fedora-security/audit fc5,1.347,1.348 fc6,1.103,1.104

[Mark Cox (mjc)]

Author: mjc

Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv7520

Modified Files:
	fc5 fc6 
Log Message:
A couple of days of updates



Index: fc5
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc5,v
retrieving revision 1.347
retrieving revision 1.348
diff -u -r1.347 -r1.348
--- fc5	5 Oct 2006 20:55:04 -0000	1.347
+++ fc5	6 Oct 2006 08:23:10 -0000	1.348
@@ -1,8 +1,9 @@
-p to date CVE as of CVE email 20061003
-Up to date FC5 as of 20061003
+p to date CVE as of CVE email 20061005
+Up to date FC5 as of 20061005
 
 ** are items that need attention
 
+CVE-2006-5178 VULNERABLE (php) can't be fixed
 CVE-2006-5174 VULNERABLE (kernel, fixed 2.6.19-rc1)
 CVE-2006-5170 VULNERABLE (nss_ldap) #209361
 CVE-2006-5160 ignore (firefox) unverified
@@ -10,11 +11,11 @@
 CVE-2006-5158 ** kernel
 CVE-2006-5072 VULNERABLE (mono) #209464
 CVE-2006-5052 VULNERABLE (openssh, fixed 4.4)
-CVE-2006-5051 VULNERABLE (openssh, fixed 4.4) #208458
+CVE-2006-5051 backport (openssh, fixed 4.4) [since FEDORA-2006-1011]
 CVE-2006-4997 VULNERABLE (kernel, fixed 2.6.18)
 CVE-2006-4980 VULNERABLE (python) #208166
 CVE-2006-4925 ** openssh
-CVE-2006-4924 VULNERABLE (openssh) #207957
+CVE-2006-4924 backport (openssh) #207957 [since FEDORA-2006-1011]
 CVE-2006-4790 backport (gnutls, fixed 1.4.4) [since FEDORA-2006-974]
 CVE-2006-4663 ignore (kernel) not a vulnerability
 CVE-2006-4625 VULNERABLE (php)


Index: fc6
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc6,v
retrieving revision 1.103
retrieving revision 1.104
diff -u -r1.103 -r1.104
--- fc6	6 Oct 2006 08:03:40 -0000	1.103
+++ fc6	6 Oct 2006 08:23:10 -0000	1.104
@@ -1,9 +1,10 @@
-Up to date CVE as of CVE email 20061003
+Up to date CVE as of CVE email 20061005
 Up to date FC6 as of Test3
 Up to date dist-fc6 rawhide as of 20060929
 
 ** are items that need attention
 
+CVE-2006-5178 VULNERABLE (php) can't be fixed
 CVE-2006-5174 VULNERABLE (kernel, fixed 2.6.19-rc1)
 CVE-2006-5170 VULNERABLE (nss_ldap)
 CVE-2006-5160 ignore (firefox) unverified