fedora-security/audit fc4,1.104,1.105 fc5,1.15,1.16

[Josh Bressers (bressers)]

Author: bressers

Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv1153

Modified Files:
	fc4 fc5 
Log Message:
Add outstanding CVE ids.



Index: fc4
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc4,v
retrieving revision 1.104
retrieving revision 1.105
diff -u -r1.104 -r1.105
--- fc4	12 Dec 2005 14:10:01 -0000	1.104
+++ fc4	13 Dec 2005 21:52:44 -0000	1.105
@@ -3,6 +3,8 @@
 
 ** are items that need attention
 
+CVE-2005-4158 ignore (sudo) only env_reset will properly clean the environment
+CVE-2005-4154 ignore (php) don't install untrusted pear packages
 CVE-2005-4077 backport (curl) [since FEDORA-2005-1129]
 CVE-2005-3651 VULNERABLE (ethereal)
 CVE-2005-3193 VULNERABLE (xpdf)


Index: fc5
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc5,v
retrieving revision 1.15
retrieving revision 1.16
diff -u -r1.15 -r1.16
--- fc5	12 Dec 2005 14:10:01 -0000	1.15
+++ fc5	13 Dec 2005 21:52:44 -0000	1.16
@@ -12,6 +12,8 @@
 
 ** are items that need attention
 
+CVE-2005-4158 ignore (sudo) only env_reset will properly clean the environment
+CVE-2005-4154 ignore (php) don't install untrusted pear packages
 CVE-2005-4077 VULNERABLE (curl)
 CVE-2005-3651 VULNERABLE (ethereal)
 CVE-2005-3193 VULNERABLE (xpdf)