-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 3.0 (quilt) Source: tcpdump Binary: tcpdump Architecture: any Version: 4.6.2-2 Maintainer: Romain Francoise <[email protected]> Homepage: http://www.tcpdump.org/ Standards-Version: 3.9.5 Vcs-Browser: http://anonscm.debian.org/gitweb/?p=users/rfrancoise/tcpdump.git Vcs-Git: git://anonscm.debian.org/users/rfrancoise/tcpdump.git Build-Depends: dpkg-dev (>= 1.16.1~), debhelper (>= 8.9.4~), libpcap0.8-dev (>= 1.5), libssl-dev, autotools-dev, autoconf Package-List: tcpdump deb net optional arch=any Checksums-Sha1: 7256c47e572229de8c92f070514c1f6e6bb691d4 1105356 tcpdump_4.6.2.orig.tar.gz 7eaa17f35087f264ae326d76b31755f9742cb2b1 16688 tcpdump_4.6.2-2.debian.tar.xz Checksums-Sha256: 524ee4d8e83a6c663f6879004216a9a5bcb1c68b11920d653eb87b79d008e0b8 1105356 tcpdump_4.6.2.orig.tar.gz 0ae5ff1b8513b9218a01d38de2d4009f0f25c1437ba2d94eb4a6c8314466d6d2 16688 tcpdump_4.6.2-2.debian.tar.xz Files: 74d0d3728b3cdc60db872d842e7f1598 1105356 tcpdump_4.6.2.orig.tar.gz 4a0c1dd046d8e6d930c4407b6440bcac 16688 tcpdump_4.6.2-2.debian.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJUcGwSAAoJEK0V9DXwX5YtGBMQAJ4RBY1waek0monBJr8Pb4gN uCP79706S2/XHorL1RGo6z0HMGCBsK0WJN0GppzpzPiLDg854khOPTODcsqHgoHW paE7RKT0NDoOQ8OyVI0ELZLZ7krGx242cVH9lJ+5xdb8zZPKrnS/Ixqzbr4mc3GI 9wYoJ4M4T0MjRlVgqbQ2tQodpVXia9u6laGthCfBM5o+mUiiAms2wTit5OyHCaeV vpK0TMA9NYO9aDeSXpLniShM4jpik8T+KmrYnGhTJ0NjIv/6PGKUOzif+cgNYy9V zr+427IW20FrbHB5uwdjDzkuYrE8KRPzNDhbqbZ77VM6jd9+T8vL1FD/PhtQ3F52 EXe2b3rGKJLTyBiSYQRVgEcDCXBZBSJaKAZCQhQ086LCxkiIbD5CHNlKNzsXXbgP qVh3+cddTP0I7tmvxWlApx5uUA1ZuD1vOXr5ML8TpIxehGMJzg233tmgfS26UYNj SKaKYyy3028Uxh9avtF4sM206DefNwuT7p9MpLmHnhrDuU9ahaRcRV2TClnBp+iz pF0Oe1ZlG9xBQkZ2auYQNOwfqbSc2brI8cryckwZbjSrX98+R8Mo0uNEQFtyiwwQ T92G2Yxn+DLilNQ2MI3SPoezA6pmGh3i7WdUuwJwsHJyppHPIYC5uAL1omkXn1v7 b785LRbJEfFZcW8rOAKZ =ouQw -----END PGP SIGNATURE----- Changes: tcpdump (4.6.2-2) unstable; urgency=high * Urgency high due to security fixes. * Add three patches extracted from various upstream commits fixing vulnerabilities in three dissectors: + CVE-2014-8767: missing bounds checks in OLSR dissector (closes: #770434). + CVE-2014-8768: missing bounds checks in Geonet dissector (closes: #770415). + CVE-2014-8769: missing bounds checks in AOVD dissector (closes: #770424). -- Romain Francoise <[email protected]> Sat, 22 Nov 2014 11:48:08 +0100