Fedora alert FEDORA-2015-4939 (tcpdump)
| From: | updates@fedoraproject.org | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 21 Update: tcpdump-4.7.3-1.fc21 | |
| Date: | Mon, 30 Mar 2015 07:01:09 +0000 | |
| Message-ID: | <20150330070109.31074606CFB0@bastion01.phx2.fedoraproject.org> |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-4939 2015-03-28 23:45:41 -------------------------------------------------------------------------------- Name : tcpdump Product : Fedora 21 Version : 4.7.3 Release : 1.fc21 URL : http://www.tcpdump.org Summary : A network traffic monitoring tool Description : Tcpdump is a command-line tool for monitoring network traffic. Tcpdump can capture and display the packet headers on a particular network interface or on all interfaces. Tcpdump can display all of the packet headers, or just the ones that match particular criteria. Install tcpdump if you need a program to monitor network traffic. -------------------------------------------------------------------------------- Update Information: Rebase to 4.7.3 (#1201573). Contains security fix for CVE-2015-0261, CVE-2015-2154, CVE-2015-2153, CVE-2015-2155. -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 25 2015 Michal Sekletar <msekleta@redhat.com> - 14:4.7.3-1 - rebase to 4.7.3 (#1201573) - contains fixes for CVE-2015-0261 CVE-2015-2154 CVE-2015-2153 CVE-2015-2155 (#1201799,#1201792,#1201795,#1201797) * Wed Dec 3 2014 Michal Sekletar <msekleta@redhat.com> - 14:4.6.2-3 - fix for CVE-2014-9140 * Thu Nov 20 2014 Michal Sekletar <msekleta@redhat.com> - 14:4.6.2-2 - fix for CVE-2014-8767 (#1165160) - fix for CVE-2014-8768 (#1165161) - fix for CVE-2014-8769 (#1165162) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1201792 - CVE-2015-0261 tcpdump: IPv6 mobility printer mobility_opt_print() typecastimg/signedness error https://bugzilla.redhat.com/show_bug.cgi?id=1201792 [ 2 ] Bug #1201795 - CVE-2015-2153 tcpdump: tcp printer rpki_rtr_pdu_print() missing length check https://bugzilla.redhat.com/show_bug.cgi?id=1201795 [ 3 ] Bug #1201797 - CVE-2015-2154 tcpdump: ethernet printer osi_print_cksum() missing sanity checks out-of-bounds read https://bugzilla.redhat.com/show_bug.cgi?id=1201797 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update tcpdump' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-...