fedora-security/audit fc4,1.137,1.138 fc5,1.47,1.48

[Mark Cox (mjc)]

Author: mjc

Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv26242

Modified Files:
	fc4 fc5 
Log Message:
Updates from the last week



Index: fc4
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc4,v
retrieving revision 1.137
retrieving revision 1.138
diff -u -r1.137 -r1.138
--- fc4	24 Jan 2006 09:30:55 -0000	1.137
+++ fc4	31 Jan 2006 08:16:08 -0000	1.138
@@ -1,10 +1,13 @@
-Up to date CVE as of CVE email 20060122
+Up to date CVE as of CVE email 20060130
 Up to date FC4 as of 20060122
 
 ** are items that need attention
 
 CVE-2006-0369 ignore (mysql) this is not a security issue
 CVE-2006-0321 version (fetchmail, fixed 6.3.2) 6.3.X only affected
+CVE-2006-0301 VULNERABLE (xpdf) bz#179047
+CVE-2006-0301 VULNERABLE (poppler) bz#179054
+CVE-2006-0301 VULNERABLE (kdegraphics) bz#179056
 CVE-2006-0254 VULNERABLE (tomcat5, fixed 5.5.16) bz#178178
 CVE-2006-0236 ignore (thunderbird) windows only flaw
 CVE-2006-0225 backport (openssh) [since FEDORA-2006-056]
@@ -1308,6 +1311,8 @@
 CVE-2002-1783 version (php, fixed after 4.2.3)
 CVE-2002-1765 version (evolution, fixed 1.0.5)
 CVE-2002-1593 version (httpd, fixed 2.0.42)
+CVE-2002-1573 version (kernel, not 2.6)
+CVE-2002-1572 version (kernel, not 2.6)
 CVE-2002-1571 version (kernel, not 2.6)
 CVE-2002-1510 version (XFree86, fixed 4.2.0)
 CVE-2002-1472 version (XFree86, fixed 4.2.1)


Index: fc5
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc5,v
retrieving revision 1.47
retrieving revision 1.48
diff -u -r1.47 -r1.48
--- fc5	24 Jan 2006 09:30:55 -0000	1.47
+++ fc5	31 Jan 2006 08:16:08 -0000	1.48
@@ -1,4 +1,4 @@
-Up to date CVE as of CVE email 20060122
+Up to date CVE as of CVE email 20060130
 Up to date FC5 as of FC5-Test2-RC
 
 1. Removed packages with security issues that are no longer in FC5 
@@ -17,6 +17,9 @@
 
 CVE-2006-0369 ignore (mysql) this is not a security issue
 CVE-2006-0321 VULNERABLE (fetchmail, fixed 6.3.2) bz#178724
+CVE-2006-0301 VULNERABLE (xpdf)
+CVE-2006-0301 VULNERABLE (poppler)
+CVE-2006-0301 VULNERABLE (kdegraphics)
 CVE-2006-0254 VULNERABLE (tomcat5, fixed 5.5.16) bz#178179
 CVE-2006-0236 ignore (thunderbird) windows only flaw
 CVE-2006-0225 VULNERABLE (openssh)
@@ -1361,6 +1364,8 @@
 CVE-2002-1783 version (php, fixed after 4.2.3)
 CVE-2002-1765 version (evolution, fixed 1.0.5)
 CVE-2002-1593 version (httpd, fixed 2.0.42)
+CVE-2002-1573 version (kernel, not 2.6)
+CVE-2002-1572 version (kernel, not 2.6)
 CVE-2002-1571 version (kernel, not 2.6)
 CVE-2002-1510 version (XFree86, fixed 4.2.0)
 CVE-2002-1472 version (XFree86, fixed 4.2.1)