fedora-security/audit fc6,1.62,1.63

[Mark Cox (mjc)]

Author: mjc

Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv8701

Modified Files:
	fc6 
Log Message:
Now only 20 CVE-2002 outstanding



Index: fc6
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc6,v
retrieving revision 1.62
retrieving revision 1.63
diff -u -r1.62 -r1.63
--- fc6	5 Sep 2006 09:09:54 -0000	1.62
+++ fc6	5 Sep 2006 10:32:44 -0000	1.63
@@ -1800,7 +1800,7 @@
 CVE-2002-0499 ** kernel
 CVE-2002-0497 backport (mtr) mtr-0.69-CVE-2002-0497.patch  
 CVE-2002-0493 version (tomcat, fixed 4.1.12)
-CVE-2002-0435 ** fileutils
+CVE-2002-0435 version (fileutils, fixed 4.1.7)
 CVE-2002-0429 ** kernel
 CVE-2002-0404 version (wireshark, fixed ethereal 0.9.3)
 CVE-2002-0403 version (wireshark, fixed ethereal 0.9.3)
@@ -1824,8 +1824,8 @@
 CVE-2002-0318 version (freeradius, fixed 0.7)
 CVE-2002-0253 ignore (php) not a vulnerability
 CVE-2002-0240 ignore (php) windows only
-CVE-2002-0232 ** mrtg
-CVE-2002-0229 ** php
+CVE-2002-0232 version (mrtg, not 2.11.1 at least)
+CVE-2002-0229 version (php)
 CVE-2002-0185 version (mod_python, fixed 2.7.7)
 CVE-2002-0184 version (sudo, fixed 1.6.6)
 CVE-2002-0180 version (webalizer, fixed 2.01-10)
@@ -1834,7 +1834,7 @@
 CVE-2002-0164 version (XFree86, fixed 4.2.1)
 CVE-2002-0163 version (squid, fixed 20020312)
 CVE-2002-0162 version (logwatch, fixed 2.5)
-CVE-2002-0157 ** nautilus
+CVE-2002-0157 version (nautilus)
 CVE-2002-0146 version (fetchmail, fixed 5.9.10)
 CVE-2002-0130 ignore (efax) not setuid root
 CVE-2002-0129 ignore (efax) not setuid root
@@ -1852,7 +1852,7 @@
 CVE-2002-0060 version (kernel, fixed 2.5.5)
 CVE-2002-0059 version (zlib, fixed 1.1.4)
 CVE-2002-0059 ** anything that includes zlib static, time for another audit!
-CVE-2002-0048 ** rsync
+CVE-2002-0048 version (rsync, fixed 2.5.2)
 CVE-2002-0046 version (kernel, fixed 2.4.0)
 CVE-2002-0045 version (openldap, fixed 2.0.20)
 CVE-2002-0044 version (enscript, fixed 1.6.4 at least)