Fedora alert FEDORA-2015-4953 (tcpdump)
| From: | updates@fedoraproject.org | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 20 Update: tcpdump-4.5.1-4.fc20 | |
| Date: | Sat, 18 Apr 2015 09:48:14 +0000 | |
| Message-ID: | <20150418094815.6221060173CB@bastion01.phx2.fedoraproject.org> |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-4953 2015-03-28 23:46:11 -------------------------------------------------------------------------------- Name : tcpdump Product : Fedora 20 Version : 4.5.1 Release : 4.fc20 URL : http://www.tcpdump.org Summary : A network traffic monitoring tool Description : Tcpdump is a command-line tool for monitoring network traffic. Tcpdump can capture and display the packet headers on a particular network interface or on all interfaces. Tcpdump can display all of the packet headers, or just the ones that match particular criteria. Install tcpdump if you need a program to monitor network traffic. -------------------------------------------------------------------------------- Update Information: Contains security fix for CVE-2015-0261, CVE-2015-2154, CVE-2015-2153, CVE-2015-2155. -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 25 2015 Michal Sekletar <msekleta@redhat.com> - 14:4.5.1-4 - Fixes for CVE-2015-0261, CVE-2015-2154, CVE-2015-2153, CVE-2015-2155 (#1201799,#1201792,#1201795,#1201797) * Wed Dec 3 2014 Michal Sekletar <msekleta@redhat.com> - 14:4.5.1-3 - fix for CVE-2014-9140 * Thu Nov 20 2014 Michal Sekletar <msekleta@redhat.com> - 14:4.5.1-2 - fix for CVE-2014-8767 (#1165160) - fix for CVE-2014-8768 (#1165161) - fix for CVE-2014-8768 (#1165162) * Wed Jan 15 2014 Michal Sekletar <msekleta@redhat.com> - 14:4.5.1-1 - update to 4.5.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1201792 - CVE-2015-0261 tcpdump: IPv6 mobility printer mobility_opt_print() typecastimg/signedness error https://bugzilla.redhat.com/show_bug.cgi?id=1201792 [ 2 ] Bug #1201797 - CVE-2015-2154 tcpdump: ethernet printer osi_print_cksum() missing sanity checks out-of-bounds read https://bugzilla.redhat.com/show_bug.cgi?id=1201797 [ 3 ] Bug #1201795 - CVE-2015-2153 tcpdump: tcp printer rpki_rtr_pdu_print() missing length check https://bugzilla.redhat.com/show_bug.cgi?id=1201795 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update tcpdump' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-...