-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 _______________________________________________________________________
 
 Mandriva Linux Security Advisory                       MDVSA-2008:001-1
 http://www.mandriva.com/security/
 _______________________________________________________________________
 
 Package : wireshark
 Date    : January 8, 2008
 Affected: 2007.0, 2007.1, 2008.0, Corporate 4.0
 _______________________________________________________________________
 
 Problem Description:
 
 A number of vulnerabilities in the Wireshark program were found that
 could cause crashes, excessive looping, or arbitrary code execution.
 
 This update provides Wireshark 0.99.7 which is not vulnerable to
 these issues.
 
 An updated version of libsmi is also being provided, not because
 of security issues, but because this version of wireshark uses it
 instead of net-snmp for SNMP support.

 Update:

 This update is being reissued without libcap (kernel capabilities)
 support, as that is not required by the original released packages,
 and thus gave trouble for a number of users.
 _______________________________________________________________________

 References:
 
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6111
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6112
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6113
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6114
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6115
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6116
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6117
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6118
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6119
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6120
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6121
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6438
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6439
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6441
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6450
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6451
 http://www.wireshark.org/security/wnpa-sec-2007-03.html
 http://qa.mandriva.com/show_bug.cgi?id=36470
 _______________________________________________________________________
 
 Updated Packages:
 
 Mandriva Linux 2007.0:
 5c91bd119cfc3b1c1ee55b6bc2011e4a  2007.0/i586/libwireshark0-0.99.7-0.2mdv2007.0.i586.rpm
 78c42809009ff071c1df6b755303f15b  2007.0/i586/tshark-0.99.7-0.2mdv2007.0.i586.rpm
 49b10ec48fd94f2f25e017454a72bf19  2007.0/i586/wireshark-0.99.7-0.2mdv2007.0.i586.rpm
 c5c8c034009e625164944bed14446404  2007.0/i586/wireshark-tools-0.99.7-0.2mdv2007.0.i586.rpm 
 77848da4b077e273c2b6d63cd7b7e9eb  2007.0/SRPMS/wireshark-0.99.7-0.2mdv2007.0.src.rpm

 Mandriva Linux 2007.0/X86_64:
 bd4b1becee027d7670316fc861420a4f  2007.0/x86_64/lib64wireshark0-0.99.7-0.2mdv2007.0.x86_64.rpm
 3843ed5c6de451e48288cebee268a13c  2007.0/x86_64/tshark-0.99.7-0.2mdv2007.0.x86_64.rpm
 2be07bfb8592520cb656e9fdbfb98022  2007.0/x86_64/wireshark-0.99.7-0.2mdv2007.0.x86_64.rpm
 90e146c1da8a29a5a076cc6c9caed066  2007.0/x86_64/wireshark-tools-0.99.7-0.2mdv2007.0.x86_64.rpm 
 77848da4b077e273c2b6d63cd7b7e9eb  2007.0/SRPMS/wireshark-0.99.7-0.2mdv2007.0.src.rpm

 Mandriva Linux 2007.1:
 ade45a75aea57acf6530f4f41f825cc9  2007.1/i586/libwireshark0-0.99.7-0.2mdv2007.1.i586.rpm
 b5c8c986615e448c7dacee90c7e29fa2  2007.1/i586/tshark-0.99.7-0.2mdv2007.1.i586.rpm
 abe2a75fdf8e04e4a92a50ce1aa9a1d7  2007.1/i586/wireshark-0.99.7-0.2mdv2007.1.i586.rpm
 a1fb6cf26e8e3925759cd53607b7d171  2007.1/i586/wireshark-tools-0.99.7-0.2mdv2007.1.i586.rpm 
 cabd10166ca29f2f4685b52dfd77b5fe  2007.1/SRPMS/wireshark-0.99.7-0.2mdv2007.1.src.rpm

 Mandriva Linux 2007.1/X86_64:
 963168de12981d25e5c843682f8e2341  2007.1/x86_64/lib64wireshark0-0.99.7-0.2mdv2007.1.x86_64.rpm
 c979dda5e0306456a1870cab22f7dbd3  2007.1/x86_64/tshark-0.99.7-0.2mdv2007.1.x86_64.rpm
 3b5228291fc25c3e2413ff50b5ae0c35  2007.1/x86_64/wireshark-0.99.7-0.2mdv2007.1.x86_64.rpm
 4457e9620dd65ff45a61b822e8bd6fca  2007.1/x86_64/wireshark-tools-0.99.7-0.2mdv2007.1.x86_64.rpm 
 cabd10166ca29f2f4685b52dfd77b5fe  2007.1/SRPMS/wireshark-0.99.7-0.2mdv2007.1.src.rpm

 Mandriva Linux 2008.0:
 30c75799076e9f6cb5b1e52edf3db14a  2008.0/i586/libwireshark-devel-0.99.7-0.2mdv2008.0.i586.rpm
 8f81b43b1023d159c8914e67fefa1002  2008.0/i586/libwireshark0-0.99.7-0.2mdv2008.0.i586.rpm
 adbaf318e0bc5cb332e70a3fd5f04474  2008.0/i586/tshark-0.99.7-0.2mdv2008.0.i586.rpm
 858cabe43af0af8a5677e011afd218c9  2008.0/i586/wireshark-0.99.7-0.2mdv2008.0.i586.rpm
 c62187def12e0ead20310a7efe9505b3  2008.0/i586/wireshark-tools-0.99.7-0.2mdv2008.0.i586.rpm 
 3d06a9a2c6e9785d6fc2238d661a8404  2008.0/SRPMS/wireshark-0.99.7-0.2mdv2008.0.src.rpm

 Mandriva Linux 2008.0/X86_64:
 ed92644ee0e457b2a3ecee1d2bf4fa60  2008.0/x86_64/lib64wireshark-devel-0.99.7-0.2mdv2008.0.x86_64.rpm
 9635394abf21052f7bcab4897528be76  2008.0/x86_64/lib64wireshark0-0.99.7-0.2mdv2008.0.x86_64.rpm
 d121a1c7a3ef3176a64d1849670e6dee  2008.0/x86_64/tshark-0.99.7-0.2mdv2008.0.x86_64.rpm
 80d1eef6d6d2cedb1afe7f0aeb5adff9  2008.0/x86_64/wireshark-0.99.7-0.2mdv2008.0.x86_64.rpm
 c95a8c9b83616e90eb8a172f1d1f31f6  2008.0/x86_64/wireshark-tools-0.99.7-0.2mdv2008.0.x86_64.rpm 
 3d06a9a2c6e9785d6fc2238d661a8404  2008.0/SRPMS/wireshark-0.99.7-0.2mdv2008.0.src.rpm

 Corporate 4.0:
 f23d3320bf2e426f48dc4c4243c315b6  corporate/4.0/i586/libwireshark0-0.99.7-0.2.20060mlcs4.i586.rpm
 51587e5f3bf827a97b8655b3d7633774  corporate/4.0/i586/tshark-0.99.7-0.2.20060mlcs4.i586.rpm
 a5ad1f60eb99f7f57b9241adb7f6b537  corporate/4.0/i586/wireshark-0.99.7-0.2.20060mlcs4.i586.rpm
 72af45f42b528185526016f498fa5908  corporate/4.0/i586/wireshark-tools-0.99.7-0.2.20060mlcs4.i586.rpm 
 0ebc19bec6bc7e76f644f122e956c416  corporate/4.0/SRPMS/wireshark-0.99.7-0.2.20060mlcs4.src.rpm

 Corporate 4.0/X86_64:
 3bd532fbfacf8e910efaf47aae679200  corporate/4.0/x86_64/lib64wireshark0-0.99.7-0.2.20060mlcs4.x86_64.rpm
 7e25238cbc07b651e37e65b826d87dac  corporate/4.0/x86_64/tshark-0.99.7-0.2.20060mlcs4.x86_64.rpm
 b14aaefe6cedbf388fe202722a6e6596  corporate/4.0/x86_64/wireshark-0.99.7-0.2.20060mlcs4.x86_64.rpm
 4959cbe32a8854f858409e2e98144375  corporate/4.0/x86_64/wireshark-tools-0.99.7-0.2.20060mlcs4.x86_64.rpm 
 0ebc19bec6bc7e76f644f122e956c416  corporate/4.0/SRPMS/wireshark-0.99.7-0.2.20060mlcs4.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/security/advisories

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com
 _______________________________________________________________________

 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Mandriva Security Team
  <security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (GNU/Linux)

iEYEARECAAYFAkeC5lEACgkQmqjQ0CJFipi91gCg20Lkyor7rIrCWeomiBGtEoru
KR4AoIK8urUWsFw/HGCkbe7UBML2QCWG
=hTXh
-----END PGP SIGNATURE-----