fedora-security/audit fc4,1.336,1.337 fc5,1.251,1.252

[Mark Cox (mjc)]

Author: mjc

Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv7163

Modified Files:
	fc4 fc5 
Log Message:
New CVE mails and Ethereal update



Index: fc4
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc4,v
retrieving revision 1.336
retrieving revision 1.337
diff -u -r1.336 -r1.337
--- fc4	17 Jul 2006 14:41:35 -0000	1.336
+++ fc4	18 Jul 2006 07:58:18 -0000	1.337
@@ -1,9 +1,17 @@
-Up to date CVE as of CVE email 20060712
-Up to date FC4 as of 20060712
+Up to date CVE as of CVE email 20060714
+Up to date FC4 as of 20060714
 
 ** are items that need attention
 
-CVE-2006-3626 VULNERABLE (kernel, fixed=2.6.17.6)
+CVE-2006-3672 ** konqueror
+CVE-2006-3665 ignore (squirrelmail) don't enable register_globals!
+CVE-2006-3632 VULNERABLE (ethereal, fixed wireshark-0.99.2)
+CVE-2006-3631 VULNERABLE (ethereal, fixed wireshark-0.99.2)
+CVE-2006-3630 VULNERABLE (ethereal, fixed wireshark-0.99.2)
+CVE-2006-3629 VULNERABLE (ethereal, fixed wireshark-0.99.2)
+CVE-2006-3628 VULNERABLE (ethereal, fixed wireshark-0.99.2)
+CVE-2006-3627 VULNERABLE (ethereal, fixed wireshark-0.99.2)
+CVE-2006-3626 VULNERABLE (kernel, fixed 2.6.17.6)
 CVE-2006-3486 ignore (mysql) not exploitable
 CVE-2006-3404 version (gimp, fixed 2.2.12) #198270 [since FEDORA-2006-795]
 CVE-2006-3403 version (samba, fixed 3.0.23) #198297 [since FEDORA-2006-808]


Index: fc5
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc5,v
retrieving revision 1.251
retrieving revision 1.252
diff -u -r1.251 -r1.252
--- fc5	17 Jul 2006 14:41:35 -0000	1.251
+++ fc5	18 Jul 2006 07:58:18 -0000	1.252
@@ -1,9 +1,17 @@
-Up to date CVE as of CVE email 20060712
-Up to date FC5 as of 20060712
+Up to date CVE as of CVE email 20060717
+Up to date FC5 as of 20060717
 
 ** are items that need attention
 
-CVE-2006-3626 VULNERABLE (kernel, fixed=2.6.17.6)
+CVE-2006-3672 ** konqueror
+CVE-2006-3665 ignore (squirrelmail) don't enable register_globals!
+CVE-2006-3632 VULNERABLE (ethereal, fixed wireshark-0.99.2)
+CVE-2006-3631 VULNERABLE (ethereal, fixed wireshark-0.99.2)
+CVE-2006-3630 VULNERABLE (ethereal, fixed wireshark-0.99.2)
+CVE-2006-3629 VULNERABLE (ethereal, fixed wireshark-0.99.2)
+CVE-2006-3628 VULNERABLE (ethereal, fixed wireshark-0.99.2)
+CVE-2006-3627 VULNERABLE (ethereal, fixed wireshark-0.99.2)
+CVE-2006-3626 VULNERABLE (kernel, fixed 2.6.17.6)
 CVE-2006-3486 ignore (mysql, fixed 5.0.23) not exploitable
 CVE-2006-3404 version (gimp, fixed 2.2.12) #198270 [since FEDORA-2006-794]
 CVE-2006-3403 version (samba, fixed 3.0.23) #198297 [since FEDORA-2006-807]
@@ -11,7 +19,7 @@
 CVE-2006-3376 backport (libwmf) #198291 [since FEDORA-2006-805]
 CVE-2006-3352 ignore (firefox) not a vulnerability
 CVE-2006-3334 ignore (libpng, fixed 1.2.12) not exploitable
-CVE-2006-3242 backport (mutt) #197152 [since FEDORA-2006-760]
+CVE-2006-3242 backport (mutt, fixed 1.4.2.2, 1.5.12) #197152 [since FEDORA-2006-760]
 CVE-2006-3174 version (squirrelmail, fixed 1.4.7) #197369 [since FEDORA-2006-788]
 CVE-2006-3145 VULNERABLE (netpbm)
 CVE-2006-3127 version (nss, only affected 3.11) [since FEDORA-2006-728]