fedora-security/audit fc5,1.359,1.360

[Mark Cox (mjc)]

Author: mjc

Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv29793

Modified Files:
	fc5 
Log Message:
Catchup on fc5 issues; including bind rebase and Xsession issues (low)



Index: fc5
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc5,v
retrieving revision 1.359
retrieving revision 1.360
diff -u -r1.359 -r1.360
--- fc5	17 Oct 2006 09:38:25 -0000	1.359
+++ fc5	17 Oct 2006 14:49:34 -0000	1.360
@@ -1,11 +1,19 @@
-Up to date CVE as of CVE email 20061009
-Up to date FC5 as of 20061009
+Up to date CVE as of CVE email 20061016
+Up to date FC5 as of 20061016
 
 ** are items that need attention
 
-CVE-2006-5229 ** openssh
-CVE-2006-5215 ** (X.org, fixed 20060225?)
-CVE-2006-5214 ** (X.org, fixed 20060225?)
+CVE-2006-5298 ** mutt
+CVE-2006-5297 ** mutt
+CVE-2006-5229 ignore (openssh) reported not an issue
+CVE-2006-5215 VULNERABLE (xorg-x11-xdm)
+CVE-2006-5215 VULNERABLE (xorg-x11-xinit)
+CVE-2006-5215 VULNERABLE (gdm)
+CVE-2006-5215 VULNERABLE (kdebase)
+CVE-2006-5214 VULNERABLE (xorg-x11-xdm)
+CVE-2006-5214 VULNERABLE (xorg-x11-xinit)
+CVE-2006-5214 VULNERABLE (gdm)
+CVE-2006-5214 VULNERABLE (kdebase)
 CVE-2006-5178 VULNERABLE (php) can't be fixed
 CVE-2006-5174 ignore (kernel, fixed 2.6.19-rc1) s390 only
 CVE-2006-5173 version (kernel, fixed 2.6.18) [since FEDORA-2006-1022] protected by exec-shield
@@ -84,8 +92,8 @@
 CVE-2006-4146 backport (gdb) [since FEDORA-2006-975]
 CVE-2006-4145 version (kernel, fixed 2.6.17.10) [since FEDORA-2006-967] needs a better upstream fix
 CVE-2006-4144 backport (ImageMagick, fixed 6.2.9) #202773 [since FEDORA-2006-929]
-CVE-2006-4096 backport (bind) [since FEDORA-2006-966] bind-9.3.2-rrsig.patch 
-CVE-2006-4095 backport (bind) [since FEDORA-2006-418] bind-9.3.2-bz173961.patch
+CVE-2006-4096 version (bind) [since FEDORA-2006-1024] was backport since FEDORA-2006-966
+CVE-2006-4095 version (bind) [since FEDORA-2006-418] was backport since FEDORA-2006-966
 CVE-2006-4093 version (kernel, fixed 2.6.17.9) [since FEDORA-2006-967]
 CVE-2006-4031 VULNERABLE (mysql, fixed 5.0.24) #202247
 CVE-2006-4020 VULNERABLE (php) #201767