fedora-security/audit fc6,1.81,1.82

[Mark Cox (mjc)]

Author: mjc

Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv6340

Modified Files:
	fc6 
Log Message:
Give bz# for anything not fixed in t3 yet



Index: fc6
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc6,v
retrieving revision 1.81
retrieving revision 1.82
diff -u -r1.81 -r1.82
--- fc6	15 Sep 2006 08:54:32 -0000	1.81
+++ fc6	15 Sep 2006 09:18:09 -0000	1.82
@@ -3,23 +3,23 @@
 
 ** are items that need attention
 
-CVE-2006-4790 VULNERABLE (gnutls, fixed 1.4.4)
+CVE-2006-4790 VULNERABLE (gnutls, fixed 1.4.4) [backported to 1.4.1-2 in rawhide]
 CVE-2006-4663 ignore (kernel) not a vulnerability
 CVE-2006-4625 VULNERABLE (php)
-CVE-2006-4624 VULNERABLE (mailman, fixed 2.1.9rc1)
+CVE-2006-4624 VULNERABLE (mailman, fixed 2.1.9rc1) bz#206607
 CVE-2006-4623 VULNERABLE (kernel)
 CVE-2006-4600 version (openldap, fixed 2.3.25)
-CVE-2006-4571 VULNERABLE (thunderbird, fixed 1.5.0.7)
-CVE-2006-4571 VULNERABLE (firefox, fixed 1.5.0.7)
-CVE-2006-4570 VULNERABLE (thunderbird, fixed 1.5.0.7)
-CVE-2006-4569 VULNERABLE (firefox, fixed 1.5.0.7)
-CVE-2006-4568 VULNERABLE (firefox, fixed 1.5.0.7)
-CVE-2006-4567 VULNERABLE (firefox, fixed 1.5.0.7)
-CVE-2006-4567 VULNERABLE (thunderbird, fixed 1.5.0.7)
-CVE-2006-4566 VULNERABLE (firefox, fixed 1.5.0.7)
-CVE-2006-4566 VULNERABLE (thunderbird, fixed 1.5.0.7)
-CVE-2006-4565 VULNERABLE (firefox, fixed 1.5.0.7)
-CVE-2006-4565 VULNERABLE (thunderbird, fixed 1.5.0.7)
+CVE-2006-4571 VULNERABLE (thunderbird, fixed 1.5.0.7) [in rawhide]
+CVE-2006-4571 VULNERABLE (firefox, fixed 1.5.0.7) [in rawhide]
+CVE-2006-4570 VULNERABLE (thunderbird, fixed 1.5.0.7) [in rawhide]
+CVE-2006-4569 VULNERABLE (firefox, fixed 1.5.0.7) [in rawhide]
+CVE-2006-4568 VULNERABLE (firefox, fixed 1.5.0.7) [in rawhide]
+CVE-2006-4567 VULNERABLE (firefox, fixed 1.5.0.7) [in rawhide]
+CVE-2006-4567 VULNERABLE (thunderbird, fixed 1.5.0.7) [in rawhide]
+CVE-2006-4566 VULNERABLE (firefox, fixed 1.5.0.7) [in rawhide]
+CVE-2006-4566 VULNERABLE (thunderbird, fixed 1.5.0.7) [in rawhide]
+CVE-2006-4565 VULNERABLE (firefox, fixed 1.5.0.7) [in rawhide]
+CVE-2006-4565 VULNERABLE (thunderbird, fixed 1.5.0.7) [in rawhide]
 CVE-2006-4561 VULNERABLE (firefox)
 CVE-2006-4538 VULNERABLE (kernel, fixed after 2.6.18-rc6)
 CVE-2006-4535 version (kernel, fixed 2.6.18-rc6)
@@ -36,7 +36,7 @@
 CVE-2006-4434 ignore (sendmail, fixed 8.13.8) not exploitable
 CVE-2006-4433 version (php, fixed 5.1.4)
 CVE-2006-4380 version (mysql, fixed 4.1.13)
-CVE-2006-4340 VULNERABLE (nss, fixed 3.11.3)
+CVE-2006-4340 VULNERABLE (nss, fixed 3.11.3) bz#206608
 CVE-2006-4339 backport (openssl, fixed 0.9.8c)
 CVE-2006-4339 backport (openssl097)
 CVE-2006-4333 version (wireshark, fixed 0.99.3)
@@ -46,8 +46,8 @@
 CVE-2006-4310 VULNERABLE (firefox)
 CVE-2006-4262 backport (cscope) 
 CVE-2006-4261 VULNERABLE (firefox)
-CVE-2006-4253 VULNERABLE (firefox, fixed 1.5.0.7)
-CVE-2006-4253 VULNERABLE (thunderbird, fixed 1.5.0.7)
+CVE-2006-4253 VULNERABLE (firefox, fixed 1.5.0.7) [in rawhide]
+CVE-2006-4253 VULNERABLE (thunderbird, fixed 1.5.0.7) [in rawhide]
 CVE-2006-4226 VULNERABLE (mysql, fixed 5.0.25,5.1.12) bz#203428
 CVE-2006-4227 VULNERABLE (mysql, fixed 5.0.25,5.1.12) bz#203434
 CVE-2006-4808 ignore (binutils, gas fixed 20050714) this is a bug
@@ -95,15 +95,15 @@
 CVE-2006-3744 backport (ImageMagick)
 CVE-2006-3743 backport (ImageMagick)
 CVE-2006-3742 backport (kdebase) inside kdebase-3.5.4-2-redhat.patch
-CVE-2006-3740 VULNERABLE (xorg-x11)
-CVE-2006-3739 VULNERABLE (xorg-x11)
+CVE-2006-3740 VULNERABLE (xorg-x11) bz#206609
+CVE-2006-3739 VULNERABLE (xorg-x11) bz#206609
 CVE-2006-3731 ignore (firefox) just a user complicit crash
 CVE-2006-3694 version (ruby, fixed 1.8.5)
 CVE-2006-3677 version (firefox, fixed 1.5.0.5)
 CVE-2006-3677 version (thunderbird, fixed 1.5.0.5)
 CVE-2006-3672 ignore (konqueror) just a crash
 CVE-2006-3665 ignore (squirrelmail) don't enable register_globals!
-CVE-2006-3636 VULNERABLE (mailman, fixed 2.1.9)
+CVE-2006-3636 VULNERABLE (mailman, fixed 2.1.9) bz#206607
 CVE-2006-3634 ignore (kernel, fixed 2.6.17.8) s390 only
 CVE-2006-3632 version (wireshark, fixed 0.99.2)
 CVE-2006-3631 version (wireshark, fixed 0.99.2)
@@ -151,7 +151,7 @@
 CVE-2006-3016 version (php, fixed 5.1.3)
 CVE-2006-3011 ignore (php) safe mode isn't safe
 CVE-2006-3005 ignore (libjpeg) not a vuln
-CVE-2006-2941 VULNERABLE (mailman, fixed 2.1.9)
+CVE-2006-2941 VULNERABLE (mailman, fixed 2.1.9) bz#206607
 CVE-2006-2936 version (kernel, fixed 2.6.17.7)
 CVE-2006-2935 version (kernel, fixed 2.6.17.7)
 CVE-2006-2934 version (kernel, fixed 2.6.17.3)