fedora-security/audit fc6,1.44,1.45

[Mark Cox (mjc)]

Author: mjc

Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv5686

Modified Files:
	fc6 
Log Message:
More from changelogs and web surfing, 92 left



Index: fc6
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc6,v
retrieving revision 1.44
retrieving revision 1.45
diff -u -r1.44 -r1.45
--- fc6	29 Aug 2006 10:16:28 -0000	1.44
+++ fc6	29 Aug 2006 10:35:24 -0000	1.45
@@ -1655,7 +1655,7 @@
 CVE-2002-1508 ** openldap
 CVE-2002-1472 version (XFree86, fixed 4.2.1)
 CVE-2002-1471 ** evolution
-CVE-2002-1405 ** lynx
+CVE-2002-1405 version (lynx, fixed 2.8.5dev9)
 CVE-2002-1403 ** dhcpcd
 CVE-2002-1402 version (postgresql, fixed 7.2.2)
 CVE-2002-1401 ** postgresql
@@ -1675,7 +1675,7 @@
 CVE-2002-1379 ** openldap
 CVE-2002-1378 ** openldap
 CVE-2002-1377 ** vim
-CVE-2002-1376 ** mysql
+CVE-2002-1376 version (mysql, fixed 4.0.6)
 CVE-2002-1375 version (mysql, fixed 4.0.6)
 CVE-2002-1374 version (mysql, fixed 4.0.6)
 CVE-2002-1373 version (mysql, fixed 3.23.54)
@@ -1685,7 +1685,7 @@
 CVE-2002-1368 version (cups, fixed 1.1.18)
 CVE-2002-1367 version (cups, fixed 1.1.18)
 CVE-2002-1366 version (cups, fixed 1.1.18)
-CVE-2002-1365 ** fetchmail
+CVE-2002-1365 version (fetchmail, fixed 6.2.0)
 CVE-2002-1363 version (libpng, fixed 1.2.6)
 CVE-2002-1356 version (wireshark, fixed after 0.9.7)
 CVE-2002-1355 version (wireshark, fixed after 0.9.7)
@@ -1715,8 +1715,8 @@
 CVE-2002-1220 version (bind, not 9)
 CVE-2002-1219 version (bind, not 9)
 CVE-2002-1217 version (tar, fixed 1.13.25)
-CVE-2002-1175 ** fetchmail
-CVE-2002-1174 ** fetchmail
+CVE-2002-1175 version (fetchmail, fixed 6.2.0)
+CVE-2002-1174 version (fetchmail, fixed 6.2.0)
 CVE-2002-1170 ** net-snmp
 CVE-2002-1165 ** sendmail
 CVE-2002-1160 ** pam
@@ -1764,7 +1764,7 @@
 CVE-2002-0684 ** bind
 CVE-2002-0682 ** tomcat
 CVE-2002-0662 version (scrollkeeper, fixed after 0.3.11)
-CVE-2002-0660 ** libpng
+CVE-2002-0660 version (libpng, fixed 1.0.14)
 CVE-2002-0659 version (openssl, not 0.9.8)
 CVE-2002-0659 version (openssl097a, not 0.9.7)
 CVE-2002-0657 version (openssl, not 0.9.8)
@@ -1776,13 +1776,13 @@
 CVE-2002-0653 version (mod_ssl, not httpd 2.2)
 CVE-2002-0651 version (bind, not 9)
 CVE-2002-0651 ** resolvers
-CVE-2002-0640 ** openssh
-CVE-2002-0639 ** openssh
+CVE-2002-0640 version (openssh, fixed after 3.3)
+CVE-2002-0639 version (openssh, fixed after 3.3)
 CVE-2002-0638 ** util-linux
 CVE-2002-0575 version (openssh, fixed 3.2.1)
 CVE-2002-0570 ** kernel
 CVE-2002-0517 version (XFree86) didn't affect Linux
-CVE-2002-0516 ** squirrelmail
+CVE-2002-0516 version (squirrelmail, fixed 1.2.6)
 CVE-2002-0510 ignore (kernel) see cve
 CVE-2002-0506 ** newt
 CVE-2002-0499 ** kernel
@@ -1824,8 +1824,8 @@
 CVE-2002-0162 version (logwatch, fixed 2.5)
 CVE-2002-0157 ** nautilus
 CVE-2002-0146 version (fetchmail, fixed 5.9.10)
-CVE-2002-0130 ** efax
-CVE-2002-0129 ** efax
+CVE-2002-0130 ignore (efax) not setuid root
+CVE-2002-0129 ignore (efax) not setuid root
 CVE-2002-0121 version (php, fixed after 4.1.1)
 CVE-2002-0092 version (cve, fixed 1.10.8)
 CVE-2002-0083 version (openssh, fixed 3.1)