---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2006-813
2006-07-31
---------------------------------------------------------------------
Product : Fedora Core 5
Name : NetworkManager
Version : 0.6.4
Release : 1.fc5
Summary : Network connection manager and user applications
Description :
NetworkManager attempts to keep an active network connection available at all
times. It is intended only for the desktop use-case, and is not intended for
usage on servers. The point of NetworkManager is to make networking
configuration and setup as painless and automatic as possible. If using DHCP,
NetworkManager is _intended_ to replace default routes, obtain IP addresses
from a DHCP server, and change nameservers whenever it sees fit.
---------------------------------------------------------------------
Update Information:
Update to 0.6.4 release
---------------------------------------------------------------------
* Fri Jul 14 2006 Dan Williams <dcbw(a)redhat.com> - 0.6.4-1
- Update to 0.6.4 release
* Thu Jun 8 2006 Dan Williams <dcbw(a)redhat.com> - 0.6.3-1
- Update to 0.6.3 release
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/
bda031ec1e20698526e769fbf0b91b91f59039d5 SRPMS/NetworkManager-0.6.4-1.fc5.src.rpm
bda031ec1e20698526e769fbf0b91b91f59039d5 noarch/NetworkManager-0.6.4-1.fc5.src.rpm
014260fc2eb9001813879ac304fc62e19ff5a117 ppc/NetworkManager-gnome-0.6.4-1.fc5.ppc.rpm
54159498dc20b392c8bfe0b435723c11a85f43d2 ppc/NetworkManager-glib-devel-0.6.4-1.fc5.ppc.rpm
edf2bba5208b9a9f14545fc56a674e73b77b79b4 ppc/NetworkManager-0.6.4-1.fc5.ppc.rpm
a6772f759433c32a5fc320722e037cd8683edafd ppc/NetworkManager-devel-0.6.4-1.fc5.ppc.rpm
3f9b44f2a2fb6abd2775f55bdf36af8843710a5c ppc/NetworkManager-glib-0.6.4-1.fc5.ppc.rpm
6ec755404ed7d80bb273e5009202be5de1e3bb80 ppc/debug/NetworkManager-debuginfo-0.6.4-1.fc5.ppc.rpm
a8a454537fdd1d9a250deca6158370d138263bd7 x86_64/NetworkManager-gnome-0.6.4-1.fc5.x86_64.rpm
da501275ebab367231a221f7f1a8c1daa6eb8686 x86_64/NetworkManager-glib-0.6.4-1.fc5.x86_64.rpm
60e7f7bd4d6c6ce5ff86ca20f9b445612dd185e0 x86_64/NetworkManager-glib-devel-0.6.4-1.fc5.x86_64.rpm
44e09f85fc9daeb6757cb2f6269cced7e3d76cb0 x86_64/NetworkManager-devel-0.6.4-1.fc5.x86_64.rpm
a4443e5aa255b2d8e40552f5c52b9d35fa2fa23a x86_64/debug/NetworkManager-debuginfo-0.6.4-1.fc5.x86_64.rpm
526297b8039b576aa4f6b09efb1bb8b699de5a55 x86_64/NetworkManager-0.6.4-1.fc5.x86_64.rpm
31b6bfeef59613f08d671090e55d39e003db84c9 i386/NetworkManager-glib-0.6.4-1.fc5.i386.rpm
7c5005120d55308ea26fb66584cbf204ba23c9b0 i386/NetworkManager-devel-0.6.4-1.fc5.i386.rpm
230d56972d9782ebcdeca19b26d883fe28c14d6d i386/debug/NetworkManager-debuginfo-0.6.4-1.fc5.i386.rpm
21ebbcdcd550ee00c111914404c5903ad4a2fd79 i386/NetworkManager-glib-devel-0.6.4-1.fc5.i386.rpm
b480938b0cf34bf27cbab0530a096f610f70796f i386/NetworkManager-gnome-0.6.4-1.fc5.i386.rpm
da4c8d2803acf00c660beb9bfbbbcdad284ceb96 i386/NetworkManager-0.6.4-1.fc5.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2006-841
2006-07-31
---------------------------------------------------------------------
Product : Fedora Core 5
Name : selinux-policy
Version : 2.3.3
Release : 8.fc5
Summary : SELinux policy configuration
Description :
SELinux Reference Policy - modular.
---------------------------------------------------------------------
* Fri Jul 21 2006 Dan Walsh <dwalsh(a)redhat.com> 2.3.3-8.fc5
- Bump for FC5
* Fri Jul 21 2006 Dan Walsh <dwalsh(a)redhat.com> 2.3.3-8
- Fixes for mls use of ssh
- named has a new conf file
* Fri Jul 21 2006 Dan Walsh <dwalsh(a)redhat.com> 2.3.3-7
- Fixes to make setroubleshoot work
* Wed Jul 19 2006 Dan Walsh <dwalsh(a)redhat.com> 2.3.3-6
- Cups needs to be able to read domain state off of printer client
* Wed Jul 19 2006 Dan Walsh <dwalsh(a)redhat.com> 2.3.3-5
- add boolean to allow zebra to write config files
* Tue Jul 18 2006 Dan Walsh <dwalsh(a)redhat.com> 2.3.3-4
- setroubleshootd fixes
* Mon Jul 17 2006 Dan Walsh <dwalsh(a)redhat.com> 2.3.3-3
- Allow prelink to read bin_t symlink
- allow xfs to read random devices
- Change gfs to support xattr
* Mon Jul 17 2006 Dan Walsh <dwalsh(a)redhat.com> 2.3.3-2
- Remove spamassassin_can_network boolean
* Fri Jul 14 2006 Dan Walsh <dwalsh(a)redhat.com> 2.3.3-1
- Update to upstream
- Fix lpr domain for mls
* Fri Jul 14 2006 Dan Walsh <dwalsh(a)redhat.com> 2.3.2-4
- Add setroubleshoot policy
* Fri Jul 7 2006 Dan Walsh <dwalsh(a)redhat.com> 2.3.2-3
- Turn off auditallow on setting booleans
* Fri Jul 7 2006 Dan Walsh <dwalsh(a)redhat.com> 2.3.2-2
- Multiple fixes
* Fri Jul 7 2006 Dan Walsh <dwalsh(a)redhat.com> 2.3.2-1.fc5
- Bump for FC-5
* Fri Jul 7 2006 Dan Walsh <dwalsh(a)redhat.com> 2.3.2-1
- Update to upstream
* Thu Jun 22 2006 Dan Walsh <dwalsh(a)redhat.com> 2.3.1-1
- Update to upstream
- Add new class for kernel key ring
* Wed Jun 21 2006 Dan Walsh <dwalsh(a)redhat.com> 2.2.49-1
- Update to upstream
* Tue Jun 20 2006 Dan Walsh <dwalsh(a)redhat.com> 2.2.48-1
- Update to upstream
* Tue Jun 20 2006 Dan Walsh <dwalsh(a)redhat.com> 2.2.47-5
- Break out selinux-devel package
* Fri Jun 16 2006 Dan Walsh <dwalsh(a)redhat.com> 2.2.47-4
- Add ibmasmfs
* Thu Jun 15 2006 Dan Walsh <dwalsh(a)redhat.com> 2.2.47-3.fc5
- Bump for fc5
* Thu Jun 15 2006 Dan Walsh <dwalsh(a)redhat.com> 2.2.47-3
- Fix policygentool gen_requires
* Tue Jun 13 2006 Dan Walsh <dwalsh(a)redhat.com> 2.2.47-1
- Update from Upstream
* Tue Jun 13 2006 Dan Walsh <dwalsh(a)redhat.com> 2.2.46-2
- Fix spec of realplay
* Tue Jun 13 2006 Dan Walsh <dwalsh(a)redhat.com> 2.2.46-1
- Update to upstream
* Mon Jun 12 2006 Dan Walsh <dwalsh(a)redhat.com> 2.2.45-3
- Fix semanage
* Mon Jun 12 2006 Dan Walsh <dwalsh(a)redhat.com> 2.2.45-2
- Allow useradd to create_home_dir in MLS environment
* Thu Jun 8 2006 Dan Walsh <dwalsh(a)redhat.com> 2.2.45-1
- Update from upstream
* Tue Jun 6 2006 Dan Walsh <dwalsh(a)redhat.com> 2.2.44-1
- Update from upstream
* Tue Jun 6 2006 Dan Walsh <dwalsh(a)redhat.com> 2.2.43-4.fc5
- Bump for fc5
* Tue Jun 6 2006 Dan Walsh <dwalsh(a)redhat.com> 2.2.43-4
- Add oprofilefs
* Sun May 28 2006 Dan Walsh <dwalsh(a)redhat.com> 2.2.43-3
- Fix for hplip and Picasus
* Sun May 28 2006 Dan Walsh <dwalsh(a)redhat.com> 2.2.43-2.fc5
- Bump for fc5
* Sat May 27 2006 Dan Walsh <dwalsh(a)redhat.com> 2.2.43-2
- Update to upstream
* Fri May 26 2006 Dan Walsh <dwalsh(a)redhat.com> 2.2.43-1
- Update to upstream
* Fri May 26 2006 Dan Walsh <dwalsh(a)redhat.com> 2.2.42-4
- fixes for spamd
* Wed May 24 2006 Dan Walsh <dwalsh(a)redhat.com> 2.2.42-3
- fixes for java, openldap and webalizer
* Tue May 23 2006 Dan Walsh <dwalsh(a)redhat.com> 2.2.42-2.fc5
- Bump for fc5
* Mon May 22 2006 Dan Walsh <dwalsh(a)redhat.com> 2.2.42-2
- Xen fixes
* Thu May 18 2006 Dan Walsh <dwalsh(a)redhat.com> 2.2.42-1
- Upgrade to upstream
* Thu May 18 2006 Dan Walsh <dwalsh(a)redhat.com> 2.2.41-1
- allow hal to read boot_t files
- Upgrade to upstream
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/
0b467a6bb54e6dec55e0c366db2b960ba9db376c SRPMS/selinux-policy-2.3.3-8.fc5.src.rpm
0b467a6bb54e6dec55e0c366db2b960ba9db376c noarch/selinux-policy-2.3.3-8.fc5.src.rpm
bd8dd71177c138555e31237bb71e6991648e6171 ppc/selinux-policy-2.3.3-8.fc5.noarch.rpm
289845834a7fbe7f60ebdd8f5b8947fad008fa67 ppc/selinux-policy-strict-2.3.3-8.fc5.noarch.rpm
3f983ed5256284c975d22b8f403314cc7fbde7f5 ppc/selinux-policy-mls-2.3.3-8.fc5.noarch.rpm
119cf21ee0dce183af5649c87c49b84b3069e227 ppc/selinux-policy-targeted-2.3.3-8.fc5.noarch.rpm
bd8dd71177c138555e31237bb71e6991648e6171 x86_64/selinux-policy-2.3.3-8.fc5.noarch.rpm
289845834a7fbe7f60ebdd8f5b8947fad008fa67 x86_64/selinux-policy-strict-2.3.3-8.fc5.noarch.rpm
3f983ed5256284c975d22b8f403314cc7fbde7f5 x86_64/selinux-policy-mls-2.3.3-8.fc5.noarch.rpm
119cf21ee0dce183af5649c87c49b84b3069e227 x86_64/selinux-policy-targeted-2.3.3-8.fc5.noarch.rpm
bd8dd71177c138555e31237bb71e6991648e6171 i386/selinux-policy-2.3.3-8.fc5.noarch.rpm
289845834a7fbe7f60ebdd8f5b8947fad008fa67 i386/selinux-policy-strict-2.3.3-8.fc5.noarch.rpm
3f983ed5256284c975d22b8f403314cc7fbde7f5 i386/selinux-policy-mls-2.3.3-8.fc5.noarch.rpm
119cf21ee0dce183af5649c87c49b84b3069e227 i386/selinux-policy-targeted-2.3.3-8.fc5.noarch.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2006-864
2006-07-31
---------------------------------------------------------------------
Product : Fedora Core 5
Name : icon-naming-utils
Version : 0.7.3
Release : 1.fc5
Summary : A script to handle icon names in desktop icon themes
Description :
A script for creating a symlink mapping for deprecated icon names to
the new Icon Naming Specification names, for desktop icon themes.
---------------------------------------------------------------------
Update Information:
The latest version of icon-naming-utils
---------------------------------------------------------------------
* Mon Jul 31 2006 Matthias Clasen <mclasen(a)redhat.com> - 0.7.3-1.fc5
- Update to 0.7.3
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/
0e8f2d20893b7f501cca889488bc929e346c7d93 SRPMS/icon-naming-utils-0.7.3-1.fc5.src.rpm
0e8f2d20893b7f501cca889488bc929e346c7d93 noarch/icon-naming-utils-0.7.3-1.fc5.src.rpm
3b6e4eac0b74464f06aeaede8781f6ec341c45ef ppc/icon-naming-utils-0.7.3-1.fc5.noarch.rpm
3b6e4eac0b74464f06aeaede8781f6ec341c45ef x86_64/icon-naming-utils-0.7.3-1.fc5.noarch.rpm
3b6e4eac0b74464f06aeaede8781f6ec341c45ef i386/icon-naming-utils-0.7.3-1.fc5.noarch.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-EXTRAS-2006-003
---------------------------------------------------------------------
Product: Fedora Extras [5 devel]
Name: dumb
Version: 0.9.3
Release: 4
Summary: IT, XM, S3M and MOD player library
Description:
IT, XM, S3M and MOD player library. Mainly targeted for use with the
allegro game programming library, but it can be used without allegro.
Faithful to the original trackers, especially IT.
---------------------------------------------------------------------
Update Information:
CVE ID: CVE-2006-3668
Luigi Auriemma discovered that DUMB, a tracker music library, performs
insufficient sanitising of values parsed from IT music files. This could
result in a heap-based buffer overflow in the it_read_envelope function
in Dynamic Universal Music Bibliotheque (DUMB) 0.9.3 and earlier and
current CVS as of 20060716, including libdumb, allows user-complicit
attackers to execute arbitrary code via a ".it" (Impulse Tracker) file
with an envelope with a large number of nodes.
Fedora Extras versions 0.9.3-3 and earlier are vulnerable to this
upgrade to 0.9.3-4 to fix this vulnerability.
---------------------------------------------------------------------
This update can be installed with the 'yum' update program. Use 'yum
update package-name' at the command line. For more information, refer
to 'Managing Software with yum,' available at
http://fedora.redhat.com/docs/yum/
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2006-863
2006-07-28
---------------------------------------------------------------------
Product : Fedora Core 5
Name : httpd
Version : 2.2.2
Release : 1.2
Summary : Apache HTTP Server
Description :
The Apache HTTP Server is a powerful, efficient, and extensible
web server.
---------------------------------------------------------------------
Update Information:
This update fixes a security issue in the mod_rewrite module.
Mark Dowd of McAfee Avert Labs reported an off-by-one
security problem in the LDAP scheme handling of the
mod_rewrite module. Where RewriteEngine was enabled, and for
certain RewriteRules, this could lead to a pointer being
written out of bounds. (CVE-2006-3747)
The ability to exploit this issue is dependent on the stack
layout for a particular compiled version of mod_rewrite.
The Fedora project has analyzed Fedora Core 4 and 5 binaries
and determined that these distributions are vulnerable to
this issue. However this flaw does not affect a default
installation of Fedora Core; users who do not use, or have
not enabled, the Rewrite module are not affected by this
issue.
---------------------------------------------------------------------
* Wed Jul 26 2006 Joe Orton <jorton(a)redhat.com> 2.2.2-1.2
- add mod_rewrite security fix (CVE-2006-3747)
* Wed Jul 19 2006 Joe Orton <jorton(a)redhat.com> 2.2.2-1.1
- fix segfault on dummy connection failure at graceful restart (#199429)
* Thu May 11 2006 Joe Orton <jorton(a)redhat.com> 2.2.2-1.0
- update to 2.2.2
* Thu Apr 6 2006 Joe Orton <jorton(a)redhat.com> 2.2.0-5.2
- fix LDAP issues on 64-bit platforms (#188073)
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/
8d3b53893059ae157e97020f526cd19b727b6b07 SRPMS/httpd-2.2.2-1.2.src.rpm
8d3b53893059ae157e97020f526cd19b727b6b07 noarch/httpd-2.2.2-1.2.src.rpm
c6e260470e3b3dc3ff7a405d8da8030a0aee25a1 ppc/mod_ssl-2.2.2-1.2.ppc.rpm
9421d2e77c8dc6713eb7fb01c27b95014c93851b ppc/debug/httpd-debuginfo-2.2.2-1.2.ppc.rpm
11d79c4daeb39b606eb19e715dc656a048f91132 ppc/httpd-2.2.2-1.2.ppc.rpm
d8b703262d835cfc5c759b0713f701361fe34492 ppc/httpd-manual-2.2.2-1.2.ppc.rpm
8a918c5f0958fef564556dd97925e97abeb58454 ppc/httpd-devel-2.2.2-1.2.ppc.rpm
89b0ff637e96e67eb5ca8cb949caf239f3fe526a x86_64/mod_ssl-2.2.2-1.2.x86_64.rpm
19fc5d68d4c25965a7cdc5f54af83e628c6302f1 x86_64/debug/httpd-debuginfo-2.2.2-1.2.x86_64.rpm
eb3dd7f7720da22479fefbd769bb7f4be28d77b6 x86_64/httpd-devel-2.2.2-1.2.x86_64.rpm
010ff13be32b86ae750a94e0b3950484f80907a7 x86_64/httpd-2.2.2-1.2.x86_64.rpm
9a638a1a7ae2dd82b78c431d4115231046d39bde x86_64/httpd-manual-2.2.2-1.2.x86_64.rpm
fe1dfd67f25b3cbf887e371f990939b45098d86f i386/httpd-devel-2.2.2-1.2.i386.rpm
d2c290eb660baa41d4ae1c144733d117a60c3e0f i386/httpd-2.2.2-1.2.i386.rpm
8dd2affc726f93482a831a6ce78e7ea319575c73 i386/debug/httpd-debuginfo-2.2.2-1.2.i386.rpm
43faee2d157ce07431100a0560f7bf3d7eeae8f1 i386/mod_ssl-2.2.2-1.2.i386.rpm
fc616885d243a7b6a98d545045d65690994ccb2e i386/httpd-manual-2.2.2-1.2.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2006-862
2006-07-28
---------------------------------------------------------------------
Product : Fedora Core 4
Name : httpd
Version : 2.0.54
Release : 10.4
Summary : Apache HTTP Server
Description :
The Apache HTTP Server is a powerful, full-featured, efficient, and
freely-available Web server. The Apache HTTP Server is also the
most popular Web server on the Internet.
---------------------------------------------------------------------
Update Information:
This update fixes a security issue in the mod_rewrite module.
Mark Dowd of McAfee Avert Labs reported an off-by-one
security problem in the LDAP scheme handling of the
mod_rewrite module. Where RewriteEngine was enabled, and for
certain RewriteRules, this could lead to a pointer being
written out of bounds. (CVE-2006-3747)
The ability to exploit this issue is dependent on the stack
layout for a particular compiled version of mod_rewrite.
The Fedora project has analyzed Fedora Core 4 and 5 binaries
and determined that these distributions are vulnerable to
this issue. However this flaw does not affect a default
installation of Fedora Core; users who do not use, or have
not enabled, the Rewrite module are not affected by this
issue.
---------------------------------------------------------------------
* Wed Jul 26 2006 Joe Orton <jorton(a)redhat.com> 2.0.54-10.4
- add mod_rewrite security fix (CVE-2006-3747)
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/
81317d5161ff11f6deab496b0562119d0bfc0990 SRPMS/httpd-2.0.54-10.4.src.rpm
81317d5161ff11f6deab496b0562119d0bfc0990 noarch/httpd-2.0.54-10.4.src.rpm
b88cd0f579e2bc914ee974bf426b1a2c8b3b7fb2 ppc/httpd-2.0.54-10.4.ppc.rpm
caed7cf66d784e66969ed8cada0ecfca9212b5ef ppc/httpd-devel-2.0.54-10.4.ppc.rpm
2b0402a1eb83397b24626d78fae0425a1c3a6817 ppc/httpd-manual-2.0.54-10.4.ppc.rpm
883017704eee9b39ffdd6ccf52ad933a51f6ca27 ppc/mod_ssl-2.0.54-10.4.ppc.rpm
0ab368e365f817e9dcd4dcccfc6c0f8898a1f6db ppc/debug/httpd-debuginfo-2.0.54-10.4.ppc.rpm
d27f116a3c7b2f64da314578aa6da7eac590ce34 x86_64/httpd-2.0.54-10.4.x86_64.rpm
14e761d0f7aa7b1f15e0d6c6f8861e0d138ec8e1 x86_64/httpd-devel-2.0.54-10.4.x86_64.rpm
f35c3789a97243bc06bb9c04a749c6f148c85b6b x86_64/httpd-manual-2.0.54-10.4.x86_64.rpm
387155db70ff3e93a23c5cbf0a27548381569170 x86_64/mod_ssl-2.0.54-10.4.x86_64.rpm
571ed80d32e00125ffc279cc96cbac57be4f9bc2 x86_64/debug/httpd-debuginfo-2.0.54-10.4.x86_64.rpm
f8ce1790f54264d675912055f91b4148751a4eec i386/httpd-2.0.54-10.4.i386.rpm
c76b6c07cb048b901e569ec02375dfd3570c78c7 i386/httpd-devel-2.0.54-10.4.i386.rpm
d827df74b0a5dbc5e595d84d00ad648fbd4d0da7 i386/httpd-manual-2.0.54-10.4.i386.rpm
5e0c509e87c6a9875c7df3bb1a239adcb4f1169f i386/mod_ssl-2.0.54-10.4.i386.rpm
e7f948349cdbe8b6442eb30c53571a5880506c6d i386/debug/httpd-debuginfo-2.0.54-10.4.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2006-860
2006-07-28
---------------------------------------------------------------------
Product : Fedora Core 5
Name : wireshark
Version : 0.99.2
Release : fc5.2
Summary : Network traffic analyzer
Description :
Wireshark is a network traffic analyzer for Unix-ish operating systems.
This package lays base for libpcap, a packet capture and filtering
library, contains command-line utilities, contains plugins and
documentation for wireshark. A graphical user interface is packaged
separately to GTK+ package.
---------------------------------------------------------------------
Update Information:
Versions affected: 0.8.16 up to and including 0.99.0
Details
Description
Wireshark 0.99.2 fixes the following vulnerabilities:
* The GSM BSSMAP dissector could crash. Versions
affected: 0.10.11. CVE:
CVE-2006-3627
Ilja van Sprundel discovered the following vulnerabilities:
* The ANSI MAP dissector was vulnerable to a format
string overflow.
Versions affected: 0.10.0. CVE: CVE-2006-3628
* The Checkpoint FW-1 dissector was vulnerable to a
format string overflow.
Versions affected: 0.10.10. CVE: CVE-2006-3628
* The MQ dissector was vulnerable to a format string
overflow. Versions
affected: 0.10.4. CVE: CVE-2006-3628
* The XML dissector was vulnerable to a format string
overflow. Versions
affected: 0.10.13. CVE: CVE-2006-3628
* The MOUNT dissector could attempt to allocate large
amounts of memory.
Versions affected: 0.9.4. CVE: CVE-2006-3629
* The NCP NMAS and NDPS dissectors were susceptible to
off-by-one errors.
Versions affected: 0.9.7. CVE: CVE-2006-3630
* The NTP dissector was vulnerable to a format string
overflow. Versions
affected: 0.10.13. CVE: CVE-2006-3628
* The SSH dissector was vulnerable to an infinite loop.
Versions affected:
0.9.10. CVE: CVE-2006-3631
* The NFS dissector may have been susceptible to a
buffer overflow. Versions
affected: 0.8.16. CVE: CVE-2006-3632
Impact
It may be possible to make Ethereal crash, use up available
memory, or run
arbitrary code by injecting a purposefully malformed packet
onto the wire or by
convincing someone to read a malformed packet trace file.
Resolution
Upgrade to Wireshark 0.99.2.
---------------------------------------------------------------------
* Wed Jul 26 2006 Radek Vokal <rvokal(a)redhat.com> 0.99.2-fc5.2
- fix BuildRequires
* Tue Jul 25 2006 Radek Vokal <rvokal(a)redhat.com> 0.99.2-fc5.1
- build for FC5
* Tue Jul 18 2006 Radek Vokál <rvokal(a)redhat.com> 0.99.2-1
- upgrade to 0.99.2
* Wed Jul 12 2006 Jesse Keating <jkeating(a)redhat.com> - 0.99.2-0.pre1.1
- rebuild
* Tue Jul 11 2006 Radek Vokál <rvokal(a)redhat.com> 0.99.2-0.pre1
- upgrade to 0.99.2pre1, fixes (#198242)
* Tue Jun 13 2006 Radek Vokal <rvokal(a)redhat.com> 0.99.1-0.pre1
- spec file changes
* Fri Jun 9 2006 Radek Vokal <rvokal(a)redhat.com> 0.99.1pre1-1
- initial build for Fedora Core
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/
f1d9b2cef1401a5f2de96e94c6abca2e32255129 SRPMS/wireshark-0.99.2-fc5.2.src.rpm
f1d9b2cef1401a5f2de96e94c6abca2e32255129 noarch/wireshark-0.99.2-fc5.2.src.rpm
ae0b87f149021f18217e6e1efdd7826a64f73c95 ppc/wireshark-0.99.2-fc5.2.ppc.rpm
5ad8121ba4bacc956691a992e87c264753e20152 ppc/wireshark-gnome-0.99.2-fc5.2.ppc.rpm
3d592a657a1e919cd236130a44307bac46652d33 ppc/debug/wireshark-debuginfo-0.99.2-fc5.2.ppc.rpm
94bbe410546b308e395531b3664f1961867d8cce x86_64/wireshark-gnome-0.99.2-fc5.2.x86_64.rpm
4148be8dbb210052648edbd372ce0c7c5eecaeeb x86_64/wireshark-0.99.2-fc5.2.x86_64.rpm
aa2f5af96bc0bafb6cf3f0ce16bf4bf48bc04418 x86_64/debug/wireshark-debuginfo-0.99.2-fc5.2.x86_64.rpm
f601eb9e09760675498d931bb6fbce54c6f9e123 i386/wireshark-gnome-0.99.2-fc5.2.i386.rpm
67cd230efa9175b2d322f8e238dc8fcfa5bcda57 i386/wireshark-0.99.2-fc5.2.i386.rpm
4c072da9fadc48a4eace524448979c9375e6043e i386/debug/wireshark-debuginfo-0.99.2-fc5.2.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2006-857
2006-07-27
---------------------------------------------------------------------
Product : Fedora Core 5
Name : xorg-x11-drv-nv
Version : 1.2.0
Release : 3.fc5
Summary : Xorg X11 nv video driver
Description :
X.Org X11 nv video driver.
---------------------------------------------------------------------
Update Information:
Same as -2 but with a .xinf file that kudzu will properly parse.
---------------------------------------------------------------------
* Tue Jul 25 2006 Adam Jackson <ajackson(a)redhat.com> 1.2.0-2.fc5
- Strip comments from nv.xinf, kudzu is too lame to parse them.
* Mon Jul 24 2006 Adam Jackson <ajackson(a)redhat.com> 1.2.0-2.fc5
- Update nv.xinf: Add about 30 new cards, disable a handful that pci.ids
says aren't video cards, and comments galore. (#186652)
* Fri Jul 7 2006 Adam Jackson <ajackson(a)redhat.com> 1.2.0-1.fc5
- Update to 1.2.0 release.
* Sat Jun 10 2006 Mike A. Harris <mharris(a)redhat.com> 1.0.1.5-4
- Added 10DE:0184 to nv.xinf, although the driver is not currently aware of
this specific chip ID, the fallback code appears to work in bug #(186343)
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/
5997d0f564c466b59091e8c6c9e41a91846c845b SRPMS/xorg-x11-drv-nv-1.2.0-3.fc5.src.rpm
5997d0f564c466b59091e8c6c9e41a91846c845b noarch/xorg-x11-drv-nv-1.2.0-3.fc5.src.rpm
f2c0fa6544ebe10ad3c7a8861ba9b00bd905af31 ppc/debug/xorg-x11-drv-nv-debuginfo-1.2.0-3.fc5.ppc.rpm
db39fc4952c1c523b54a8cabde330d94c28e69d1 ppc/xorg-x11-drv-nv-1.2.0-3.fc5.ppc.rpm
af57923a4f54263d44823aaad13eb14c60ade553 x86_64/xorg-x11-drv-nv-1.2.0-3.fc5.x86_64.rpm
999a4da3fcb9552071477fcb5b704bc58347f692 x86_64/debug/xorg-x11-drv-nv-debuginfo-1.2.0-3.fc5.x86_64.rpm
b722dc74a1d9d8c1e3c2760842da56b85a86d9bc i386/debug/xorg-x11-drv-nv-debuginfo-1.2.0-3.fc5.i386.rpm
0146de547768117a9af66981469835117878853d i386/xorg-x11-drv-nv-1.2.0-3.fc5.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------