fedora-security/audit fc5,1.316,1.317 fc6,1.70,1.71

[Mark Cox (mjc)]

Author: mjc

Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv10191

Modified Files:
	fc5 fc6 
Log Message:
Catchup with fc6 and fc5



Index: fc5
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc5,v
retrieving revision 1.316
retrieving revision 1.317
diff -u -r1.316 -r1.317
--- fc5	8 Sep 2006 19:38:48 -0000	1.316
+++ fc5	11 Sep 2006 11:45:20 -0000	1.317
@@ -1,8 +1,9 @@
-Up to date CVE as of CVE email 20060905
-Up to date FC5 as of 20060905
+Up to date CVE as of CVE email 20060910
+Up to date FC5 as of 20060910
 
 ** are items that need attention
 
+CVE-2006-4663 ignore (kernel) not a vulnerability
 CVE-2006-4624 VULNERABLE (mailman, fixed 2.1.9rc1) #205652
 CVE-2006-4600 VULNERABLE (openldap, fixed 2.3.25) #205827
 CVE-2006-4561 ** firefox
@@ -227,7 +228,7 @@
 CVE-2006-2199 backport (openoffice.org, fixed 2.0.3) [since FEDORA-2006-770]
 CVE-2006-2198 backport (openoffice.org, fixed 2.0.3) [since FEDORA-2006-770]
 CVE-2006-2194 ignore (ppp) pppd not suid
-CVE-2006-2193 VULNERABLE (libtiff) #194363
+CVE-2006-2193 backport (libtiff) #194363 [since FEDORA-2006-952]
 CVE-2006-2120 backport (libtiff) #189976 [since FEDORA-2006-473]
 CVE-2006-2083 version (rsync, fixed 2.6.8) #190208 [since FEDORA-2006-599]
 CVE-2006-2073 ignore (bind) http://www.kb.cert.org/vuls/id/MIMG-6P8GRP
@@ -418,7 +419,7 @@
 CVE-2006-0301 version (poppler, fixed 0.4.5)
 CVE-2006-0301 backport (xpdf) xpdf-3.01pl2.patch
 CVE-2006-0301 version (kdegraphics, fixed 3.5.2) [since FEDORA-2006-352] was backport since GA
-CVE-2006-0300 VULNERABLE (tar, fixed 1.15.90 at least) [fixed rawhide in tar-1.15.1-13]
+CVE-2006-0300 version (tar, fixed 1.15.90 at least) [since FEDORA-2006-958]
 CVE-2006-0299 version (thunderbird, fixed 1.5)
 CVE-2006-0299 version (mozilla, 1.8 branch only)
 CVE-2006-0299 version (firefox, fixed 1.5.0.1)


Index: fc6
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc6,v
retrieving revision 1.70
retrieving revision 1.71
diff -u -r1.70 -r1.71
--- fc6	11 Sep 2006 09:54:02 -0000	1.70
+++ fc6	11 Sep 2006 11:45:20 -0000	1.71
@@ -1,8 +1,9 @@
-Up to date CVE as of CVE email 20060906
+Up to date CVE as of CVE email 20060910
 Up to date FC6 as of Test3-re20060906.0
 
 ** are items that need attention
 
+CVE-2006-4663 ignore (kernel) not a vulnerability
 CVE-2006-4624 VULNERABLE (mailman, fixed 2.1.9rc1)
 CVE-2006-4600 version (openldap, fixed 2.3.25)
 CVE-2006-4561 ** firefox
@@ -77,7 +78,7 @@
 CVE-2006-3745 version (kernel, fixed 2.6.17.10, fixed 2.6.18-rc5)
 CVE-2006-3744 backport (ImageMagick)
 CVE-2006-3743 backport (ImageMagick)
-CVE-2006-3742 ** (kdebase) fc5#201507 **
+CVE-2006-3742 backport (kdebase) inside kdebase-3.5.4-2-redhat.patch
 CVE-2006-3731 ignore (firefox) just a user complicit crash
 CVE-2006-3694 version (ruby, fixed 1.8.5)
 CVE-2006-3677 version (firefox, fixed 1.5.0.5)