fedora-security/audit fc6,1.35,1.36

[Mark Cox (mjc)]

Author: mjc

Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv23192

Modified Files:
	fc6 
Log Message:
Check fc6 vulns against rawhide
Add some missing bz#
only 19 issues left not fixed in rawhide



Index: fc6
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc6,v
retrieving revision 1.35
retrieving revision 1.36
diff -u -r1.35 -r1.36
--- fc6	25 Aug 2006 08:19:56 -0000	1.35
+++ fc6	25 Aug 2006 10:23:12 -0000	1.36
@@ -3,12 +3,12 @@
 
 ** are items that need attention
 
-CVE-2006-4333 VULNERABLE (wireshark, fixed 0.99.3)
-CVE-2006-4332 VULNERABLE (wireshark, fixed 0.99.3)
-CVE-2006-4331 VULNERABLE (wireshark, fixed 0.99.3)
-CVE-2006-4330 VULNERABLE (wireshark, fixed 0.99.3)
+CVE-2006-4333 VULNERABLE (wireshark, fixed 0.99.3) bz#204046 [fixed rawhide]
+CVE-2006-4332 VULNERABLE (wireshark, fixed 0.99.3) bz#204046 [fixed rawhide]
+CVE-2006-4331 VULNERABLE (wireshark, fixed 0.99.3) bz#204046 [fixed rawhide]
+CVE-2006-4330 VULNERABLE (wireshark, fixed 0.99.3) bz#204046 [fixed rawhide]
 CVE-2006-4310 VULNERABLE (firefox)
-CVE-2006-4262 VULNERABLE (cscope) #203651
+CVE-2006-4262 VULNERABLE (cscope) bz#203651 [fixed rawhide]
 CVE-2006-4261 VULNERABLE (firefox)
 CVE-2006-4253 VULNERABLE (firefox)
 CVE-2006-4226 VULNERABLE (mysql, fixed 5.0.25,5.1.12) bz#203428
@@ -16,7 +16,7 @@
 CVE-2006-4808 ignore (binutils, gas fixed 20050714) this is a bug
 CVE-2006-4807 ignore (binutils, gas fixed 20050721) this is a bug
 CVE-2006-4145 VULNERABLE (kernel, fixed 2.6.17.10)
-CVE-2006-4144 VULNERABLE (ImageMagick, fixed 6.2.9) bz#202775
+CVE-2006-4144 VULNERABLE (ImageMagick, fixed 6.2.9) bz#202775 [fixed rawhide]
 CVE-2006-4093 VULERNABLE (kernel, fixed 2.6.17.9)
 CVE-2006-4031 VULNERABLE (mysql, fixed 5.0.24) bz#202675
 CVE-2006-4020 VULNERABLE (php) bz#202676
@@ -52,8 +52,8 @@
 CVE-2006-3747 VULNERABLE (httpd, fixed 2.2.3) bz#202679 [fixed rawhide]
 CVE-2006-3746 version (gnupg, fixed 1.4.5)
 CVE-2006-3745 VULNERABLE (kernel, fixed 2.6.17.10)
-CVE-2006-3744 VULNERABLE (ImageMagick) fc5#202193
-CVE-2006-3743 VULNERABLE (ImageMagick) fc5#202193
+CVE-2006-3744 VULNERABLE (ImageMagick) fc5#202193 [fixed rawhide]
+CVE-2006-3743 VULNERABLE (ImageMagick) fc5#202193 [fixed rawhide]
 CVE-2006-3731 ignore (firefox) just a user complicit crash
 CVE-2006-3694 backport (ruby, fixed 1.8.5)
 CVE-2006-3677 version (firefox, fixed 1.5.0.5)
@@ -73,7 +73,7 @@
 CVE-2006-3469 version (mysql)
 CVE-2006-3468 VULNERABLE (kernel, fixed 2.6.17.8) not fixed upstream
 CVE-2006-3467 version (freetype, fixed 2.2)
-CVE-2006-3467 VULNERABLE (vnc)
+CVE-2006-3467 VULNERABLE (vnc) bz#204052
 CVE-2006-3467 VULNERABLE (libXfont) bz#202683 [fixed backport rawhide]
 CVE-2006-3465 backport (libtiff) libtiff-3.8.2-ormandy.patch
 CVE-2006-3464 backport (libtiff) libtiff-3.8.2-ormandy.patch
@@ -255,9 +255,9 @@
 CVE-2006-1624 ignore (sysklogd) Silly configuration is not a security issue
 CVE-2006-1608 ignore (php) safe mode isn't safe
 CVE-2006-1549 ignore (php) this is not a security issue
-CVE-2006-1548 VULNERABLE (struts, fixed 1.2.9) bz#202692
-CVE-2006-1547 VULNERABLE (struts, fixed 1.2.9) bz#202692
-CVE-2006-1546 VULNERABLE (struts, fixed 1.2.9) bz#202692
+CVE-2006-1548 VULNERABLE (struts, fixed 1.2.9) bz#202692 [fixed rawhide]
+CVE-2006-1547 VULNERABLE (struts, fixed 1.2.9) bz#202692 [fixed rawhide]
+CVE-2006-1546 VULNERABLE (struts, fixed 1.2.9) bz#202692 [fixed rawhide]
 CVE-2006-1542 backport (python) python-2.4.1-canonicalize.patch
 CVE-2006-1531 version (thunderbird, fixed 1.5.0.2)
 CVE-2006-1531 version (firefox, fixed 1.5.0.2)
@@ -330,7 +330,7 @@
 CVE-2006-0554 version (kernel, fixed 2.6.16)
 CVE-2006-0553 version (postgresql, only 8.1, fixed 8.1.3)
 CVE-2006-0528 version (cairo, fixed 1.0.4)
-CVE-2006-0496 VULNgERABLE (firefox) https://bugzilla.mozilla.org/show_bug.cgi?id=324253
+CVE-2006-0496 VULNERABLE (firefox) https://bugzilla.mozilla.org/show_bug.cgi?id=324253
 CVE-2006-0482 ignore (kernel) sparc only
 CVE-2006-0481 version (libpng, 1.2.7 only)
 CVE-2006-0459 version (flex) by inspection