-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 653-1 security@xxxxxxxxxx http://www.debian.org/security/ Martin Schulze January 21st, 2005 http://www.debian.org/security/faq - -------------------------------------------------------------------------- Package : ethereal Vulnerability : buffer overflow Problem-Type : remote Debian-specific: no CVE ID : CAN-2005-0084 A buffer overflow has been detected in the X11 dissector of ethereal, a commonly used network traffic analyser. A remote attacker may be able to overflow a buffer using a specially crafted IP packet. More problems have been discovered which don't apply to the version in woody but are fixed in sid as well. For the stable distribution (woody) this problem has been fixed in version 0.9.4-1woody11. For the unstable distribution (sid) this problem has been fixed in version 0.10.9-1. We recommend that you upgrade your ethereal package. Upgrade Instructions - -------------------- wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.0 alias woody - -------------------------------- Source archives: http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11.dsc Size/MD5 checksum: 681 8e8bbe73bf65d45446fb7c03dddb41a1 http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11.diff.gz Size/MD5 checksum: 40601 a9a6e17ee6c2e1749ac3d140628c77c6 http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4.orig.tar.gz Size/MD5 checksum: 3278908 42e999daa659820ee93aaaa39ea1e9ea Alpha architecture: http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_alpha.deb Size/MD5 checksum: 1941102 aab1360769a64476ce4113068230c8ad http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_alpha.deb Size/MD5 checksum: 334424 c3647ca04af3f48b4e24ec6ae2fa6b4d http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_alpha.deb Size/MD5 checksum: 222460 06e7e8c5713efa6f102bb436c6251e61 http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_alpha.deb Size/MD5 checksum: 1707844 08f64c248a99394a8366ca5b512e096d ARM architecture: http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_arm.deb Size/MD5 checksum: 1635456 190bd5415abaf62c1cde340605079152 http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_arm.deb Size/MD5 checksum: 297770 6d5ee1df687aeee0e49d4bc27cfab0da http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_arm.deb Size/MD5 checksum: 206356 fcba9b5be975e62bd5cf8efca338a299 http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_arm.deb Size/MD5 checksum: 1439676 d825f5c16e37f1a5c1a7aaa6ba0798b1 Intel IA-32 architecture: http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_i386.deb Size/MD5 checksum: 1513338 996070722f320a6d6d40652101480ec6 http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_i386.deb Size/MD5 checksum: 286736 69fd768db07ee2ac52b33f3188fdba97 http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_i386.deb Size/MD5 checksum: 198652 50e416b732e5d02d1f8e6bfb5269d1f9 http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_i386.deb Size/MD5 checksum: 1326536 c8415c2297b0bc30a297b3b07e0a1186 Intel IA-64 architecture: http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_ia64.deb Size/MD5 checksum: 2150414 b46cc7da4c46e2a920299cef6d6f1f1c http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_ia64.deb Size/MD5 checksum: 373372 1b977535a20b449ea7c1b21e09f9493b http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_ia64.deb Size/MD5 checksum: 234004 e8c69f3f1db9708ceb2e74122e81c168 http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_ia64.deb Size/MD5 checksum: 1861780 6c48358d2c8c892d24ebbc29b020931d HP Precision architecture: http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_hppa.deb Size/MD5 checksum: 1804712 495491720997b53f60f5b9dbfeabac27 http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_hppa.deb Size/MD5 checksum: 322696 cccbc77685f25eb8aa1a8429e0298dd7 http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_hppa.deb Size/MD5 checksum: 217116 3bcb0ff60d01b12b85d25ee6e277fbe2 http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_hppa.deb Size/MD5 checksum: 1576164 67ecb81ffa522198b999353ce6294b19 Motorola 680x0 architecture: http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_m68k.deb Size/MD5 checksum: 1424704 7014155418ca6c1947e71a04ab716b03 http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_m68k.deb Size/MD5 checksum: 282996 c73d8c241771bbe5f89c1e859e436aba http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_m68k.deb Size/MD5 checksum: 195364 21d07bf8bb05d52dfd45d91c73c656a6 http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_m68k.deb Size/MD5 checksum: 1248922 5cd077cf05e8e14f627a10e44ced739d Big endian MIPS architecture: http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_mips.deb Size/MD5 checksum: 1617160 41dd4cd8059c472ff109bb002d9b5074 http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_mips.deb Size/MD5 checksum: 305514 855a56f8596f0bb4da7fe0024616d87a http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_mips.deb Size/MD5 checksum: 213936 8459c58071700c436ea96af9a6fd7901 http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_mips.deb Size/MD5 checksum: 1422110 bdcdf3c021429ccaf8eb95027a48f69e Little endian MIPS architecture: http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_mipsel.deb Size/MD5 checksum: 1598210 0c60efc6fcdea7d25359ecd88dd8aeff http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_mipsel.deb Size/MD5 checksum: 304982 63cea39a93b19891ae0bbfaa8c5e0327 http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_mipsel.deb Size/MD5 checksum: 213596 e7d160f30cd5e9360fc90d4ef160dfb6 http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_mipsel.deb Size/MD5 checksum: 1406444 e8f3d141f724da42a16d051c12879efb PowerPC architecture: http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_powerpc.deb Size/MD5 checksum: 1618676 f3890280569d1b2a7e66c039c0def6b4 http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_powerpc.deb Size/MD5 checksum: 302174 d5c364dcb6039f637005c4ce259bed2c http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_powerpc.deb Size/MD5 checksum: 209172 ae06ac9e4e976d4fd846b3b222efe911 http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_powerpc.deb Size/MD5 checksum: 1419454 2a6a56b278e0e647cbb7c41881e5aaa0 IBM S/390 architecture: http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_s390.deb Size/MD5 checksum: 1574786 17c662f34613b6b0fb24e033dd1fc463 http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_s390.deb Size/MD5 checksum: 301014 7f0c78cce38eb8927b708146cb4b8463 http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_s390.deb Size/MD5 checksum: 204250 f85efb4e0c75da840c7b1224292f7005 http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_s390.deb Size/MD5 checksum: 1387552 c4e2e39307ca9b70793e1b8a6dc9a3ee Sun Sparc architecture: http://security.debian.org/pool/updates/main/e/ethereal/ethereal_0.9.4-1woody11_sparc.deb Size/MD5 checksum: 1583368 199f9efbe4d98e43882bb28d054c8ff6 http://security.debian.org/pool/updates/main/e/ethereal/ethereal-common_0.9.4-1woody11_sparc.deb Size/MD5 checksum: 318282 87d2b4c8298e3e179d89aa3827602011 http://security.debian.org/pool/updates/main/e/ethereal/ethereal-dev_0.9.4-1woody11_sparc.deb Size/MD5 checksum: 205026 0c71e4c61947bc0f198de8d66a1892b4 http://security.debian.org/pool/updates/main/e/ethereal/tethereal_0.9.4-1woody11_sparc.deb Size/MD5 checksum: 1389390 8327f812bcaee04cf83fc34f8450aacc These files will probably be moved into the stable distribution on its next update. - --------------------------------------------------------------------------------- For apt-get: deb http://security.debian.org/ stable/updates main For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main Mailing list: debian-security-announce@xxxxxxxxxxxxxxxx Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) iD8DBQFB8OiHW5ql+IAeqTIRAhEJAJ9dEuKVcXscQbAZrd6VmZ0de5Ou6wCcDHAN gcBn2Bp/9cc2FXzr5L6ccps= =2QHP -----END PGP SIGNATURE-----
