[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[debian-users:54308] [Translate] [SECURITY] [DSA 2066-1] New wireshark packages fix several vulnerabilities

From: Seiji Kaneko <skaneko@xxxxxxxxxxxx>
Subject: [debian-users:54308] [Translate] [SECURITY] [DSA 2066-1] New wireshark packages fix several vulnerabilities
Date: Fri, 2 Jul 2010 22:52:42 +0900
List-help: <mailto:debian-users-ctl@debian.or.jp?body=help>
List-id: debian-users.debian.or.jp
List-owner: <mailto:debian-users-admin@debian.or.jp>
List-post: <mailto:debian-users@debian.or.jp>
List-software: fml [fml 4.0.3 release (20011202/4.0.3)]
List-unsubscribe: <mailto:debian-users-ctl@debian.or.jp?body=unsubscribe>
X-ml-info: If you have a question, send e-mail with the body "help" (without quotes) to the address debian-users-ctl@debian.or.jp; help=<mailto:debian-users-ctl@debian.or.jp?body=help>
X-ml-name: debian-users
X-mlserver: fml [fml 4.0.3 release (20011202/4.0.3)]; post only (only members can post)
X-spam-checker-version: SpamAssassin 3.1.7-deb3 (2006-10-05) on osdn.debian.or.jp
X-spam-level:
X-spam-status: No, score=-1.0 required=10.0 tests=KI,RATWARE_GECKO_BUILD autolearn=disabled version=3.1.7-deb3
Message-id: <4C2DEF28.8010701@xxxxxxxxxxxx>
X-mail-count: 54308
User-agent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10.5; ja-JPM; rv:1.9.2.4) Gecko/20100608 Thunderbird/3.1

かねこです。
URL 等は Debian-security-announce メーリングリストの元記事を確認
ください。

------>8------------>8------------>8------------>8------------>8-
- ------------------------------------------------------------------------
Debian Security Advisory DSA-2066-1                  security@debian.org
http://www.debian.org/security/                       Moritz Muehlenhoff
July 01, 2010                         http://www.debian.org/security/faq
- ------------------------------------------------------------------------

Package        : wireshark
Vulnerability  : 複数
Problem type   : リモート
Debian-specific: いいえ
CVE ID         : CVE-2010-2283 CVE-2010-2284 CVE-2010-2285 CVE-2010-2286 CVE-2010-2287

Wireshark ネットワークトラフィックアナライザに、リモートから攻撃可能な
複数の問題が発見されました。ヌルポインタ参照、バッファオーバフローおよ
び無限ループが SMB、SMB PIPE、ASN1.1 および SigComp の各ディスセクタに
発見され、サービス拒否攻撃や任意のコードの実行が可能です。

安定版 (stable) ディストリビューション (lenny) では、これらの問題はバー
ジョン 1.0.2-3+lenny9 で修正されています。

次期安定版 (squeeze) および不安定版 (unstable) ディストリビューション
(sid) では、これらの問題はバージョン 1.2.9-1 で修正されています。

直ぐに wireshark パッケージをアップグレードすることを勧めます。


アップグレード手順
------------------

wget url
        	でファイルを取得できます。
dpkg -i file.deb
                で参照されたファイルをインストールできます。

apt-get パッケージマネージャを用いている場合には、本メールのフッタ記載の
行を sources.list に加えて、

apt-get update
        を実行して内部データベースを更新し、
apt-get upgrade
        によって修正されたパッケージをインストールしてください。

本メールのフッタ記載の設定を自ホストの設定に加えることにより、自動更新を
行うこともできます。


Debian GNU/Linux 5.0 alias lenny
- --------------------------------

安定版の更新は、alpha, amd64, arm, armel, hppa, i386, ia64, mips, mipsel,
powerpc, s390 および sparc の各アーキテクチャで提供されています。
 .
ソースアーカイブ:


http://security.debian.org/pool/updates/main/w/wireshark/wireshark_1.0.2-3+lenny9.diff.gz
    Size/MD5 checksum:   117318 c57282dba42788631eb9b2aafcb795b9
  http://security.debian.org/pool/updates/main/w/wireshark/wireshark_1.0.2.orig.tar.gz
    Size/MD5 checksum: 16935492 1834437f7c6dbed02082e7757133047d
  http://security.debian.org/pool/updates/main/w/wireshark/wireshark_1.0.2-3+lenny9.dsc
    Size/MD5 checksum:     1502 0e98ce69fc13ab36557c65c07b4b75ba

alpha architecture (DEC Alpha)


http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev_1.0.2-3+lenny9_alpha.deb
    Size/MD5 checksum:   569930 cfa45c83e5c9c44920e7aefc02953806

http://security.debian.org/pool/updates/main/w/wireshark/wireshark_1.0.2-3+lenny9_alpha.deb
    Size/MD5 checksum:   731110 e311e7e59bc6e610e8168036a5690de0

http://security.debian.org/pool/updates/main/w/wireshark/wireshark-common_1.0.2-3+lenny9_alpha.deb
    Size/MD5 checksum: 12097910 56e87a8f98c6226ad760fed96a49da02

http://security.debian.org/pool/updates/main/w/wireshark/tshark_1.0.2-3+lenny9_alpha.deb
    Size/MD5 checksum:   126986 eac9483ae6b2788128ed22939aaa2065

amd64 architecture (AMD x86_64 (AMD64))


http://security.debian.org/pool/updates/main/w/wireshark/wireshark_1.0.2-3+lenny9_amd64.deb
    Size/MD5 checksum:   659816 6fac5122d24f4941f15a9ad73498b639

http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev_1.0.2-3+lenny9_amd64.deb
    Size/MD5 checksum:   582426 0a20dce55ed1f2d1ebd7ce85c56c9cec

http://security.debian.org/pool/updates/main/w/wireshark/wireshark-common_1.0.2-3+lenny9_amd64.deb
    Size/MD5 checksum: 11866064 9056a2c4b1de908c83a2eee224bb4c5a

http://security.debian.org/pool/updates/main/w/wireshark/tshark_1.0.2-3+lenny9_amd64.deb
    Size/MD5 checksum:   118542 b91639fd75d0f01f0b635d2906466fa7

arm architecture (ARM)


http://security.debian.org/pool/updates/main/w/wireshark/wireshark-common_1.0.2-3+lenny9_arm.deb
    Size/MD5 checksum: 10214918 247e1109f87d9eef35014125b5c0d684
  http://security.debian.org/pool/updates/main/w/wireshark/tshark_1.0.2-3+lenny9_arm.deb
    Size/MD5 checksum:   111240 509b7ad83c455e51502e421671190f08

http://security.debian.org/pool/updates/main/w/wireshark/wireshark_1.0.2-3+lenny9_arm.deb
    Size/MD5 checksum:   614378 e61a1effec42a968416f55eb39184d34

http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev_1.0.2-3+lenny9_arm.deb
    Size/MD5 checksum:   584478 a8f8d82419846731c5a9143a0e42df74

armel architecture (ARM EABI)


http://security.debian.org/pool/updates/main/w/wireshark/wireshark_1.0.2-3+lenny9_armel.deb
    Size/MD5 checksum:   620384 e61474b8f78057891851e809470416c1

http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev_1.0.2-3+lenny9_armel.deb
    Size/MD5 checksum:   583854 0bb327530c4e5ec401a5074d03c19108

http://security.debian.org/pool/updates/main/w/wireshark/wireshark-common_1.0.2-3+lenny9_armel.deb
    Size/MD5 checksum: 10219204 474007b931f7f7c8a516bde4ad166b39

http://security.debian.org/pool/updates/main/w/wireshark/tshark_1.0.2-3+lenny9_armel.deb
    Size/MD5 checksum:   113084 2bbf09b9deaa7be1e04390cdad71e8dc

hppa architecture (HP PA RISC)


http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev_1.0.2-3+lenny9_hppa.deb
    Size/MD5 checksum:   584110 b2a9a17505cf8e53d3a94ff3a483995c

http://security.debian.org/pool/updates/main/w/wireshark/wireshark_1.0.2-3+lenny9_hppa.deb
    Size/MD5 checksum:   694798 e9d0705311d2a1797c10f1035a05f116
  http://security.debian.org/pool/updates/main/w/wireshark/tshark_1.0.2-3+lenny9_hppa.deb
    Size/MD5 checksum:   121114 c30b842eb86c1af2440714dc86a383a5

http://security.debian.org/pool/updates/main/w/wireshark/wireshark-common_1.0.2-3+lenny9_hppa.deb
    Size/MD5 checksum: 13272482 2dfafdb7cf34a776fd6ec90adcd8a3a8

i386 architecture (Intel ia32)


http://security.debian.org/pool/updates/main/w/wireshark/wireshark-common_1.0.2-3+lenny9_i386.deb
    Size/MD5 checksum: 10113068 09efb0fca5f46ba65beee175b934ba13
  http://security.debian.org/pool/updates/main/w/wireshark/tshark_1.0.2-3+lenny9_i386.deb
    Size/MD5 checksum:   111900 c46f23005c23bdcb7ca95bd8f4d57efd

http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev_1.0.2-3+lenny9_i386.deb
    Size/MD5 checksum:   569932 e2201aaa7f040869e4ac6878781ad4dc

http://security.debian.org/pool/updates/main/w/wireshark/wireshark_1.0.2-3+lenny9_i386.deb
    Size/MD5 checksum:   619470 dbba8e61a068df42a854b765189fee43

ia64 architecture (Intel ia64)


http://security.debian.org/pool/updates/main/w/wireshark/wireshark-common_1.0.2-3+lenny9_ia64.deb
    Size/MD5 checksum: 13687486 606d272c4f0abbb1e9f983595d8b9c81

http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev_1.0.2-3+lenny9_ia64.deb
    Size/MD5 checksum:   569910 4e3071a28cfbcd5cbe1a3be145cb66ec

http://security.debian.org/pool/updates/main/w/wireshark/wireshark_1.0.2-3+lenny9_ia64.deb
    Size/MD5 checksum:   930118 859a8f3701e985ebfbeb2dfbfb15c348
  http://security.debian.org/pool/updates/main/w/wireshark/tshark_1.0.2-3+lenny9_ia64.deb
    Size/MD5 checksum:   154074 284194d7a3ffeaa3b64c55eecddad25d

mips architecture (MIPS (Big Endian))


http://security.debian.org/pool/updates/main/w/wireshark/wireshark_1.0.2-3+lenny9_mips.deb
    Size/MD5 checksum:   637126 c9fd33097e71f8538744cfe81796dc37

http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev_1.0.2-3+lenny9_mips.deb
    Size/MD5 checksum:   584124 235c303d91ced163d2bdb4783ed1c1b0
  http://security.debian.org/pool/updates/main/w/wireshark/tshark_1.0.2-3+lenny9_mips.deb
    Size/MD5 checksum:   113080 5d83644584a5dd00cf7c9f1d6f2c5bd7

http://security.debian.org/pool/updates/main/w/wireshark/wireshark-common_1.0.2-3+lenny9_mips.deb
    Size/MD5 checksum: 10423592 e5bedaac3c39ba6ab485f6cdafe2430f

mipsel architecture (MIPS (Little Endian))


http://security.debian.org/pool/updates/main/w/wireshark/wireshark_1.0.2-3+lenny9_mipsel.deb
    Size/MD5 checksum:   627100 a53c5133cec97a7020884c6fe5c1f30e

http://security.debian.org/pool/updates/main/w/wireshark/wireshark-common_1.0.2-3+lenny9_mipsel.deb
    Size/MD5 checksum:  9729878 e0c65c8bc125f0613e6d68125813d5bb

http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev_1.0.2-3+lenny9_mipsel.deb
    Size/MD5 checksum:   569970 d4d5c23b486bd3699d01ea8fa2f95e99

http://security.debian.org/pool/updates/main/w/wireshark/tshark_1.0.2-3+lenny9_mipsel.deb
    Size/MD5 checksum:   113396 23b6778041b23721b0819bf9042b70bb

powerpc architecture (PowerPC)


http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev_1.0.2-3+lenny9_powerpc.deb
    Size/MD5 checksum:   584576 b31cb071b70d16de97ad4e9211cc9442

http://security.debian.org/pool/updates/main/w/wireshark/wireshark_1.0.2-3+lenny9_powerpc.deb
    Size/MD5 checksum:   677432 6ecabe572aa78465c7bf298be6d534d4

http://security.debian.org/pool/updates/main/w/wireshark/tshark_1.0.2-3+lenny9_powerpc.deb
    Size/MD5 checksum:   123124 523f75e5f1cb8685bbc0475a939a9b0c

http://security.debian.org/pool/updates/main/w/wireshark/wireshark-common_1.0.2-3+lenny9_powerpc.deb
    Size/MD5 checksum: 11228652 99688c83a5951441f09c4f8b0a6f3c20

s390 architecture (IBM S/390)

  http://security.debian.org/pool/updates/main/w/wireshark/tshark_1.0.2-3+lenny9_s390.deb
    Size/MD5 checksum:   122294 2a42d6fedac978f4ddaebf5a1ec35b92

http://security.debian.org/pool/updates/main/w/wireshark/wireshark_1.0.2-3+lenny9_s390.deb
    Size/MD5 checksum:   671216 f04ef7a93b80c097edf2c55b11843521

http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev_1.0.2-3+lenny9_s390.deb
    Size/MD5 checksum:   584780 73c011dc1581e92c2a4a12a8d8b4b70c

http://security.debian.org/pool/updates/main/w/wireshark/wireshark-common_1.0.2-3+lenny9_s390.deb
    Size/MD5 checksum: 12487580 0ba627e0d6df4bdc3422618a6450c2d1

sparc architecture (Sun SPARC/UltraSPARC)


http://security.debian.org/pool/updates/main/w/wireshark/tshark_1.0.2-3+lenny9_sparc.deb
    Size/MD5 checksum:   113460 d1b06ded2ea44e26d44ab7424bb1f174

http://security.debian.org/pool/updates/main/w/wireshark/wireshark-dev_1.0.2-3+lenny9_sparc.deb
    Size/MD5 checksum:   583604 3a4187d54fb747638bdfbeeffb9d2418

http://security.debian.org/pool/updates/main/w/wireshark/wireshark-common_1.0.2-3+lenny9_sparc.deb
    Size/MD5 checksum: 11286898 4fcc47f9836da934431dce9840a50278

http://security.debian.org/pool/updates/main/w/wireshark/wireshark_1.0.2-3+lenny9_sparc.deb
    Size/MD5 checksum:   629518 6f3df69e45a48f5845a360f2b709d150


  これらのファイルは次の版の安定版リリース時そちらに移されます。


- ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>
------>8------------>8------------>8------------>8------------>8-
-- 
Seiji Kaneko                         skaneko@xxxxxxxxxxxx
---------------------------------------------------------

Prev by Date: [debian-users:54307] Re: Fw: grub2 po-debconf 訳更新
Next by Date: [debian-users:54309] Re: Fw: grub2 po-debconf 訳更新
Previous by thread: [debian-users:54336] Re: 第37回関西Debian勉強会&GPGキーサインパーティ@OSC2010 Kyotoのお知らせ
Next by thread: [debian-users:54311] [Translate] [SECURITY] [DSA-2067-1] New mahara packages fix several vulnerabilities
Index(es):
- Date
- Thread