Fedora Update Notification
FEDORA-2004-154
2004-06-03
Product : Fedora Core 2
Name : net-tools
Version : 1.60
Release : 25.1
Summary : Basic networking tools.
Description :
The net-tools package contains basic networking tools, including
ifconfig, netstat, route, and others.
The code in netlink.c is based in part on the code of iproute.
It was not updated when CAN-2003-0856 was announced. The code in
question is within the netlink_listen & netlink_receive_dump
functions. They should both check the source of the packets by
looking at nl_pid and ensuring that it is 0 before performing any
reconfiguration of network interfaces.
These updated packages now contain the latest netplug daemon
which fixes that problem. All users of netplug are strongly
encouraged to upgrade to these new packages.
- Thu Jun 03 2004 Phil Knirsch <pknirsch@redhat.com> 1.60-25.1
- Built FC2 security errata version based on rawhide.
- Fri May 14 2004 Phil Knirsch <pknirsch@redhat.com> 1.60-27
- Fixed compiler warning/error in netplug.
- Updated to netplug-1.2.6 for security update and fixes.
- Thu May 06 2004 Phil Knirsch <pknirsch@redhat.com> 1.60-26
- Updated netplugd to latest upstream version.
- Fixed execshield problem in main.c of netplugd.
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
4d37c3c4484a9d0efe3a3f726072454a
SRPMS/net-tools-1.60-25.1.src.rpm
caa17b1b3a8a9639afdf2483068e0f12
i386/net-tools-1.60-25.1.i386.rpm
6b9bc4fd68b8c4d9f11403f4f10b9e6e
i386/debug/net-tools-debuginfo-1.60-25.1.i386.rpm
1a9523abb0871c1c173d3c1c8ec297a1
x86_64/net-tools-1.60-25.1.x86_64.rpm
a1fce7c6d5a0eed37d825f70f89ec53c
x86_64/debug/net-tools-debuginfo-1.60-25.1.x86_64.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the ‘up2date’ command.
—
Philipp Knirsch
Fedora Update Notification
FEDORA-2004-153
2004-06-03
Product : Fedora Core 2
Name : ethereal
Version : 0.10.3
Release : 2.1
Summary : Network traffic analyzer
Description :
Ethereal is a network traffic analyzer for Unix-ish operating
systems.
This package lays base for libpcap, a packet capture and
filtering library, contains command-line utilities, contains
plugins and documentation for ethereal. A graphical user interface
is packaged separately to GTK+ package.
Update Information:
Issues have been discovered in the following protocol
dissectors:
- A SIP packet could make Ethereal crash under specific
conditions, as described in the following message:
http://www.ethereal.com/lists/ethereal-users/200405/msg00018.html
(0.10.3). - The AIM dissector could throw an assertion, causing Ethereal to
terminate abnormally (0.10.3). - It was possible for the SPNEGO dissector to dereference a null
pointer, causing a crash (0.9.8 to 0.10.3). - The MMSE dissector was susceptible to a buffer overflow.
(0.10.1 to 0.10.3).
All users of the Ethereal package are strongly encouraged to
update to these latest packages.
* Tue Jun 01 2004 Phil Knirsch <pknirsch@redhat.com> 0.10.3-2.1
- Included backported security fixes from ethereal-0.10.4
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
047f4b58fc2ce78dff5f7f27d588faa7
SRPMS/ethereal-0.10.3-2.1.src.rpm
c5954b26aa5e448eb7a1ad1d9ac08692
i386/ethereal-0.10.3-2.1.i386.rpm
052063b1167471b6fcedfa7222a2fc4c
i386/ethereal-gnome-0.10.3-2.1.i386.rpm
625e6397e449a2025a4b87fa3724e9cc
i386/debug/ethereal-debuginfo-0.10.3-2.1.i386.rpm
efdd124a1b6cdbd61d13ddadb1b0ec28
x86_64/ethereal-0.10.3-2.1.x86_64.rpm
b0b0bd164858519f316feddeaf3e2db7
x86_64/ethereal-gnome-0.10.3-2.1.x86_64.rpm
57537ac043966efcd69683c547639302
x86_64/debug/ethereal-debuginfo-0.10.3-2.1.x86_64.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the ‘up2date’ command.
—
Philipp Knirsch
Fedora Update Notification
FEDORA-2004-152
2004-06-03
Product : Fedora Core 1
Name : ethereal
Version : 0.10.3
Release : 0.1.1
Summary : Network traffic analyzer
Description :
Ethereal is a network traffic analyzer for Unix-ish operating
systems.
This package lays base for libpcap, a packet capture and
filtering library, contains command-line utilities, contains
plugins and documentation for ethereal. A graphical user interface
is packaged separately to GTK+ package.
Update Information:
Issues have been discovered in the following protocol
dissectors:
- A SIP packet could make Ethereal crash under specific
conditions, as described in the following message:
http://www.ethereal.com/lists/ethereal-users/200405/msg00018.html
(0.10.3). - The AIM dissector could throw an assertion, causing Ethereal to
terminate abnormally (0.10.3). - It was possible for the SPNEGO dissector to dereference a null
pointer, causing a crash (0.9.8 to 0.10.3). - The MMSE dissector was susceptible to a buffer overflow.
(0.10.1 to 0.10.3).
All users of Ethereal are strongly encouraged to update to these
latest packages.
* Fri May 28 2004 Phil Knirsch <pknirsch@redhat.com>
0.10.3-0.1.1
- Updated to ethereal-0.10.3
- Included backported security fixes from ethereal-0.10.4
- Wed Mar 24 2004 Phil Knirsch <pknirsch@redhat.com> 0.10.2.20040324-0.1
- Another updated to CVS version to fix more security problems.
- Mon Mar 15 2004 Phil Knirsch <pknirsch@redhat.com>
0.10.2-0.1
- Mon Mar 15 2004 Phil Knirsch <pknirsch@redhat.com>
- Update to latest upstream version 0.10.2.
- Make security errata.
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
1025a0c7d6dbe9369a2353764ddbc7b9
SRPMS/ethereal-0.10.3-0.1.1.src.rpm
124a9a2914c592276bd0427009c7883c
i386/ethereal-0.10.3-0.1.1.i386.rpm
3ec831cf4eaddee5184ddd18796aedc3
i386/ethereal-gnome-0.10.3-0.1.1.i386.rpm
3504ec2a5dfd51cde2b1262644e5ccf0
i386/debug/ethereal-debuginfo-0.10.3-0.1.1.i386.rpm
441e043616370ee4b13e81ca20094d61
x86_64/ethereal-0.10.3-0.1.1.x86_64.rpm
ad048fccfa453591c96f3dabc18c5f14
x86_64/ethereal-gnome-0.10.3-0.1.1.x86_64.rpm
f89c1bf94f358917813352a0cd82b561
x86_64/debug/ethereal-debuginfo-0.10.3-0.1.1.x86_64.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the ‘up2date’ command.
—
Philipp Knirsch