Package / Vulnerable / Unaffected
1 openssl < 0.9.7k >= 0.9.7k
2 emul-linux-x86-baselibs < 2.5.2 >= 2.5.2
-------------------------------------------------------------------
# Package 2 [app-emulation/emul-linux-x86-baselibs] only applies
to AMD64 users.
NOTE: Any packages listed without architecture tags apply to all
architectures...
-------------------------------------------------------------------
2 affected packages
All AMD64 x86 emulation base libraries users should upgrade to the
latest version:
This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
http://bugs.gentoo.org.
Copyright 2006 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).
The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.
1. Summary:
New Wireshark packages that fix various security vulnerabilities are now
available. Wireshark was previously known as Ethereal.
This update has been rated as having low security impact by the Red Hat
Security Response Team.
2. Relevant releases/architectures:
3. Problem description:
Bugs were found in Wireshark's SCSI and SSCOP protocol dissectors. Ethereal
could crash or stop responding if it read a malformed packet off the
network. (CVE-2006-4330, CVE-2006-4333)
An off-by-one bug was found in the IPsec ESP decryption preference parser.
Ethereal could crash or stop responding if it read a malformed packet off
the network. (CVE-2006-4331)
Users of Wireshark or Ethereal should upgrade to these updated packages
containing Wireshark version 0.99.3, which is not vulnerable to these
issues. These packages also fix a bug in the PAM configuration of the
Wireshark packages which prevented non-root users starting a capture.
4. Solution:
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:
This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.
204045 - CVE-2006-4330 Wireshark security issues (CVE-2006-4331 CVE-2006-4333)
204066 - wireshark doesn't work as non root user
6. RPMs required:
