-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Wed, 01 Mar 2011 01:17:41 +0100 Source: wireshark Binary: wireshark-common wireshark tshark wireshark-dev wireshark-dbg Architecture: sparc Version: 1.2.11-6+squeeze1 Distribution: squeeze-security Urgency: high Maintainer: sparc Build Daemon (schroeder) Changed-By: Balint Reczey Description: tshark - network traffic analyzer - console version wireshark - network traffic analyzer - GTK+ version wireshark-common - network traffic analyzer - common files wireshark-dbg - network traffic analyzer - debug symbols wireshark-dev - network traffic analyzer - development tools Closes: 613202 Changes: wireshark (1.2.11-6+squeeze1) stable-security; urgency=high . * security fixes from Wireshark 1.2.15: - Huzaifa Sidhpurwala of the Red Hat Security Response Team discovered that Wireshark could free an uninitialized pointer while reading a malformed pcap-ng file. (CVE-2011-0538) (Closes: #613202) - Huzaifa Sidhpurwala of the Red Hat Security Response Team discovered that a large packet length in a pcap-ng file could crash Wireshark - Wireshark could overflow a buffer while reading a Nokia DCT3 trace file. (CVE-2011-0713) - joernchen of Phenoelit discovered that the LDAP and SMB dissectors could overflow the stack. - Xiaopeng Zhang of Fortinet's Fortiguard Labs discovered that large LDAP Filter strings can consume excessive amounts of memory. Checksums-Sha1: bcb9ef68aed2977fef83b551dc939cc0a8472778 13200086 wireshark-common_1.2.11-6+squeeze1_sparc.deb 1fbe544eac210fc3081b0d45517aa8ca3fdfd6ba 792632 wireshark_1.2.11-6+squeeze1_sparc.deb 7471f24bed2fb568d862838beee3dd5b3554b285 136102 tshark_1.2.11-6+squeeze1_sparc.deb 39cf996c9e41eef2d219617622e335f29abc16a6 793152 wireshark-dev_1.2.11-6+squeeze1_sparc.deb 01ff4a48ce00e4645f1e78fc5904e142dcd2eece 14752118 wireshark-dbg_1.2.11-6+squeeze1_sparc.deb Checksums-Sha256: 7e44221a8fcb428b2cdaee3f18df04bb9106d89c47820937ff926108f74b1807 13200086 wireshark-common_1.2.11-6+squeeze1_sparc.deb 2ffd1dab273182f687b4e6fd3993bdac1c58262d3d5b99bbd0262beb12221d8a 792632 wireshark_1.2.11-6+squeeze1_sparc.deb 4f32b77d1c028e7ac3de94637187baa388a3067d25532db43ed63d0a4ffe439f 136102 tshark_1.2.11-6+squeeze1_sparc.deb d98ee2e46928ef39fe161214ca4660ccf3aaae3e7875bb49e6e7a8cede3dd7ea 793152 wireshark-dev_1.2.11-6+squeeze1_sparc.deb d5db07c8eccd2ba6e4e2b8bd606b3cda6185069aaf351b272fc8cc06f10ff933 14752118 wireshark-dbg_1.2.11-6+squeeze1_sparc.deb Files: 99b397334ca07fe765e8d526faf06335 13200086 net optional wireshark-common_1.2.11-6+squeeze1_sparc.deb f27d8ed1c8ce2e7faba99b4bf34034bd 792632 net optional wireshark_1.2.11-6+squeeze1_sparc.deb 82bab3a6e257fce7ac04d3fe15513cfe 136102 net optional tshark_1.2.11-6+squeeze1_sparc.deb 7ebf8c00d6afa3797cd6615907a1ab8f 793152 devel optional wireshark-dev_1.2.11-6+squeeze1_sparc.deb 760f1243c4bfa247ba8942a6919f01c2 14752118 debug extra wireshark-dbg_1.2.11-6+squeeze1_sparc.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iEYEARECAAYFAk2GH4IACgkQXm3vHE4uylpeJQCgtOvaUCmHfAAft31oGIXD28+I hroAoOumzWv43y+fyBVPDapwNn00II9R =Z81E -----END PGP SIGNATURE-----