fedora-security/audit fc4,1.101,1.102 fc5,1.13,1.14

[Josh Bressers (bressers)]

Author: bressers

Update of /cvs/fedora/fedora-security/audit
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv5121

Modified Files:
	fc4 fc5 
Log Message:
* We are still vulnerable to an old gd issue.
* Add a new ethereal CVE id.



Index: fc4
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc4,v
retrieving revision 1.101
retrieving revision 1.102
diff -u -r1.101 -r1.102
--- fc4	8 Dec 2005 19:35:27 -0000	1.101
+++ fc4	9 Dec 2005 22:13:29 -0000	1.102
@@ -4,6 +4,7 @@
 ** are items that need attention
 
 CVE-2005-4077 VULNERABLE (curl)
+CVE-2005-3651 VULNERABLE (ethereal)
 CVE-2005-3193 VULNERABLE (xpdf)
 CVE-2005-3193 VULNERABLE (kdegraphics)
 CVE-2005-3193 VULNERABLE (tetex)
@@ -703,7 +704,7 @@
 CVE-2004-1004 version (mc, fixed 4.6.0)
 CVE-2004-1002 ignore (ppp) not a security issue
 CVE-2004-0996 backport (cscope, not fixed in 15.5)
-CVE-2004-0990 version (gd, fixed 2.0.29)
+CVE-2004-0990 VULNERABLE (gd)
 CVE-2004-0989 version (libxml2, fixed 2.6.15)
 CVE-2004-0986 version (iptables, fixed 1.2.12)
 CVE-2004-0983 version (ruby, fixed 1.8.2)


Index: fc5
===================================================================
RCS file: /cvs/fedora/fedora-security/audit/fc5,v
retrieving revision 1.13
retrieving revision 1.14
diff -u -r1.13 -r1.14
--- fc5	8 Dec 2005 19:35:28 -0000	1.13
+++ fc5	9 Dec 2005 22:13:29 -0000	1.14
@@ -13,6 +13,7 @@
 ** are items that need attention
 
 CVE-2005-4077 VULNERABLE (curl)
+CVE-2005-3651 VULNERABLE (ethereal)
 CVE-2005-3193 VULNERABLE (xpdf)
 CVE-2005-3193 VULNERABLE (kdegraphics)
 CVE-2005-3193 VULNERABLE (tetex)
@@ -743,7 +744,7 @@
 CVE-2004-1004 version (mc, fixed 4.6.0)
 CVE-2004-1002 ignore (ppp) not a security issue
 CVE-2004-0996 backport (cscope) not fixed in 15.5
-CVE-2004-0990 version (gd, fixed 2.0.29)
+CVE-2004-0990 VULNERABLE (gd)
 CVE-2004-0989 version (libxml2, fixed 2.6.15)
 CVE-2004-0986 version (iptables, fixed 1.2.12)
 CVE-2004-0983 version (ruby, fixed 1.8.2)