Security World: [SECURITY] [DSA 1942-1] New wireshark packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
Debian Security Advisory DSA-1942-1 security@debian.org
http://www.debian.org/security/ Moritz Muehlenhoff
November 29, 2009 http://www.debian.org/security/faq
- ------------------------------------------------------------------------

Package : wireshark
Vulnerability : several
Problem type : remote
Debian-specific: no
CVE Id(s) : CVE-2009-1268 CVE-2008-1829 CVE-2009-2560 CVE-2009-2562 CVE-2009-3241 CVE-2009-3550 CVE-2009-3829

Several remote vulnerabilities have been discovered in the Wireshark
network traffic analyzer, which may lead to the execution of arbitrary
code or denial of service. The Common Vulnerabilities and Exposures
project identifies the following problems:

CVE-2009-2560

A NULL pointer dereference was found in the RADIUS dissector.

CVE-2009-3550

A NULL pointer dereference was found in the DCERP/NT dissector.

CVE-2009-3829

An integer overflow was discovered in the ERF parser.

This update also includes fixes for three minor issues, which were
scheduled for the next stable point update. (CVE-2008-1829,
CVE-2009-2562, CVE-2009-3241). Also CVE-2009-1268 was fixed for Etch.
Since this security update was issued prior to the release of the
point update, the fixes were included.

For the old stable distribution (etch), this problem has been fixed in
version 0.99.4-5.etch.4.

For the stable distribution (lenny), this problem has been fixed in
version 1.0.2-3+lenny7.

For the unstable distribution (sid) these problems have been fixed in
version 1.2.3-1.

We recommend that you upgrade your Wireshark packages.

Upgrade instructions
- --------------------

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.

Debian GNU/Linux 4.0 alias etch
- -------------------------------

Oldstable updates are available for alpha, amd64, arm, hppa, i386, ia64, mips, mipsel, powerpc, s390 and sparc.

Source archives:

http://security.debian.org/pool/updates/main/w/wireshark/wireshark_0.99.4.orig.tar.gz
Size/MD5 checksum: 13306790 2556a31d0d770dd1990bd67b98bd2f9b
http://security.debian.org/pool/updates/main/w/wireshark/wireshark_0.99.4-5.etch.4.dsc
Size/MD5 checksum: 1075 2ff729c1b7aae033dd3e79fb29a63d68
http://security.debian.org/pool/updates/main/w/wireshark/wireshark_0.99.4-5.etch.4.diff.gz
Size/MD5 checksum: 55126 25d98bc41c567ebc537f05ce2b36aa31

alpha architecture (DEC Alpha)

amd64 architecture (AMD x86_64 (AMD64))

arm architecture (ARM)

http://security.debian.org/pool/updates/main/w/wireshark/tethereal_0.99.4-5.etch.4_arm.deb
Size/MD5 checksum: 21906 63ad883dd41145fbe730954c9e853388
http://security.debian.org/pool/updates/main/w/wireshark/ethereal_0.99.4-5.etch.4_arm.deb
Size/MD5 checksum: 21894 4b84544460f1fb35ea30b6a14c669ef4
http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev_0.99.4-5.etch.4_arm.deb
Size/MD5 checksum: 182202 6fb71186a9da6540c1d85630ab24cd1c
http://security.debian.org/pool/updates/main/w/wireshark/tshark_0.99.4-5.etch.4_arm.deb
Size/MD5 checksum: 107214 a5e3093fef0133b17f538b65b8d87342
http://security.debian.org/pool/updates/main/w/wireshark/wireshark-common_0.99.4-5.etch.4_arm.deb
Size/MD5 checksum: 7737436 9b38f9f70345db66a4cd251c78584074
http://security.debian.org/pool/updates/main/w/wireshark/ethereal-common_0.99.4-5.etch.4_arm.deb
Size/MD5 checksum: 22170 592174ccf980e88b00bfeb0bc6fadff8
http://security.debian.org/pool/updates/main/w/wireshark/wireshark_0.99.4-5.etch.4_arm.deb
Size/MD5 checksum: 600704 96858438e740b509da8701ebc4dd56b8
http://security.debian.org/pool/updates/main/w/wireshark/ethereal-dev_0.99.4-5.etch.4_arm.deb
Size/MD5 checksum: 21908 a283e65475356d9e945da09890b0427a

hppa architecture (HP PA RISC)

i386 architecture (Intel ia32)

ia64 architecture (Intel ia64)

mips architecture (MIPS (Big Endian))

mipsel architecture (MIPS (Little Endian))

http://security.debian.org/pool/updates/main/w/wireshark/wireshark-common_0.99.4-5.etch.4_mipsel.deb
Size/MD5 checksum: 7405334 a65008d2ff4d5ad004870805554bc3e7
http://security.debian.org/pool/updates/main/w/wireshark/wireshark_0.99.4-5.etch.4_mipsel.deb
Size/MD5 checksum: 575950 a24c28544c0a7c90c91567fbe1cc1ebd
http://security.debian.org/pool/updates/main/w/wireshark/tshark_0.99.4-5.etch.4_mipsel.deb
Size/MD5 checksum: 104576 b32a2cbcdf02d4cc48c7ebec6c6630b3
http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev_0.99.4-5.etch.4_mipsel.deb
Size/MD5 checksum: 182756 cb2276effe227636a7f0261b34d50642
http://security.debian.org/pool/updates/main/w/wireshark/ethereal-dev_0.99.4-5.etch.4_mipsel.deb
Size/MD5 checksum: 22572 50a34025145b9c68619536836137bbb3
http://security.debian.org/pool/updates/main/w/wireshark/tethereal_0.99.4-5.etch.4_mipsel.deb
Size/MD5 checksum: 22564 a6bf0c153e84a88219f4ea41a420886b
http://security.debian.org/pool/updates/main/w/wireshark/ethereal-common_0.99.4-5.etch.4_mipsel.deb
Size/MD5 checksum: 22910 ffccf61f6478f35c91ffe9573f9efb25
http://security.debian.org/pool/updates/main/w/wireshark/ethereal_0.99.4-5.etch.4_mipsel.deb
Size/MD5 checksum: 22556 e854c72d464872867e22681111fd3229

powerpc architecture (PowerPC)

s390 architecture (IBM S/390)

http://security.debian.org/pool/updates/main/w/wireshark/ethereal-common_0.99.4-5.etch.4_s390.deb
Size/MD5 checksum: 22914 bd4eebd01f47b771d46feb10cd370e68
http://security.debian.org/pool/updates/main/w/wireshark/ethereal-dev_0.99.4-5.etch.4_s390.deb
Size/MD5 checksum: 22574 ae0f0e473a8b4d1393d42db4f8c8ce2a
http://security.debian.org/pool/updates/main/w/wireshark/tshark_0.99.4-5.etch.4_s390.deb
Size/MD5 checksum: 115668 0ad97c94342ac14d4acebe5969ef7379
http://security.debian.org/pool/updates/main/w/wireshark/wireshark-common_0.99.4-5.etch.4_s390.deb
Size/MD5 checksum: 9752846 f122226986acd89968a30710348205c6
http://security.debian.org/pool/updates/main/w/wireshark/ethereal_0.99.4-5.etch.4_s390.deb
Size/MD5 checksum: 22560 079c886952f5258ed59f6d1573890140
http://security.debian.org/pool/updates/main/w/wireshark/wireshark_0.99.4-5.etch.4_s390.deb
Size/MD5 checksum: 641020 3fd0f64fcaea16198e9533084cd0b567
http://security.debian.org/pool/updates/main/w/wireshark/tethereal_0.99.4-5.etch.4_s390.deb
Size/MD5 checksum: 22566 a4db075ff6f6877289c6333e55a791ab
http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev_0.99.4-5.etch.4_s390.deb
Size/MD5 checksum: 182782 b1f4a269dd14fab055fed4a60dcb5c12

sparc architecture (Sun SPARC/UltraSPARC)

Debian GNU/Linux 5.0 alias lenny
- --------------------------------

Stable updates are available for alpha, amd64, arm, armel, hppa, i386, ia64, mips, mipsel, powerpc, s390 and sparc.

Source archives:

http://security.debian.org/pool/updates/main/w/wireshark/wireshark_1.0.2-3+lenny7.diff.gz
Size/MD5 checksum: 110161 250e28a303aa2313bf9c8c92e938b543
http://security.debian.org/pool/updates/main/w/wireshark/wireshark_1.0.2.orig.tar.gz
Size/MD5 checksum: 16935492 1834437f7c6dbed02082e7757133047d
http://security.debian.org/pool/updates/main/w/wireshark/wireshark_1.0.2-3+lenny7.dsc
Size/MD5 checksum: 1502 70bc384e5c51e5b1c05817b5404ec0c6

alpha architecture (DEC Alpha)

http://security.debian.org/pool/updates/main/w/wireshark/tshark_1.0.2-3+lenny7_alpha.deb
Size/MD5 checksum: 126172 5b2e9b063121cd415647515718aa1f90
http://security.debian.org/pool/updates/main/w/wireshark/wireshark_1.0.2-3+lenny7_alpha.deb
Size/MD5 checksum: 731338 7691c8c717923ad7f11755393c67ed4b
http://security.debian.org/pool/updates/main/w/wireshark/wireshark-common_1.0.2-3+lenny7_alpha.deb
Size/MD5 checksum: 12096806 f7a7e542ab24455fde2d62258e35dfe6
http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev_1.0.2-3+lenny7_alpha.deb
Size/MD5 checksum: 583592 2dc280bc416e8a8eba573f10bd9a4c61

amd64 architecture (AMD x86_64 (AMD64))

http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev_1.0.2-3+lenny7_amd64.deb
Size/MD5 checksum: 583890 2dc231341d713172bff1e122b5c1ed53
http://security.debian.org/pool/updates/main/w/wireshark/wireshark_1.0.2-3+lenny7_amd64.deb
Size/MD5 checksum: 659554 f4d744de8dc70ff988e2c625505545cb
http://security.debian.org/pool/updates/main/w/wireshark/tshark_1.0.2-3+lenny7_amd64.deb
Size/MD5 checksum: 119016 f6c6d48c2f7cc0f47d112df9c74302b4
http://security.debian.org/pool/updates/main/w/wireshark/wireshark-common_1.0.2-3+lenny7_amd64.deb
Size/MD5 checksum: 11869634 c33d47f0ba58f5b476a3038aa54e10ca

arm architecture (ARM)

http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev_1.0.2-3+lenny7_arm.deb
Size/MD5 checksum: 584248 eda8fbd1f0706d58b7d25ed6f2646e6b
http://security.debian.org/pool/updates/main/w/wireshark/wireshark_1.0.2-3+lenny7_arm.deb
Size/MD5 checksum: 614108 fd591bbf2469527ea552e0dbbb4eed26
http://security.debian.org/pool/updates/main/w/wireshark/tshark_1.0.2-3+lenny7_arm.deb
Size/MD5 checksum: 111024 6800249d87bb21dceb604527ec92b654
http://security.debian.org/pool/updates/main/w/wireshark/wireshark-common_1.0.2-3+lenny7_arm.deb
Size/MD5 checksum: 10215708 a33f1fa02617480ed3321d552a5b2e08

armel architecture (ARM EABI)

http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev_1.0.2-3+lenny7_armel.deb
Size/MD5 checksum: 584856 3dd565d67eb4c6e18b21623292c4551f
http://security.debian.org/pool/updates/main/w/wireshark/wireshark_1.0.2-3+lenny7_armel.deb
Size/MD5 checksum: 619918 06683265eff3c5ca0853a9b3c053af48
http://security.debian.org/pool/updates/main/w/wireshark/tshark_1.0.2-3+lenny7_armel.deb
Size/MD5 checksum: 113466 14b53be93f55eb1430a25264361cb87d
http://security.debian.org/pool/updates/main/w/wireshark/wireshark-common_1.0.2-3+lenny7_armel.deb
Size/MD5 checksum: 10216784 6c1f84c62053658adcc6c14822f4a64a

hppa architecture (HP PA RISC)

http://security.debian.org/pool/updates/main/w/wireshark/wireshark-common_1.0.2-3+lenny7_hppa.deb
Size/MD5 checksum: 13271300 55580fd284ab37e4bae7fcc9b1ee4669
http://security.debian.org/pool/updates/main/w/wireshark/wireshark_1.0.2-3+lenny7_hppa.deb
Size/MD5 checksum: 694714 6cae9b82e13e3c812ea0e3286955a35e
http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev_1.0.2-3+lenny7_hppa.deb
Size/MD5 checksum: 584266 7c55dcbb1727e575ed3a99f5e22ba9f2
http://security.debian.org/pool/updates/main/w/wireshark/tshark_1.0.2-3+lenny7_hppa.deb
Size/MD5 checksum: 120924 734b01b1cebfa52fac30578a22104902

i386 architecture (Intel ia32)

http://security.debian.org/pool/updates/main/w/wireshark/wireshark-common_1.0.2-3+lenny7_i386.deb
Size/MD5 checksum: 10108360 5157ee3d041ccbb2931e13a8551706ff
http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev_1.0.2-3+lenny7_i386.deb
Size/MD5 checksum: 582516 2621c64b953d5f87b0f80ba8614637f9
http://security.debian.org/pool/updates/main/w/wireshark/wireshark_1.0.2-3+lenny7_i386.deb
Size/MD5 checksum: 619208 4a34e3203d08488ac5df37bdfde269a6
http://security.debian.org/pool/updates/main/w/wireshark/tshark_1.0.2-3+lenny7_i386.deb
Size/MD5 checksum: 111392 aac2e88f950cbf280786af3449a952f8

ia64 architecture (Intel ia64)

http://security.debian.org/pool/updates/main/w/wireshark/wireshark-common_1.0.2-3+lenny7_ia64.deb
Size/MD5 checksum: 13688788 0b6e89ff7c538a86479e2cc72e98d048
http://security.debian.org/pool/updates/main/w/wireshark/tshark_1.0.2-3+lenny7_ia64.deb
Size/MD5 checksum: 153864 d49889a0de70d2a4ae08397b43e16d59
http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev_1.0.2-3+lenny7_ia64.deb
Size/MD5 checksum: 569656 690330248a894259db9caef7d032627a
http://security.debian.org/pool/updates/main/w/wireshark/wireshark_1.0.2-3+lenny7_ia64.deb
Size/MD5 checksum: 930064 b697cd603d6769efaa24975f41038a87

mips architecture (MIPS (Big Endian))

http://security.debian.org/pool/updates/main/w/wireshark/tshark_1.0.2-3+lenny7_mips.deb
Size/MD5 checksum: 112318 4fcb6546e6d121413976df774bcb4e0a
http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev_1.0.2-3+lenny7_mips.deb
Size/MD5 checksum: 583750 2bdf2ecef90acdc4cd450aebeba1d8b3
http://security.debian.org/pool/updates/main/w/wireshark/wireshark_1.0.2-3+lenny7_mips.deb
Size/MD5 checksum: 636448 7bcf284817662a74d8c00bb7b7d3156b
http://security.debian.org/pool/updates/main/w/wireshark/wireshark-common_1.0.2-3+lenny7_mips.deb
Size/MD5 checksum: 10417404 cfd63f84d47af76a912b86ef5b58b3d7

mipsel architecture (MIPS (Little Endian))

http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev_1.0.2-3+lenny7_mipsel.deb
Size/MD5 checksum: 569688 d0219a56c1ef0b9bab390cb785670dcf
http://security.debian.org/pool/updates/main/w/wireshark/wireshark-common_1.0.2-3+lenny7_mipsel.deb
Size/MD5 checksum: 9730674 4ec33f0b1ab577373d3d65226edd48cb
http://security.debian.org/pool/updates/main/w/wireshark/tshark_1.0.2-3+lenny7_mipsel.deb
Size/MD5 checksum: 113170 e17b2b66a26cd2b86b878b1bb6927fb1
http://security.debian.org/pool/updates/main/w/wireshark/wireshark_1.0.2-3+lenny7_mipsel.deb
Size/MD5 checksum: 626942 938890f711e3cd6f84f504d8874372b9

powerpc architecture (PowerPC)

http://security.debian.org/pool/updates/main/w/wireshark/wireshark-common_1.0.2-3+lenny7_powerpc.deb
Size/MD5 checksum: 11227316 dbcd7366171cec00edf706699b91399f
http://security.debian.org/pool/updates/main/w/wireshark/tshark_1.0.2-3+lenny7_powerpc.deb
Size/MD5 checksum: 122336 672aedc7957f3ae9f18e5e6ce33da56f
http://security.debian.org/pool/updates/main/w/wireshark/wireshark_1.0.2-3+lenny7_powerpc.deb
Size/MD5 checksum: 677424 06cdd9eef16be333ccb60b94e3309d16
http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev_1.0.2-3+lenny7_powerpc.deb
Size/MD5 checksum: 584610 cc6c9ad46b6e371764cb7193d6a18214

s390 architecture (IBM S/390)

http://security.debian.org/pool/updates/main/w/wireshark/tshark_1.0.2-3+lenny7_s390.deb
Size/MD5 checksum: 121886 9f312812e02428d07075d543b99d41ba
http://security.debian.org/pool/updates/main/w/wireshark/wireshark-common_1.0.2-3+lenny7_s390.deb
Size/MD5 checksum: 12488896 55d3da11d6a7a5af75d549b08e0dd59f
http://security.debian.org/pool/updates/main/w/wireshark/wireshark_1.0.2-3+lenny7_s390.deb
Size/MD5 checksum: 671222 331a3c79fd70ea249cab31263686d678
http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev_1.0.2-3+lenny7_s390.deb
Size/MD5 checksum: 569648 08e4ba2371daeb6fcf724d7bf85d64be

sparc architecture (Sun SPARC/UltraSPARC)

http://security.debian.org/pool/updates/main/w/wireshark/wireshark-common_1.0.2-3+lenny7_sparc.deb
Size/MD5 checksum: 11290100 d57f0c2b031b2721e1298cfe7f4881ff
http://security.debian.org/pool/updates/main/w/wireshark/wireshark_1.0.2-3+lenny7_sparc.deb
Size/MD5 checksum: 629584 83b68e8b43bdf971116fdafc9fc885a5
http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev_1.0.2-3+lenny7_sparc.deb
Size/MD5 checksum: 569692 e006fc660e26f034936184464d2f540b
http://security.debian.org/pool/updates/main/w/wireshark/tshark_1.0.2-3+lenny7_sparc.deb
Size/MD5 checksum: 113466 85d3fa0b0e7baf6b1679394cffea5948

These files will probably be moved into the stable distribution on
its next update.

- ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAksSwZ0ACgkQXm3vHE4uylowlACg0A+Ht64yIVxPcpnb+zrKvKJy
ye4An0XWpeRT5aX3R3QR8hoxR1rE51vB
=RCnv
-----END PGP SIGNATURE-----

--
To UNSUBSCRIBE, email to debian-security-announce-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Security World

Search This Blog

Sunday, November 29, 2009

[SECURITY] [DSA 1942-1] New wireshark packages fix several vulnerabilities

No comments: