-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Wed, 01 Mar 2011 01:17:41 +0100 Source: wireshark Binary: wireshark-common wireshark tshark wireshark-dev wireshark-dbg Architecture: armel Version: 1.2.11-6+squeeze1 Distribution: squeeze-security Urgency: high Maintainer: armel Build Daemon (antheil) Changed-By: Balint Reczey Description: tshark - network traffic analyzer - console version wireshark - network traffic analyzer - GTK+ version wireshark-common - network traffic analyzer - common files wireshark-dbg - network traffic analyzer - debug symbols wireshark-dev - network traffic analyzer - development tools Closes: 613202 Changes: wireshark (1.2.11-6+squeeze1) stable-security; urgency=high . * security fixes from Wireshark 1.2.15: - Huzaifa Sidhpurwala of the Red Hat Security Response Team discovered that Wireshark could free an uninitialized pointer while reading a malformed pcap-ng file. (CVE-2011-0538) (Closes: #613202) - Huzaifa Sidhpurwala of the Red Hat Security Response Team discovered that a large packet length in a pcap-ng file could crash Wireshark - Wireshark could overflow a buffer while reading a Nokia DCT3 trace file. (CVE-2011-0713) - joernchen of Phenoelit discovered that the LDAP and SMB dissectors could overflow the stack. - Xiaopeng Zhang of Fortinet's Fortiguard Labs discovered that large LDAP Filter strings can consume excessive amounts of memory. Checksums-Sha1: d8382035cf692c9a81f933759d320ecaae075e65 11785846 wireshark-common_1.2.11-6+squeeze1_armel.deb 216d4d5f5aa32a874963de016099b7cae807fc1d 737768 wireshark_1.2.11-6+squeeze1_armel.deb cd294cfa4331aa52dafac7e4a69e8f8746b6b9d0 131492 tshark_1.2.11-6+squeeze1_armel.deb ac5ffaf476d62affda2adeb4bc0c971acc3bfaff 795550 wireshark-dev_1.2.11-6+squeeze1_armel.deb 2c9f3d64c364763be88ced8b4ac62376a83492e9 15409132 wireshark-dbg_1.2.11-6+squeeze1_armel.deb Checksums-Sha256: d09cc4bafc87b3c6288c4bb5fcf07ab2a297e3ca893505881908893fb820d5ca 11785846 wireshark-common_1.2.11-6+squeeze1_armel.deb e1b7799cd0d93cb50f243f8ba9df4a1c2b3f09eb42231f2f57d396ab34c68845 737768 wireshark_1.2.11-6+squeeze1_armel.deb 13d22b1b4aa5bb386b068e5c9cedd3d12fd9968fe5ba17e97cc681919fead499 131492 tshark_1.2.11-6+squeeze1_armel.deb a51ff66b2779e8b6895cfb71ad33006e8469b444e3300dc3a0b7f60cc35f8dfa 795550 wireshark-dev_1.2.11-6+squeeze1_armel.deb abb79c05ea8639f5ea3c1ff87933af9bf80411f7d844f770a25d21f9c1dd9358 15409132 wireshark-dbg_1.2.11-6+squeeze1_armel.deb Files: 10a150c318c21869103129459826bbdc 11785846 net optional wireshark-common_1.2.11-6+squeeze1_armel.deb 6bd0188aec8bfc2db1177a3fe0b79b9c 737768 net optional wireshark_1.2.11-6+squeeze1_armel.deb 8491693fab687a931613cb68e5816603 131492 net optional tshark_1.2.11-6+squeeze1_armel.deb 98c4d036607e7955d4963d5a9f169d26 795550 devel optional wireshark-dev_1.2.11-6+squeeze1_armel.deb 0df3075eca01e18bb0797dce600679ca 15409132 debug extra wireshark-dbg_1.2.11-6+squeeze1_armel.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iEYEARECAAYFAk2GIEMACgkQXm3vHE4uylp2gACfcr5dUnMsP7Vk2+0AOgW6UuEy BF0AnAu9Ht9LUPC66gp14L6os0Qg9GPD =91FB -----END PGP SIGNATURE-----