[ MDKSA-2007:145 ] - Updated wireshark packages fix multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 Mandriva Linux Security Advisory                         MDKSA-2007:145

 Package : wireshark
 Date    : July 10, 2007
 Affected: 2007.0, 2007.1, Corporate 4.0

 _______________________________________________________________________

 

 Problem Description:  

 A number of vulnerabilities in the Wireshark program were found that  could cause crashes, excessive looping, or exhaustion of system memory.  

 This updated provides wireshark 0.99.6 which is not vulnerable to  these issues.

 References:  

 
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3389
 
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3390
 
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3391
 
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3392
 
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3393
 
http://www.wireshark.org/security/wnpa-sec-2007-02.html
 _______________________________________________________________________

 

 Updated Packages:  

 Mandriva Linux 2007.0:

 b033f6eadc258c248d9fba4469b838e1  2007.0/i586/libwireshark0-0.99.6-0.1mdv2007.0.i586.rpm
 5aad6a1e489f750ddf174649a6319ca2  2007.0/i586/tshark-0.99.6-0.1mdv2007.0.i586.rpm
 c394ef661021c5e62bed70c21c315ffd  2007.0/i586/wireshark-0.99.6-0.1mdv2007.0.i586.rpm
 e851b58c639407a7c9ae25fcfd336774  2007.0/i586/wireshark-tools-0.99.6-0.1mdv2007.0.i586.rpm 
 72beadc31f718f860324544019d3adc3  2007.0/SRPMS/wireshark-0.99.6-0.1mdv2007.0.src.rpm

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

 Mandriva Linux 2007.0/X86_64:

 dd9d7af8d82a2eacc871e6a919cad3af  2007.0/x86_64/lib64wireshark0-0.99.6-0.1mdv2007.0.x86_64.rpm
 452de6307f10772c68ebae473ae3c537  2007.0/x86_64/tshark-0.99.6-0.1mdv2007.0.x86_64.rpm
 fa4cc3d56186068a13549dc754529198  2007.0/x86_64/wireshark-0.99.6-0.1mdv2007.0.x86_64.rpm
 74dab97371727e367e997a1a90f7263b  2007.0/x86_64/wireshark-tools-0.99.6-0.1mdv2007.0.x86_64.rpm 
 72beadc31f718f860324544019d3adc3  2007.0/SRPMS/wireshark-0.99.6-0.1mdv2007.0.src.rpm

 Mandriva Linux 2007.1:

 a5b8f29cdc32543659a8e0c23f146e33  2007.1/i586/libwireshark0-0.99.6-0mdv2007.1.i586.rpm
 ceb71b951f1185741c9b9be50fda7acc  2007.1/i586/tshark-0.99.6-0mdv2007.1.i586.rpm
 188ee566b140d3a5a270106fdba86516  2007.1/i586/wireshark-0.99.6-0mdv2007.1.i586.rpm
 4a4e07651e01dd9177548b37b7888971  2007.1/i586/wireshark-tools-0.99.6-0mdv2007.1.i586.rpm 
 9ab979db8a493c6d35ee621667af6806  2007.1/SRPMS/wireshark-0.99.6-0mdv2007.1.src.rpm

 Mandriva Linux 2007.1/X86_64:

 83ca8b3c25af33fd0f53ac2bff0adc21  2007.1/x86_64/lib64wireshark0-0.99.6-0mdv2007.1.x86_64.rpm
 4f8159feba8f9cd498d9d6e810a0e555  2007.1/x86_64/tshark-0.99.6-0mdv2007.1.x86_64.rpm
 6cf73daa791ecbcacb505016e0050823  2007.1/x86_64/wireshark-0.99.6-0mdv2007.1.x86_64.rpm
 fa1e1783c619d908a5d0b260adbb5c9f  2007.1/x86_64/wireshark-tools-0.99.6-0mdv2007.1.x86_64.rpm 
Do you need more help?
In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software:
Learn more about Pantek's Technical Support offerings
Place an order for 24/7/365 Technical Support here
Learn more about Pantek, who we are, and what we do
Chat with a Live Operator
Related securityfocus.com Links
bugtraq
certification
focus-bsd
focus-ids
focus-ih
focus-linux
focus-ms
focus-sun
focus-unix-other
focus-virus
forensics
incidents
libnet
linux-secnews
ms-secnews
pen-test
secpapers
secprog
sectools
secureshell
security-basics
securityjobs
sf-news
vuln-dev
webappsec
Request more information about Pantek
 9ab979db8a493c6d35ee621667af6806  2007.1/SRPMS/wireshark-0.99.6-0mdv2007.1.src.rpm

 Corporate 4.0:

 e0bd9a03651d4f29034088368b81aab8  corporate/4.0/i586/libwireshark0-0.99.6-0.1.20060mlcs4.i586.rpm
 1bbb1205a0f0a2d0107f1a6992ceae83  corporate/4.0/i586/tshark-0.99.6-0.1.20060mlcs4.i586.rpm
 88828ce0dc609d86ff1987464813fa02  corporate/4.0/i586/wireshark-0.99.6-0.1.20060mlcs4.i586.rpm
 b1180bb4471aabf35620e391475f81ff  corporate/4.0/i586/wireshark-tools-0.99.6-0.1.20060mlcs4.i586.rpm 
 b72cf2010d3c7afd8f00e99ed6d28430  corporate/4.0/SRPMS/wireshark-0.99.6-0.1.20060mlcs4.src.rpm

 Corporate 4.0/X86_64:

 794ca2e7faf95f0c6f6527523bbd56cb  corporate/4.0/x86_64/lib64wireshark0-0.99.6-0.1.20060mlcs4.x86_64.rpm
 4673373f4d25fafb8da9b306c7afc0c6  corporate/4.0/x86_64/tshark-0.99.6-0.1.20060mlcs4.x86_64.rpm
 8a1d126e0524d69fb719c9374f45d64d  corporate/4.0/x86_64/wireshark-0.99.6-0.1.20060mlcs4.x86_64.rpm
 5d86ebcdf606a1c8406ddb6a086c09e6  corporate/4.0/x86_64/wireshark-tools-0.99.6-0.1.20060mlcs4.x86_64.rpm 
 b72cf2010d3c7afd8f00e99ed6d28430  corporate/4.0/SRPMS/wireshark-0.99.6-0.1.20060mlcs4.src.rpm

 _______________________________________________________________________

 To upgrade automatically use MandrivaUpdate or urpmi. The verification  of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security. You can obtain the  GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

Can we help you?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/security/advisories

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com

 Type Bits/KeyID Date User ID
 pub 1024D/22458A98 2000-07-10 Mandriva Security Team   <security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFGlA+GmqjQ0CJFipgRAoh1AKDfqo49g725VpoWO6jaS2MgJa9KxwCgyOnB 51NfDtlriicG49CdtVDXHDc=
=c4gk
-----END PGP SIGNATURE----- Received on Wed Jul 11 09:59:38 2007