-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Wed, 01 Mar 2011 01:17:41 +0100 Source: wireshark Binary: wireshark-common wireshark tshark wireshark-dev wireshark-dbg Architecture: powerpc Version: 1.2.11-6+squeeze1 Distribution: squeeze-security Urgency: high Maintainer: powerpc Build Daemon (porpora) Changed-By: Balint Reczey Description: tshark - network traffic analyzer - console version wireshark - network traffic analyzer - GTK+ version wireshark-common - network traffic analyzer - common files wireshark-dbg - network traffic analyzer - debug symbols wireshark-dev - network traffic analyzer - development tools Closes: 613202 Changes: wireshark (1.2.11-6+squeeze1) stable-security; urgency=high . * security fixes from Wireshark 1.2.15: - Huzaifa Sidhpurwala of the Red Hat Security Response Team discovered that Wireshark could free an uninitialized pointer while reading a malformed pcap-ng file. (CVE-2011-0538) (Closes: #613202) - Huzaifa Sidhpurwala of the Red Hat Security Response Team discovered that a large packet length in a pcap-ng file could crash Wireshark - Wireshark could overflow a buffer while reading a Nokia DCT3 trace file. (CVE-2011-0713) - joernchen of Phenoelit discovered that the LDAP and SMB dissectors could overflow the stack. - Xiaopeng Zhang of Fortinet's Fortiguard Labs discovered that large LDAP Filter strings can consume excessive amounts of memory. Checksums-Sha1: 22fb4dd7a21f82c4eb670f28dbcf2c03a0c66388 12914436 wireshark-common_1.2.11-6+squeeze1_powerpc.deb da4264b0d3fb510579bb0f1846f3a8c5d6081236 832516 wireshark_1.2.11-6+squeeze1_powerpc.deb 4f137520acf651be962e95f6c628a1ecfa6ede34 139914 tshark_1.2.11-6+squeeze1_powerpc.deb a6c9f8cc145842e4faa4986ae8c4d70851bd87f0 794920 wireshark-dev_1.2.11-6+squeeze1_powerpc.deb 584de492e670ab94b1babdc1f3aec1a537d58af0 16243310 wireshark-dbg_1.2.11-6+squeeze1_powerpc.deb Checksums-Sha256: 210cc1697a7830f65a19165f9130a3177c66a3c2ffb96fbf23edcd447233ac27 12914436 wireshark-common_1.2.11-6+squeeze1_powerpc.deb 3c1347488c50ca171d568368dbf5aa4713c49e6e878f83bce02060e453d15352 832516 wireshark_1.2.11-6+squeeze1_powerpc.deb a0017c362e1bd038f12442030c2fc64b6b4ae15c37de7440022522620ee80e55 139914 tshark_1.2.11-6+squeeze1_powerpc.deb fc40b9cd8cab3ae539b3fa77572307bacd01f38e7426bc7414070a1d8e9bc3a0 794920 wireshark-dev_1.2.11-6+squeeze1_powerpc.deb 5a948284f5ab71ab4debbe5f5a3556656583f4345c893e57b578c5a6336ef3cb 16243310 wireshark-dbg_1.2.11-6+squeeze1_powerpc.deb Files: ade86b9d3e2052fa14433335dfa34253 12914436 net optional wireshark-common_1.2.11-6+squeeze1_powerpc.deb 7661bab769bccc66b9c5745333a426ed 832516 net optional wireshark_1.2.11-6+squeeze1_powerpc.deb f9e9d57067cdc45dbce09abfae126ea4 139914 net optional tshark_1.2.11-6+squeeze1_powerpc.deb c159e900ad906a0db17a0f4044dd698f 794920 devel optional wireshark-dev_1.2.11-6+squeeze1_powerpc.deb 529415831eb1004a22351e48b700991e 16243310 debug extra wireshark-dbg_1.2.11-6+squeeze1_powerpc.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iEYEARECAAYFAk2GH2AACgkQXm3vHE4uylp5fgCePivQIjAebNF9PaKnzLQ/MPir bsEAnRtr3O+GhAbuZmZhcmj9EYGLGAN3 =Mt1x -----END PGP SIGNATURE-----