fedora-security/audit fc4,1.86,1.87

[Mark Cox (mjc)]

Author: mjc

Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv28399

Modified Files:
	fc4 
Log Message:
Some other fc4 updates



Index: fc4
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc4,v
retrieving revision 1.86
retrieving revision 1.87
diff -u -r1.86 -r1.87
--- fc4	16 Nov 2005 12:46:35 -0000	1.86
+++ fc4	16 Nov 2005 16:29:07 -0000	1.87
@@ -1,5 +1,5 @@
-Up to date CVE as of CVE email 20051109
-Up to date FC4 as of 200501109
+Up to date CVE as of CVE email 20051115
+Up to date FC4 as of 200501115
 
 ** are items that need attention
 
@@ -34,6 +34,8 @@
 CVE-2005-3243 version (ethereal, fixed 0.10.13) [since FEDORA-2005-1011]
 CVE-2005-3242 version (ethereal, fixed 0.10.13) [since FEDORA-2005-1011]
 CVE-2005-3241 version (ethereal, fixed 0.10.13) [since FEDORA-2005-1011]
+CVE-2005-3186 backport (gdk-pixbuf) [since FEDORA-2005-1085]
+CVE-2005-3186 backport (gtk2) [since FEDORA-2005-1088]
 CVE-2005-3185 blocked (curl) by FORTIFY_SOURCE
 CVE-2005-3185 blocked (wget) by FORTIFY_SOURCE
 CVE-2005-3184 version (ethereal, fixed 0.10.13) [since FEDORA-2005-1011]
@@ -60,6 +62,8 @@
 CVE-2005-2991 ignore (ncompress) don't ship zdiff or zcmp scripts
 CVE-2005-2978 version (netpbm, fixed 10.25)
 CVE-2005-2977 backport (pam) [since FEDORA-2005-1031]
+CVE-2005-2976 backport (gdk-pixbuf) [since FEDORA-2005-1085]
+CVE-2005-2976 backport (gtk2) [since FEDORA-2005-1088]
 CVE-2005-2974 version (libungif, fixed 4.1.3) [since FEDORA-2005-1046]
 CVE-2005-2973 version (kernel, 2.6.14 at least) [since FEODRA-2005-1067]
 CVE-2005-2970 VULNERABLE (httpd) bz#171759
@@ -71,6 +75,7 @@
 CVE-2005-2959 ignore (sudo) not a vulnerability
 CVE-2005-2946 VULNERABLE (openssl, fixed 0.9.8) (as it uses md5 md)
 CVE-2005-2933 VULNERABLE (uw-imap) bz#171345
+CVE-2005-2929 backport (lynx) [since FEDORA-2005-1079]
 CVE-2005-2917 version (squid, fixed 2.5.STABLE11) [since FEDORA-2005-913]
 CVE-2005-2876 backport (util-linux) [since FEDORA-2005-887]
 CVE-2005-2874 version (cups, fixed 1.1.23)