fedora-security/audit fc6,1.97,1.98

[Mark Cox (mjc)]

Author: mjc

Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv32510

Modified Files:
	fc6 
Log Message:
Bring up to date with rawhide and outstanding blockers



Index: fc6
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc6,v
retrieving revision 1.97
retrieving revision 1.98
diff -u -r1.97 -r1.98
--- fc6	29 Sep 2006 08:51:21 -0000	1.97
+++ fc6	29 Sep 2006 09:24:29 -0000	1.98
@@ -1,15 +1,15 @@
 Up to date CVE as of CVE email 20060928
 Up to date FC6 as of Test3
-Up to date dist-fc6 rawhide as of 20060925
+Up to date dist-fc6 rawhide as of 20060929
 
 ** are items that need attention
 
-CVE-2006-5052 VULNERABLE (openssh, fixed 4.4)
-CVE-2006-5051 VULNERABLE (openssh, fixed 4.4) #208459
-CVE-2006-4997 VULNERABLE (kernel, fixed 2.6.18)
-CVE-2006-4980 VULNERABLE (python)
-CVE-2006-4925 ** openssh
-CVE-2006-4924 VULNERABLE (openssh)
+CVE-2006-5052 VULNERABLE (openssh, fixed 4.4) bz#208459 [FC6Blocker]
+CVE-2006-5051 VULNERABLE (openssh, fixed 4.4) bz#208459 [FC6Blocker]
+CVE-2006-4997 VULNERABLE (kernel, fixed 2.6.18) [in rawhide]
+CVE-2006-4980 VULNERABLE (python) [backport in rawhide]
+CVE-2006-4925 ignore (openssh) client crash only
+CVE-2006-4924 VULNERABLE (openssh, fixed 4.4) bz#208459 [FC6Blocker]
 CVE-2006-4790 VULNERABLE (gnutls, fixed 1.4.4) [backported to 1.4.1-2 in rawhide]
 CVE-2006-4663 ignore (kernel) not a vulnerability
 CVE-2006-4625 ignore (php) safe mode isn't safe
@@ -28,7 +28,7 @@
 CVE-2006-4565 VULNERABLE (firefox, fixed 1.5.0.7) [in rawhide]
 CVE-2006-4565 VULNERABLE (thunderbird, fixed 1.5.0.7) [in rawhide]
 CVE-2006-4561 VULNERABLE (firefox)
-CVE-2006-4538 VULNERABLE (kernel, fixed after 2.6.18-rc6)
+CVE-2006-4538 VULNERABLE (kernel, fixed after 2.6.18-rc6) [in rawhide]
 CVE-2006-4535 version (kernel, fixed 2.6.18-rc6)
 CVE-2006-4507 ignore (libtiff) can't reproduce
 CVE-2006-4486 version (php, fixed 5.1.6)
@@ -43,7 +43,7 @@
 CVE-2006-4434 ignore (sendmail, fixed 8.13.8) not exploitable
 CVE-2006-4433 version (php, fixed 5.1.4)
 CVE-2006-4380 version (mysql, fixed 4.1.13)
-CVE-2006-4343 VULNERABLE (openssl, fixed 0.9.8d)
+CVE-2006-4343 VULNERABLE (openssl, fixed 0.9.8d) [rawhide]
 CVE-2006-4340 VULNERABLE (nss, fixed 3.11.3) bz#206608 [in rawhide]
 CVE-2006-4339 backport (openssl, fixed 0.9.8c)
 CVE-2006-4339 backport (openssl097)
@@ -111,7 +111,7 @@
 CVE-2006-3741 ignore (kernel, fixed 2.6.18-rc7) ia64 only
 CVE-2006-3740 VULNERABLE (libXfont, fixed 1.2.2) bz#206609 [in rawhide]
 CVE-2006-3739 VULNERABLE (libXfont, fixed 1.2.2) bz#206609 [in rawhide]
-CVE-2006-3738 VULNERABLE (openssl, fixed 0.9.8d)
+CVE-2006-3738 VULNERABLE (openssl, fixed 0.9.8d) [in rawhide]
 CVE-2006-3731 ignore (firefox) just a user complicit crash
 CVE-2006-3694 version (ruby, fixed 1.8.5)
 CVE-2006-3677 version (firefox, fixed 1.5.0.5)
@@ -167,8 +167,8 @@
 CVE-2006-3011 ignore (php) safe mode isn't safe
 CVE-2006-3005 ignore (libjpeg) not a vuln
 CVE-2006-2941 VULNERABLE (mailman, fixed 2.1.9) bz#206607 [in rawhide]
-CVE-2006-2940 VULNERABLE (openssl, fixed 0.9.8d)
-CVE-2006-2937 VULNERABLE (openssl, fixed 0.9.8d)
+CVE-2006-2940 VULNERABLE (openssl, fixed 0.9.8d) [in rawhide]
+CVE-2006-2937 VULNERABLE (openssl, fixed 0.9.8d) [in rawhide]
 CVE-2006-2936 version (kernel, fixed 2.6.17.7)
 CVE-2006-2935 version (kernel, fixed 2.6.17.7)
 CVE-2006-2934 version (kernel, fixed 2.6.17.3)