2010年7月30日

[installer 2454] wireshark-1.2.10, 1.0.15

wireshark-1.2.10, 1.0.15 出ています。

今回もセキュリティホール修正が含まれています。
http://www.wireshark.org/security/wnpa-sec-2010-07.html
http://www.wireshark.org/security/wnpa-sec-2010-08.html
参照のこと。

☆ wireshark-1.2.10

http://www.wireshark.org/
http://www.wireshark.org/download.html
http://sourceforge.net/projects/wireshark/
http://sourceforge.net/projects/wireshark/files/

What's New

Bug Fixes

The following vulnerabilities have been fixed. See the security
advisory for details and a workaround.

o The SigComp Universal Decompressor Virtual Machine could
overrun a buffer. (Bug 4867)

Versions affected: 0.10.8 to 1.0.14, 1.2.0 to 1.2.9

CVE-2010-2287

o The GSM A RR dissector could crash. (Bug 4897)

Versions affected: 1.2.2 to 1.2.9

o Due to a regression the ASN.1 BER dissector could overrun the
stack.

Versions affected: 0.10.13 to 1.0.14, 1.2.0 to 1.2.9

CVE-2010-2284

o The IPMI dissector could go into an infinite loop.

Versions affected: 1.2.0 to 1.2.9

The following bugs have been fixed:

o Wireshark crashes after configuring new Information column.
(Bug 4854)

o Crash triggered when changing display filter from right-mouse
pop-up menu via packet-list. (Bug 4860)

o Wireshark crash selecting Inter-Asterisk exchange v2 packet
data. (Bug 4868)

o zlib-1.2.5 cause tshark to stop live capture. (Bug 4916)

o Crash when adding SNMP users. (Bug 4926)

o Wireshark via ssh -X on ipv6 link-local address fails to allow
capture. (Bug 4945)

o OMAPI dissector fails to parse combined initialization
messages. (Bug 4982)

o QUERY_FS_INFO for Macintosh level 0x301 - MacSupportFlags
decodes wrong. (Bug 4993)

o SCSI dissector misidentifies ATA PASSTHROUGH command as ACCESS
CONTROL IN. (Bug 5037)

o Wrong decoding of GTP Prime (GTP') packets. (Bug 5055)

New and Updated Features

There are no new features in this release.

New Protocol Support

There are no new protocols in this release.

Updated Protocol Support

ASN.1 BER, GSM A RR, GTP, IAX2, IPMI, OMAPI, PRES, SCSI, SMB,
UNISTIM

Updated Capture File Support

There are no new or updated capture file formats in this release.

Getting Wireshark

Wireshark source code and installation packages are available from
http://www.wireshark.org/download.html.

Vendor-supplied Packages

Most Linux and Unix vendors supply their own Wireshark packages.
You can usually install or upgrade Wireshark using the package
management system specific to that platform. A list of third-party
packages can be found on the download page on the Wireshark web
site.

File Locations

Wireshark and TShark look in several different locations for
preference files, plugins, SNMP MIBS, and RADIUS dictionaries.
These locations vary from platform to platform. You can use
About->Folders to find the default locations on your system.

Known Problems

Wireshark may appear offscreen on multi-monitor Windows systems.
(Bug 553)

Wireshark might make your system disassociate from a wireless
network on OS X. (Bug 1315)

Dumpcap might not quit if Wireshark or TShark crashes. (Bug 1419)

The BER dissector might infinitely loop. (Bug 1516)

Capture filters aren't applied when capturing from named pipes.
(Bug 1814)

Wireshark might freeze when reading from a pipe. (Bug 2082)

Filtering tshark captures with display filters (-R) no longer
works. (Bug 2234)

The 64-bit Windows installer does not ship with the same libraries
as the 32-bit installer. (Bug 3610)


☆ wireshark-1.0.15
http://www.wireshark.org/
http://www.wireshark.org/download.html
http://sourceforge.net/projects/wireshark/
http://sourceforge.net/projects/wireshark/files/

What's New

Bug Fixes

The following vulnerabilities have been fixed. See the security
advisory for details and a workaround.

o The SigComp Universal Decompressor Virtual Machine could
overrun a buffer. (Bug 4867)

Versions affected: 0.10.8 to 1.0.14, 1.2.0 to 1.2.9

CVE-2010-2287

o Due to a regression the ASN.1 BER dissector could overrun the
stack.

Versions affected: 0.10.13 to 1.0.14, 1.2.0 to 1.2.9

CVE-2010-2284

New and Updated Features

There are no new or updated features in this release.

New Protocol Support

There are no new protocols in this release.

Updated Protocol Support

ASN.1 BER

New and Updated Capture File Support

There is no new or updated capture file support.

Getting Wireshark

Wireshark source code and installation packages are available from
http://www.wireshark.org/download.html.

Vendor-supplied Packages

Most Linux and Unix vendors supply their own Wireshark packages.
You can usually install or upgrade Wireshark using the package
management system specific to that platform. A list of third-party
packages can be found on the download page on the Wireshark web
site.

File Locations

Wireshark and TShark look in several different locations for
preference files, plugins, SNMP MIBS, and RADIUS dictionaries.
These locations vary from platform to platform. You can use
About->Folders to find the default locations on your system.

Known Problems

Wireshark may appear offscreen on multi-monitor Windows systems.
(Bug 553)

Wireshark might make your system disassociate from a wireless
network on OS X. (Bug 1315)

Dumpcap might not quit if Wireshark or TShark crashes. (Bug 1419)

The BER dissector might infinitely loop. (Bug 1516)

Wireshark can't dynamically update the packet list. This means
that host name resolutions above a certain response time threshold
won't show up in the packet list. (Bug 1605)

Capture filters aren't applied when capturing from named pipes.
(Bug 1814)

Wireshark might freeze when reading from a pipe. (Bug 2082)

Capturing from named pipes might be delayed on Windows. (Bug 2200)

Filtering tshark captures with display filters (-R) no longer
works. (Bug 2234)

----
こがよういちろう


投稿者 xml-rpc : 2010年7月30日 09:57
役に立ちました?:
過去のフィードバック 平均:(0) 総合:(0) 投票回数:(0)
本記事へのTrackback: http://hoop.euqset.org/blog/mt-tb2006.cgi/97306
トラックバック
コメント
コメントする




画像の中に見える文字を入力してください。