Trustix Secure Linux Advisory: tcpdump

- --------------------------------------------------------------------------
Trustix Secure Linux Security Advisory #2002-0055

Package name:      tcpdump
Summary:           Minor bugfix
Date:              2002-06-05
Affected versions: TSL 1.1, 1.2, 1.5

- --------------------------------------------------------------------------

Problem description:
  The old tcpdump-packages included a buffer overflow that could be triggered 
  when tracing the network by a bad NFS packet.
  
  We have updated the tcpdump package in TSL-1.1 through 1.5, and hva done some
  additional modifications in TSL-1.1 and 1.2:

  The old tcpdump source package also built the libpcap and arpwatch binary 
  packages. We feel this setup is not needed, and have added both libpcap and 
  arpwatch as independable source packages, as done in TSL-1.5.

  Due to serial being set in the old TSL-1.1 and 1.2 tcpdump packages, you must
  upgrade the libpcap, and arpwatch packages manually, using the following:

  rpm -Uvh --oldpackage [new-package]

  Note that this is not necessary when upgrading TSL-1.5


Action:
  We recommend that all systems with this package installed are upgraded.

Location:
  All TSL updates are available from
  <URI:http://www.trustix.net/pub/Trustix/updates/>
  <URI:ftp://ftp.trustix.net/pub/Trustix/updates/>


Automatic updates:
  Users of the SWUP tool can enjoy having updates automatically
  installed using 'swup --upgrade'.

  Get SWUP from:
  <URI:ftp://ftp.trustix.net/pub/Trustix/software/swup/>


Public testing:
  These packages have been available for public testing for some time.
  If you want to contribute by testing the various packages in the
  testing tree, please feel free to share your findings on the
  tsl-discuss mailinglist.
  The testing tree is located at
  <URI:http://www.trustix.net/pub/Trustix/testing/>
  <URI:ftp://ftp.trustix.net/pub/Trustix/testing/>
  

Questions?
  Check out our mailing lists:
  <URI:http://www.trustix.net/support/>


Verification:
  This advisory along with all TSL packages are signed with the TSL sign key.
  This key is available from:
  <URI:http://www.trustix.net/TSL-GPG-KEY>

  The advisory itself is available from the errata pages at
  <URI:http://www.trustix.net/errata/trustix-1.2/> and
  <URI:http://www.trustix.net/errata/trustix-1.5/>
  or directly at
  <URI:http://www.trustix.net/errata/misc/2002/TSL-2002-0055-tcpdump.asc.txt>

MD5sums of the packages:
- --------------------------------------------------------------------------
acabb1cddbd7c46b214b9467249a890e  ./1.5/SRPMS/tcpdump-3.6.2-3tr.src.rpm
45a90826509143075a37897b6d82cbd7  ./1.5/RPMS/tcpdump-3.6.2-3tr.i586.rpm
acabb1cddbd7c46b214b9467249a890e  ./1.2/SRPMS/tcpdump-3.6.2-3tr.src.rpm
dd6aae44a1c99d77fd2ecb9b6ed1320d  ./1.2/RPMS/tcpdump-3.6.2-3tr.i586.rpm
acabb1cddbd7c46b214b9467249a890e  ./1.1/SRPMS/tcpdump-3.6.2-3tr.src.rpm
d6defec55c519d712ea4b35f102a8035  ./1.1/RPMS/tcpdump-3.6.2-3tr.i586.rpm
80ead6877b5c9a90ee54054848dc29d3  ./1.2/SRPMS/libpcap-0.6.2-1tr.src.rpm
7063d2c28c2a73f98c77778a4bdd78ee  ./1.2/RPMS/libpcap-0.6.2-1tr.i586.rpm
80ead6877b5c9a90ee54054848dc29d3  ./1.1/SRPMS/libpcap-0.6.2-1tr.src.rpm
8de56f4d92bb3527171a8d7dc3781aab  ./1.1/RPMS/libpcap-0.6.2-1tr.i586.rpm
6aab148bfa2b2318eb1e66662ab706b7  ./1.2/SRPMS/arpwatch-2.1a11-1tr.src.rpm
7e24da863e061c85960cdccce09ebb75  ./1.2/RPMS/arpwatch-2.1a11-1tr.i586.rpm
6aab148bfa2b2318eb1e66662ab706b7  ./1.1/SRPMS/arpwatch-2.1a11-1tr.src.rpm
21abbb29c15780184a483b2d73935984  ./1.1/RPMS/arpwatch-2.1a11-1tr.i586.rpm
- --------------------------------------------------------------------------


Trustix Security Team