-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Tue, 6 Apr 2004 19:39:24 +0200 Source: tcpdump Binary: tcpdump Architecture: s390 Version: 3.6.2-2.8 Distribution: stable-security Urgency: high Maintainer: s390 Build Daemon - Gerhard Tonn Changed-By: Romain Francoise Description: tcpdump - A powerful tool for network monitoring and data acquisition Changes: tcpdump (3.6.2-2.8) stable-security; urgency=high . * Backport changes from upstream CVS to fix ISAKMP payload handling denial-of-service vulnerabilities (CAN-2004-0183, CAN-2004-0184). Detailed changes (with corresponding upstream revisions): + Add length checks in isakmp_id_print() (print-isakmp.c, rev. 1.47) + Add data checks all over the place, change rawprint() prototype and add corresponding return value checks (print-isakmp.c, rev. 1.46) + Add missing ntohs() and change length initialization in isakmp_id_print(), not porting prototype changes (print-isakmp.c, rev. 1.45) Files: 4541e31919482795ae84406f7122e06a 175274 net optional tcpdump_3.6.2-2.8_s390.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFAcwMeArxCt0PiXR4RAoiVAKCUeFxQMvXjf4EAzEsk7S62kYVAmQCggNee 0OZRxP0wIgrF2ZXhcFasbz8= =RxaZ -----END PGP SIGNATURE-----