fedora-security/audit fc5,1.328,1.329 fc6,1.84,1.85

[Mark Cox (mjc)]

Author: mjc

Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv4835

Modified Files:
	fc5 fc6 
Log Message:
Updates from last couple of days



Index: fc5
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc5,v
retrieving revision 1.328
retrieving revision 1.329
diff -u -r1.328 -r1.329
--- fc5	18 Sep 2006 08:39:26 -0000	1.328
+++ fc5	20 Sep 2006 09:11:18 -0000	1.329
@@ -1,5 +1,5 @@
-Up to date CVE as of CVE email 20060917
-Up to date FC5 as of 20060917
+Up to date CVE as of CVE email 20060919
+Up to date FC5 as of 20060919
 
 ** are items that need attention
 
@@ -40,11 +40,16 @@
 CVE-2006-4455 ignore (xchat) client DoS
 CVE-2006-4447 ignore (xorg) not a security issue
 CVE-2006-4434 ignore (sendmail, fixed 8.13.8) not exploitable
-CVE-2006-4433 VULNERABLE (php, fixed 5.1.4)
 CVE-2006-4380 version (mysql, fixed 4.1.13)
 CVE-2006-4340 version (nss, fixed 3.11.3) [since FEDORA-2006-979]
 CVE-2006-4339 backport (openssl) [since FEDORA-2006-953]
 CVE-2006-4339 backport (openssl097a) [since FEDORA-2006-953]
+CVE-2006-4338 VULNERABLE (gzip)
+CVE-2006-4337 VULNERABLE (gzip)
+CVE-2006-4336 VULNERABLE (gzip)
+CVE-2006-4335 VULNERABLE (gzip)
+CVE-2006-4334 VULNERABLE (gzip)
+CVE-2006-4433 VULNERABLE (php, fixed 5.1.4)
 CVE-2006-4333 version (wireshark, fixed 0.99.3) [since FEDORA-2006-936]
 CVE-2006-4332 version (wireshark, fixed 0.99.3) [since FEDORA-2006-936]
 CVE-2006-4331 version (wireshark, fixed 0.99.3) [since FEDORA-2006-936]
@@ -253,6 +258,7 @@
 CVE-2006-2198 backport (openoffice.org, fixed 2.0.3) [since FEDORA-2006-770]
 CVE-2006-2194 ignore (ppp) pppd not suid
 CVE-2006-2193 backport (libtiff) #194363 [since FEDORA-2006-952]
+CVE-2006-2191 ignore (mailman) disputed
 CVE-2006-2120 backport (libtiff) #189976 [since FEDORA-2006-473]
 CVE-2006-2083 version (rsync, fixed 2.6.8) #190208 [since FEDORA-2006-599]
 CVE-2006-2073 ignore (bind) http://www.kb.cert.org/vuls/id/MIMG-6P8GRP


Index: fc6
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc6,v
retrieving revision 1.84
retrieving revision 1.85
diff -u -r1.84 -r1.85
--- fc6	18 Sep 2006 08:39:26 -0000	1.84
+++ fc6	20 Sep 2006 09:11:18 -0000	1.85
@@ -1,4 +1,4 @@
-Up to date CVE as of CVE email 20060917
+Up to date CVE as of CVE email 20060919
 Up to date FC6 as of Test3
 
 ** are items that need attention
@@ -39,6 +39,12 @@
 CVE-2006-4340 VULNERABLE (nss, fixed 3.11.3) bz#206608
 CVE-2006-4339 backport (openssl, fixed 0.9.8c)
 CVE-2006-4339 backport (openssl097)
+CVE-2006-4338 VULNERABLE (gzip)
+CVE-2006-4337 VULNERABLE (gzip)
+CVE-2006-4336 VULNERABLE (gzip)
+CVE-2006-4335 VULNERABLE (gzip)
+CVE-2006-4334 VULNERABLE (gzip)
+CVE-2006-4433 VULNERABLE (php, fixed 5.1.4)
 CVE-2006-4333 version (wireshark, fixed 0.99.3)
 CVE-2006-4332 version (wireshark, fixed 0.99.3)
 CVE-2006-4331 version (wireshark, fixed 0.99.3)
@@ -221,6 +227,7 @@
 CVE-2006-2198 version (openoffice.org, fixed 2.0.3)
 CVE-2006-2194 ignore (ppp) pppd not suid
 CVE-2006-2193 backport (libtiff) libtiff-3.8.2-CVE-2006-2193.patch
+CVE-2006-2191 ignore (mailman) disputed
 CVE-2006-2120 version (libtiff, fixed 3.8.2 at least)
 CVE-2006-2083 version (rsync, fixed 2.6.8)
 CVE-2006-2073 ignore (bind) http://www.kb.cert.org/vuls/id/MIMG-6P8GRP