Fedora Core 3 Ethereal Update 2005-212 Moderate: Buffer Overflow

Ethereal is a network traffic analyzer for Unix-ish operating systems.

This package lays base for libpcap, a packet capture and filtering

library, contains command-line utilities, contains plugins and

documentation for ethereal. A graphical user interface is packaged

separately to GTK+ package.

- new release, fixes three security and stability-related issues (#150706)

- a buffer overflow in the Etheric dissector. (CAN-2005-0704)

- the GPRS-LLC dissector could crash if the "ignore cipher bit" option was enabled. (CAN-2005-0705)

- a buffer overflow in the 3GPP2 A11 dissector (CAN-2005-0699)

- a buffer overflow in the IAPP dissector.

- a bug in the JXTA dissector could make Ethereal crash.

- a bug in the sFlow dissector could make Ethereal crash.

1126176a3dd5188ad2f3ee809ccc0a47 SRPMS/ethereal-0.10.10-1.FC3.1.src.rpm

9e99494874fc7f6a15049518bc9d19de x86_64/ethereal-0.10.10-1.FC3.1.x86_64.rpm

756c718b259de399aee4367be6a01e3e x86_64/ethereal-gnome-0.10.10-1.FC3.1.x86_64.rpm

af48dd6d29f649baf1824f7b56c39a09 x86_64/debug/ethereal-debuginfo-0.10.10-1.FC3.1.x86_64.rpm

b5842f3904bf5f8410e3339a84e05e99 i386/ethereal-0.10.10-1.FC3.1.i386.rpm

fdd98d6e39b2ae05662087f3d39dc086 i386/ethereal-gnome-0.10.10-1.FC3.1.i386.rpm

b794e631c2a959d0b6a3b7a35236e016 i386/debug/ethereal-debuginfo-0.10.10-1.FC3.1.i386.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

fedora-announce-list@redhat.com