fedora-security/audit fc4,1.36,1.37

[Mark Cox (mjc)]

Author: mjc

Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv25227

Modified Files:
	fc4 
Log Message:
Catch up on weekends issues; some investigation needed on a few of the
new names



Index: fc4
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc4,v
retrieving revision 1.36
retrieving revision 1.37
diff -u -r1.36 -r1.37
--- fc4	3 Aug 2005 08:25:16 -0000	1.36
+++ fc4	8 Aug 2005 07:49:58 -0000	1.37
@@ -1,8 +1,16 @@
-Up to date CVE as of CVE email 20050802
-Up to date FC4 as of 20050802
+Up to date CVE as of CVE email 20050807
+Up to date FC4 as of 20050807
 
 ** are items that need attention
 
+2005-2475 ** unzip
+2005-2471 ** netpbm
+2005-2456 ** kernel
+2005-2452 ** libtiff
+2005-2448 ** libgadu/ekg
+2005-2447 ** libgadu/ekg
+2005-2446 ** libgadu/ekg
+2005-2414 ** xpcom library
 2005-2410 backport (NetworkManager) [since FEDORA-2005-680]
 2005-2395 ** firefox
 2005-2370 version (kdenetwork, fixed 3.4.2) [since FEDORA-2005-670] was backport since FEDORA-2005-624
@@ -15,6 +23,7 @@
 2005-2363 version (ethereal, fixed 0.10.12) [since FEDORA-2005-655]
 2005-2362 version (ethereal, fixed 0.10.12) [since FEDORA-2005-655]
 2005-2361 version (ethereal, fixed 0.10.12) [since FEDORA-2005-655]
+2005-2353 ignore (thunderbird) debug mode only
 2005-2335 backport (fetchmail) [since FEDORA-2005-613]
 2005-2270 version (firefox, fixed 1.0.5) [since FEDORA-2005-605]
 2005-2270 version (mozilla, fixed 1.7.9) [since FEDORA-2005-619]
@@ -62,6 +71,7 @@
 2005-1831 ignore (sudo) unsubstantiated report
 2005-1769 VULNERABLE (squirrelmail, fixed 1.4.5)
 2005-1768 version (kernel, fixed 2.6.6)
+2005-1767 version (kernel, fixed 2.6.7)
 2005-1766 version (HelixPlayer, fixed 1.0.5) [since FEDORA-2005-483]
 2005-1765 version (kernel, fixed 2.6.12) [since FEDORA-2005-510]
 2005-1764 version (kernel, fixed 2.6.12) [since FEDORA-2005-510]
@@ -997,6 +1007,7 @@
 
 older, happened to deal with at same time:
 
+2002-2103 version (apache, not 2.0)
 2002-1963 version (kernel, not 2.6)
 2002-1976 ignore (ifconfig) "use ip"
 2002-1914 version (dump, fixed 0.4b29)