items that need attention
 
+CVE-2006-1079 ignore (httpd) not a vulnerability
+CVE-2006-1078 ignore (httpd) not a vulnerability
 CVE-2006-1045 VULNERABLE (thunderbird)
 CVE-2006-1015 ignore (php) safe mode isn't safe
 CVE-2006-1014 ignore (php) safe mode isn't safe
@@ -10,6 +12,7 @@
 CVE-2006-0903 VULNERABLE (mysql) bz#183261
 CVE-2006-0884 ** thunderbird
 CVE-2006-0836 version (thunderbird, 1.5 only)
+CVE-2006-0746 VULNERABLE (kpdf) bz#184308
 CVE-2006-0741 backport (kernel) [since FEDORA-2006-131] patch-2.6.15.5
 CVE-2006-0730 version (dovecot, 1.0beta[12] only)
 CVE-2006-0678 version (postgresql, 8.1 only)
@@ -128,6 +131,7 @@
 CVE-2005-3651 version (ethereal, fixed 0.10.14) [since FEDORA-2006-006]
 CVE-2005-3632 version (netpbm)
 CVE-2005-3631 version (udev)
+CVE-2005-3629 ** initscripts
 CVE-2005-3628 backport (xpdf) [since FEDORA-2005-1169]
 CVE-2005-3628 backport (tetex) [since FEDORA-2005-1126]
 CVE-2005-3628 version (poppler, fixed 0.4.4) [since FEDORA-2005-026] was backport since FEDORA-2005-1171


Index: fc5
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc5,v
retrieving revision 1.76
retrieving revision 1.77
diff -u -r1.76 -r1.77
--- fc5	8 Mar 2006 15:24:33 -0000	1.76
+++ fc5	9 Mar 2006 10:57:36 -0000	1.77
@@ -1,4 +1,4 @@
-Up to date CVE as of CVE email 20060306
+Up to date CVE as of CVE email 20060308
 Up to date FC5 as of FC5-Test3
 
 1. Removed packages with security issues that are no longer in FC5 
@@ -17,6 +17,8 @@
 
 ** are items that need attention
 
+CVE-2006-1079 ignore (httpd) not a vulnerability
+CVE-2006-1078 ignore (httpd) not a vulnerability
 CVE-2006-1045 VULNERABLE (thunderbird)
 CVE-2006-1015 ignore (php) safe mode isn't safe
 CVE-2006-1014 ignore (php) safe mode isn't safe
@@ -24,6 +26,7 @@
 CVE-2006-0903 VULNERABLE (mysql)
 CVE-2006-0884 ** thunderbird
 CVE-2006-0836 VULNERABLE (thunderbird)
+CVE-2006-0746 VULNERABLE (kpdf)
 CVE-2006-0730 version (dovecot, 1.0beta[12] only)
 CVE-2006-0678 ignore (postgresql) we don't build --enable-cassert
 CVE-2006-0645 version (gnutls, fixed 1.2.10)
@@ -138,6 +141,7 @@
 CVE-2005-3651 version (ethereal, fixed 0.10.14)
 CVE-2005-3632 version (netpbm)
 CVE-2005-3631 version (udev)
+CVE-2005-3629 ** initscripts
 CVE-2005-3628 backport (xpdf) xpdf-3.01pl2.patch
 CVE-2005-3628 backport (tetex) tetex-3.0-CVE-2005-3193.patch
 CVE-2005-3628 version (poppler, fixed 0.4.4)