fedora-security/audit fc4,1.144,1.145 fc5,1.53,1.54

Mark Cox (mjc) fedora-extras-commits at redhat.com
Fri Feb 3 19:54:09 UTC 2006


Author: mjc

Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv27936

Modified Files:
	fc4 fc5 
Log Message:
Deal with kde* fc4 update



Index: fc4
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc4,v
retrieving revision 1.144
retrieving revision 1.145
diff -u -r1.144 -r1.145
--- fc4	3 Feb 2006 08:45:28 -0000	1.144
+++ fc4	3 Feb 2006 19:54:01 -0000	1.145
@@ -52,11 +52,11 @@
 CVE-2006-0037 backport (kernel, only 2.6.14 and 2.6.15) [since FEDORA-2006-077] patch-2.6.15.2
 CVE-2006-0036 backport (kernel, only 2.6.14 and 2.6.15) [since FEDORA-2006-077] patch-2.6.15.2
 CVE-2006-0035 backport (kernel) [since FEDORA-2006-077] patch-2.6.15.2
-CVE-2006-0019 backport (kdelibs) [since FEDORA-2006-050]
+CVE-2006-0019 version (kdelibs, fixed 3.5.1) [since FEDORA-2006-090] was backport since FEDORA-2006-050
 CVE-2005-4703 ignore (tomcat) windows only
 CVE-2005-4685 VULNERABLE (mozilla)
 CVE-2005-4685 VULNERABLE (firefox)
-CVE-2005-4684 VULNERABLE (kdebase)
+CVE-2005-4684 VULNERABLE (kdebase) not fixed upstream
 CVE-2005-4667 VULNERABLE (unzip) bz#178961
 CVE-2005-4639 version (kernel, fixed 2.6.15) [since FEDORA-2006-077]
 CVE-2005-4636 version (openoffice.org, fixed 2.0.1)
@@ -105,26 +105,26 @@
 CVE-2005-3628 backport (xpdf) [since FEDORA-2005-1169]
 CVE-2005-3628 backport (tetex) [since FEDORA-2005-1126]
 CVE-2005-3628 version (poppler, fixed 0.4.4) [since FEDORA-2005-026] was backport since FEDORA-2005-1171
-CVE-2005-3628 backport (kdegraphics) [since FEDORA-2005-1160]
+CVE-2005-3628 version (kdegraphics, fixed 3.5.1) [since FEDORA-2006-088] was backport since FEDORA-2005-1160
 CVE-2005-3628 backport (cups) [since FEDORA-2005-1142]
 CVE-2005-3627 backport (xpdf) [since FEDORA-2005-027]
 CVE-2005-3627 backport (tetex) [since FEDORA-2006-028]
-CVE-2005-3627 backport (kdegraphics) [since FEDORA-2005-1160]
+CVE-2005-3627 version (kdegraphics, fixed 3.5.1) [since FEDORA-2006-088] was backport since FEDORA-2005-1160
 CVE-2005-3627 backport (cups) [since FEDORA-2006-010]
 CVE-2005-3627 version (poppler, fixed 0.4.4) [since FEDORA-2005-026]
 CVE-2005-3626 backport (xpdf) [since FEDORA-2005-027]
 CVE-2005-3626 backport (tetex) [since FEDORA-2006-028]
-CVE-2005-3626 backport (kdegraphics) [since FEDORA-2005-1160]
+CVE-2005-3626 version (kdegraphics, fixed 3.5.1) [since FEDORA-2006-088] was backport since FEDORA-2005-1160
 CVE-2005-3626 backport (cups) [since FEDORA-2006-010]
 CVE-2005-3626 version (poppler, fixed 0.4.4) [since FEDORA-2005-026]
 CVE-2005-3625 backport (xpdf) [since FEDORA-2005-027]
 CVE-2005-3625 backport (tetex) [since FEDORA-2006-028]
-CVE-2005-3625 backport (kdegraphics) [since FEDORA-2005-1160]
+CVE-2005-3625 version (kdegraphics, fixed 3.5.1) [since FEDORA-2006-088] was backport since FEDORA-2005-1160
 CVE-2005-3625 backport (cups) [since FEDORA-2006-010]
 CVE-2005-3625 version (poppler, fixed 0.4.4) [since FEDORA-2005-026]
 CVE-2005-3624 backport (xpdf) [since FEDORA-2005-027]
 CVE-2005-3624 backport (tetex) [since FEDORA-2006-028]
-CVE-2005-3624 backport (kdegraphics) [since FEDORA-2005-1160]
+CVE-2005-3624 version (kdegraphics, fixed 3.5.1) [since FEDORA-2006-088] was backport since FEDORA-2005-1160
 CVE-2005-3624 version (poppler, fixed 0.4.4) [since FEDORA-2005-026]
 CVE-2005-3624 backport (cups) [since FEDORA-2006-010]
 CVE-2005-3623 version (kernel, fixed 2.6.14.5) [since FEDORA-2006-077] was backport since FEDORA-2006-013
@@ -167,17 +167,17 @@
 CVE-2005-3193 backport (xpdf) [since FEDORA-2005-1169]
 CVE-2005-3193 backport (tetex) [since FEDORA-2005-1126]
 CVE-2005-3193 version (poppler, fixed 0.4.4) [since FEDORA-2005-026] was backport since FEDORA-2005-1171
-CVE-2005-3193 backport (kdegraphics) [since FEDORA-2005-1160]
+CVE-2005-3193 version (kdegraphics, fixed 3.5.1) [since FEDORA-2006-088] was backport since FEDORA-2005-1160
 CVE-2005-3193 backport (cups) [since FEDORA-2005-1142]
 CVE-2005-3192 backport (xpdf) [since FEDORA-2005-1169]
 CVE-2005-3192 backport (tetex) [since FEDORA-2005-1126]
 CVE-2005-3192 version (poppler, fixed 0.4.4) [since FEDORA-2005-026] was backport since FEDORA-2005-1171
-CVE-2005-3192 backport (kdegraphics) [since FEDORA-2005-1160]
+CVE-2005-3192 version (kdegraphics, fixed 3.5.1) [since FEDORA-2006-088] was backport since FEDORA-2005-1160
 CVE-2005-3192 backport (cups) [since FEDORA-2005-1142]
 CVE-2005-3191 backport (xpdf) [since FEDORA-2005-1169]
 CVE-2005-3191 backport (tetex) [since FEDORA-2005-1126]
 CVE-2005-3191 version (poppler, fixed 0.4.4) [since FEDORA-2005-026] was backport since FEDORA-2005-1171
-CVE-2005-3191 backport (kdegraphics) [since FEDORA-2005-1160]
+CVE-2005-3191 version (kdegraphics, fixed 3.5.1) [since FEDORA-2006-088] was backport since FEDORA-2005-1160
 CVE-2005-3191 backport (cups) [since FEDORA-2005-1142]
 CVE-2005-3186 backport (gtk2) [since FEDORA-2005-1088]
 CVE-2005-3186 backport (gdk-pixbuf) [since FEDORA-2005-1085]


Index: fc5
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc5,v
retrieving revision 1.53
retrieving revision 1.54
diff -u -r1.53 -r1.54
--- fc5	3 Feb 2006 08:45:28 -0000	1.53
+++ fc5	3 Feb 2006 19:54:01 -0000	1.54
@@ -65,11 +65,11 @@
 CVE-2006-0037 VULNERABLE (kernel, only 2.6.14 and 2.6.15) bz#177916
 CVE-2006-0036 VULNERABLE (kernel, only 2.6.14 and 2.6.15) bz#177916
 CVE-2006-0035 VULNERABLE (kernel, only 2.6.14 and 2.6.15) bz#177916
-CVE-2006-0019 VULNERABLE (kdelibs)
+CVE-2006-0019 VULNERABLE (kdelibs, fixed 3.5.1)
 CVE-2005-4703 ignore (tomcat) windows only
 CVE-2005-4685 VULNERABLE (mozilla)
 CVE-2005-4685 VULNERABLE (firefox)
-CVE-2005-4684 VULNERABLE (kdebase)
+CVE-2005-4684 VULNERABLE (kdebase) not fixed upstream
 CVE-2005-4667 VULNERABLE (unzip) bz#178961
 CVE-2005-4639 version (kernel, fixed 2.6.15)
 CVE-2005-4636 version (openoffice.org, fixed 2.0.1)
@@ -117,27 +117,27 @@
 CVE-2005-3628 VULNERABLE (xpdf) bz#177911:rawhide
 CVE-2005-3628 backport (tetex) tetex-3.0-CVE-2005-3193.patch
 CVE-2005-3628 VULNERABLE (poppler, fixed 0.4.4) bz#177910:rawhide
-CVE-2005-3628 VULNERABLE (kdegraphics) bz#177908:rawhide
+CVE-2005-3628 VULNERABLE (kdegraphics, fixed 3.5.1) bz#177908:rawhide
 CVE-2005-3628 backport (cups) cups-CVE-2005-3625,6,7.patch
 CVE-2005-3627 VULNERABLE (xpdf) bz#177911:rawhide
 CVE-2005-3627 VULNERABLE (tetex) bz#177912:rawhide
 CVE-2005-3627 VULNERABLE (poppler, fixed 0.4.4) bz#177910:rawhide
-CVE-2005-3627 VULNERABLE (kdegraphics) bz#177908:rawhide
+CVE-2005-3627 VULNERABLE (kdegraphics, fixed 3.5.1) bz#177908:rawhide
 CVE-2005-3627 backport (cups) cups-CVE-2005-3625,6,7.patch
 CVE-2005-3626 VULNERABLE (xpdf) bz#177911:rawhide
 CVE-2005-3626 VULNERABLE (tetex) bz#177912:rawhide
 CVE-2005-3626 VULNERABLE (poppler, fixed 0.4.4) bz#177910:rawhide
-CVE-2005-3626 VULNERABLE (kdegraphics) bz#177908:rawhide
+CVE-2005-3626 VULNERABLE (kdegraphics, fixed 3.5.1) bz#177908:rawhide
 CVE-2005-3626 backport (cups) cups-CVE-2005-3625,6,7.patch
 CVE-2005-3625 VULNERABLE (xpdf) bz#177911:rawhide
 CVE-2005-3625 VULNERABLE (tetex) bz#177912:rawhide
 CVE-2005-3625 VULNERABLE (poppler, fixed 0.4.4) bz#177910:rawhide
-CVE-2005-3625 VULNERABLE (kdegraphics) bz#177908:rawhide
+CVE-2005-3625 VULNERABLE (kdegraphics, fixed 3.5.1) bz#177908:rawhide
 CVE-2005-3625 backport (cups) cups-CVE-2005-3625,6,7.patch
 CVE-2005-3624 VULNERABLE (xpdf) bz#177911:rawhide
 CVE-2005-3624 VULNERABLE (tetex) bz#177912:rawhide
 CVE-2005-3624 VULNERABLE (poppler, fixed 0.4.4) bz#177910:rawhide
-CVE-2005-3624 VULNERABLE (kdegraphics) bz#177908:rawhide
+CVE-2005-3624 VULNERABLE (kdegraphics, fixed 3.5.1) bz#177908:rawhide
 CVE-2005-3624 backport (cups) cups-CVE-2005-3625,6,7.patch
 CVE-2005-3623 version (kernel, fixed 2.6.14.5)
 CVE-2005-3582 version (ImageMagick) gentoo only
@@ -150,10 +150,10 @@
 CVE-2005-3389 version (php, fixed 5.1.1)
 CVE-2005-3388 version (php, fixed 5.1.1)
 CVE-2005-3358 version (kernel, fixed 2.6.11)
-CVE-2005-3357 VULNERABLE (httpd, affects 2.2.0) bz#177914
+CVE-2005-3357 VULNERABLE (httpd, affects 2.2.0) bz#177914:rawhide
 CVE-2005-3356 VULNERABLE (kernel)
 CVE-2005-3353 version (php, not 5.0)
-CVE-2005-3352 VULNERABLE (httpd, fixed 2.2.1) bz#177913
+CVE-2005-3352 VULNERABLE (httpd, fixed 2.2.1) bz#177913:rawhide
 CVE-2005-3351 version (spamassassin, fixed 3.1.0)
 CVE-2005-3322 version (squid) not upstream, SUSE only
 CVE-2005-3319 ignore (mod_php) no security consequence
@@ -179,17 +179,17 @@
 CVE-2005-3193 backport (tetex) tetex-3.0-CVE-2005-3193.patch
 CVE-2005-3193 backport (cups) cups-CVE-2005-3625,6,7.patch
 CVE-2005-3193 VULNERABLE (poppler, fixed 0.4.4) bz#177910:rawhide
-CVE-2005-3193 VULNERABLE (kdegraphics) bz#177908:rawhide
+CVE-2005-3193 VULNERABLE (kdegraphics, fixed 3.5.1) bz#177908:rawhide
 CVE-2005-3192 VULNERABLE (xpdf, fixed 3.0.1pl1) bz#177911:rawhide
 CVE-2005-3192 backport (tetex) tetex-3.0-CVE-2005-3193.patch
 CVE-2005-3192 backport (cups) cups-CVE-2005-3625,6,7.patch
 CVE-2005-3192 VULNERABLE (poppler, fixed 0.4.4) bz#177910:rawhide
-CVE-2005-3192 VULNERABLE (kdegraphics) bz#177908:rawhide
+CVE-2005-3192 VULNERABLE (kdegraphics, fixed 3.5.1) bz#177908:rawhide
 CVE-2005-3191 VULNERABLE (xpdf, fixed 3.0.1pl1) bz#177911:rawhide
 CVE-2005-3191 backport (tetex) tetex-3.0-CVE-2005-3193.patch
 CVE-2005-3191 backport (cups) cups-CVE-2005-3625,6,7.patch
 CVE-2005-3191 VULNERABLE (poppler, fixed 0.4.4) bz#177910:rawhide
-CVE-2005-3191 VULNERABLE (kdegraphics) bz#177908:rawhide
+CVE-2005-3191 VULNERABLE (kdegraphics, fixed 3.5.1) bz#177908:rawhide
 CVE-2005-3186 version (gtk2, fixed 2.8.7 at least)
 CVE-2005-3186 backport (gdk-pixbuf)
 CVE-2005-3185 version (wget, fixed 1.10.2 at least)




More information about the scm-commits mailing list