[paketler-commits] r14499 - devel/applications/network/wireshark

[paketler-uludag at uludag.org.tr]

Author: cartman
Date: Wed Nov  1 11:52:45 2006
New Revision: 14499

Modified:
   devel/applications/network/wireshark/actions.py
   devel/applications/network/wireshark/pspec.xml
Log:
Wireshark 0.99.4, security update, fixes:

- The HTTP dissector could crash.  (CVE-2006-5468)
- The LDAP dissector (and possibly others) could crash. (CVE-2006-5740)
- The XOT dissector could attempt to allocate a large amount of memory and crash. (CVE-2006-4805)
- The WBXML dissector could crash. (CVE-2006-5469)
- The MIME Multipart dissector was susceptible to an off-by-one error. (CVE-2006-4574)
- If AirPcap support was enabled, parsing a WEP key could sometimes cause a crash. (No CVE assigned)


Modified: devel/applications/network/wireshark/actions.py
=================================================================
--- devel/applications/network/wireshark/actions.py	(original)
+++ devel/applications/network/wireshark/actions.py	Wed Nov  1 11:52:45 2006
@@ -9,8 +9,6 @@
 from pisi.actionsapi import pisitools
 from pisi.actionsapi import get
 
-WorkDir="wireshark-0.99.3a"
-
 def setup():
     autotools.configure("--enable-user-local=no \
                          --with-ssl \
@@ -21,7 +19,7 @@
 
 def install():
     autotools.rawInstall("DESTDIR=%s" % get.installDIR())
-    
+
     pisitools.insinto("/usr/share/icons/hicolor/48x48/apps", "image/hi48-app-wireshark.png", "wireshark.png")
     pisitools.insinto("/usr/share/applications/", "wireshark.desktop")
 

Modified: devel/applications/network/wireshark/pspec.xml
=================================================================
--- devel/applications/network/wireshark/pspec.xml	(original)
+++ devel/applications/network/wireshark/pspec.xml	Wed Nov  1 11:52:45 2006
@@ -12,9 +12,9 @@
         <IsA>app:gui</IsA>
         <Summary>A commercial-quality network protocol analyzer</Summary>
         <Summary xml:lang="tr">Görsel ağ protokol izleyici</Summary>
-        <Description>Wireshark (formerly Ethereal) is a commercial-quality network protocol analyzer used to investigate packets on the network.</Description>
-        <Description xml:lang="tr">Wireshark (önceki ismiyle Ethereal), ağdaki paketleri ve içeriklerini incelemek için kullanılan bir yazılımdır.</Description>
-        <Archive sha1sum="40ee48c9a40816e932475ce5979dc301c3122975" type="tarbz2">http://cekirdek.pardus.org.tr/~ismail/dist/wireshark-0.99.3a.tar.bz2</Archive>
+        <Description>Wireshark is a commercial-quality network protocol analyzer used to investigate packets on the network.</Description>
+        <Description xml:lang="tr">Wireshark ağdaki paketleri ve içeriklerini incelemek için kullanılan bir yazılımdır.</Description>
+        <Archive sha1sum="696216d794b418da3cb0a1829281ef65bf3e64ff" type="tarbz2">http://www.wireshark.org/download/src/wireshark-0.99.4.tar.bz2</Archive>
         <BuildDependencies>
             <Dependency>gtk2</Dependency>
             <Dependency>libgcrypt</Dependency>
@@ -51,6 +51,13 @@
     </Package>
 
     <History>
+        <Update release="8" type="security">
+            <Date>2006-11-01</Date>
+            <Version>0.99.4</Version>
+            <Comment>Version bump to fix CVE-2006-4574, CVE-2006-4805, CVE-2006-5468, CVE-2006-5469, CVE-2006-5740</Comment>
+            <Name>İsmail Dönmez</Name>
+            <Email>ismail at pardus.org.tr</Email>
+        </Update>
         <Update release="7" type="security">
             <Date>2006-08-24</Date>
             <Version>0.99.3</Version>