fedora-security/audit fc4,1.68,1.69

[Mark Cox (mjc)]

Author: mjc

Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv14140

Modified Files:
	fc4 
Log Message:
Catchup on a few days of CVE updates (not many new issues) and FC4 releases



Index: fc4
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc4,v
retrieving revision 1.68
retrieving revision 1.69
diff -u -r1.68 -r1.69
--- fc4	4 Oct 2005 20:53:22 -0000	1.68
+++ fc4	7 Oct 2005 09:46:27 -0000	1.69
@@ -1,8 +1,9 @@
-Up to date CVE as of CVE email 20051003
-Up to date FC4 as of 200501003
+Up to date CVE as of CVE email 20051006
+Up to date FC4 as of 200501006
 
 ** are items that need attention
 
+2005-3164 version (tomcat, not 5)
 2005-3110 version (kernel, fixed 2.6.12) [since FEDORA-2005-510]
 2005-3109 version (kernel, fixed 2.6.12) [since FEDORA-2005-510]
 2005-3108 version (kernel, fixed 2.6.12) [since FEDORA-2005-510]
@@ -67,7 +68,7 @@
 2005-2602 ** VULNERABLE (firefox) probably
 2005-2602 ** VULNERABLE (thunderbird) probably
 2005-2558 ignore (mysql) not an issue
-2005-2558 VULNERABLE (mysql, fixed 4.1.13) probably
+2005-2558 version (mysql, fixed 4.1.13) [since FEDORA-2005-974]
 2005-2555 version (kernel, fixed 2.6.12.6pre) [since FEDORA-2005-949] was backport since FEDORA-2005-820
 2005-2553 version (kernel, not 2.6)
 2005-2550 backport (evolution) [since FEDORA-2005-743]
@@ -450,6 +451,7 @@
 2005-0039 ignore (not a vulnerability) don't do this says the rfc
 2005-0034 version (bind, fixed after 9.3.0)
 2005-0033 version (bind, not 9)
+2005-0023 ** libvte
 2005-0014 backport (ncpfs) ncpfs-2.2.4-overflow2.patch [since re0522.0]
 2005-0013 backport (ncpfs) in srpm
 2005-0011 version (kdeedu, not 3.4)