fedora-security/audit fc6,1.56,1.57

[Mark Cox (mjc)]

Author: mjc

Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv26683

Modified Files:
	fc6 
Log Message:
More fc6 audit work; <60 left



Index: fc6
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc6,v
retrieving revision 1.56
retrieving revision 1.57
diff -u -r1.56 -r1.57
--- fc6	4 Sep 2006 12:56:46 -0000	1.56
+++ fc6	4 Sep 2006 14:19:05 -0000	1.57
@@ -1627,7 +1627,7 @@
 CVE-2002-2196 version (samba, fixed 2.2.5)
 CVE-2002-2185 version (kernel, fixed 2.6.15)
 CVE-2002-2103 version (httpd, not 2.0)
-CVE-2002-2060 verson (links, fixed after 2.0pre4)
+CVE-2002-2060 version (links, fixed after 2.0pre4)
 CVE-2002-2043 ignore (cyrus-sasl) patch against cyrus-sasl
 CVE-2002-2012 ignore (httpd) not upstream version
 CVE-2002-2010 ** htdig
@@ -1650,7 +1650,6 @@
 CVE-2002-1648 version (squirrelmail, fixed 1.2.3)
 CVE-2002-1642 version (postgresql, fixed 7.2.3)
 CVE-2002-1602 ignore (screen) not setuid
-CVE-2002-1594 ** shadow-utils
 CVE-2002-1593 version (httpd, not 2.2)
 CVE-2002-1592 version (httpd, not 2.2)
 CVE-2002-1574 version (kernel, not 2.6)
@@ -1662,15 +1661,14 @@
 CVE-2002-1568 version (openssl097a, fixed 0.9.6f)
 CVE-2002-1567 version (tomcat, fixed 4.1.3)
 CVE-2002-1565 version (wget, not 1.9+)
-CVE-2002-1563 ** stunnel
+CVE-2002-1563 version (stunnel, fixed 4.04)
 CVE-2002-1511 version (vnc, fixed 3.3.3)
 CVE-2002-1510 version (XFree86, fixed 4.2.0)
-CVE-2002-1509 ** shadow-utils
+CVE-2002-1509 version (patch to shadow-utils)
 CVE-2002-1508 version (openldap, not 2.3.24+)
 CVE-2002-1472 version (XFree86, fixed 4.2.1)
-CVE-2002-1471 ** evolution
+CVE-2002-1471 version (evolution, fixed 1.1.1 at least)
 CVE-2002-1405 version (lynx, fixed 2.8.5dev9)
-CVE-2002-1403 ** dhcpcd
 CVE-2002-1402 version (postgresql, fixed 7.2.2)
 CVE-2002-1401 ** postgresql (note wasn't fixed in 7.2.3)
 CVE-2002-1400 version (postgresql, fixed 7.2.2)
@@ -1682,13 +1680,13 @@
 CVE-2002-1393 version (kde, fixed 3.0.5a)
 CVE-2002-1392 version (mgetty, fixed 1.1.29)
 CVE-2002-1391 version (mgetty, fixed 1.1.29)
-CVE-2002-1384 ** xpdf
+CVE-2002-1384 version (xpdf, fixed 2.02)
 CVE-2002-1384 version (cups, fixed 1.1.18)
 CVE-2002-1383 version (cups, fixed 1.1.18)
 CVE-2002-1380 ** kernel
 CVE-2002-1379 version (openldap, not 2.3.24+)
 CVE-2002-1378 version (openldap, not 2.3.24+)
-CVE-2002-1377 ** vim
+CVE-2002-1377 version (vim, fixed patch 6.1.265)
 CVE-2002-1376 version (mysql, fixed 4.0.6)
 CVE-2002-1375 version (mysql, fixed 4.0.6)
 CVE-2002-1374 version (mysql, fixed 4.0.6)
@@ -1709,7 +1707,7 @@
 CVE-2002-1344 version (wget, fixed 1.8.2)
 CVE-2002-1341 version (squirrelmail, fixed after 1.2.10)
 CVE-2002-1337 version (sendmail, fixed 8.12.8)
-CVE-2002-1335 ** w3m
+CVE-2002-1335 version (w3m, fixed 0.3.2.1)
 CVE-2002-1323 version (perl, fixed 5.8.0.1 at least)
 CVE-2002-1319 ** kernel
 CVE-2002-1318 version (samba, fixed 2.2.7)
@@ -1731,12 +1729,12 @@
 CVE-2002-1217 version (tar, fixed 1.13.25)
 CVE-2002-1175 version (fetchmail, fixed 6.2.0)
 CVE-2002-1174 version (fetchmail, fixed 6.2.0)
-CVE-2002-1170 ** net-snmp
-CVE-2002-1165 ** sendmail
+CVE-2002-1170 version (net-snmp, fixed 5.0.6)
+CVE-2002-1165 version (sendmail, fixed 8.12.10 at least)
 CVE-2002-1160 version (pam) was our config
 CVE-2002-1157 version (httpd, not 2.0)
 CVE-2002-1156 version (httpd, fixed 2.0.43)
-CVE-2002-1154 ** kon2
+CVE-2002-1155 backport (kon2) kon2-0.3.9b-bufover-fix.patch
 CVE-2002-1152 version (kdenetwork, fixed 3.0.3)
 CVE-2002-1151 version (kdenetwork, fixed 3.0.3a)
 CVE-2002-1148 ** tomcat