rpms/wireshark/FC-6 wireshark-0.99.5-pie.patch, NONE, 1.1 .cvsignore, 1.7, 1.8 sources, 1.7, 1.8 wireshark.spec, 1.8, 1.9 wireshark-0.99.1-pie.patch, 1.1, NONE

fedora-cvs-commits at redhat.com fedora-cvs-commits at redhat.com
Mon Feb 5 14:46:54 UTC 2007


Author: rvokal

Update of /cvs/dist/rpms/wireshark/FC-6
In directory cvs.devel.redhat.com:/tmp/cvs-serv21557

Modified Files:
	.cvsignore sources wireshark.spec 
Added Files:
	wireshark-0.99.5-pie.patch 
Removed Files:
	wireshark-0.99.1-pie.patch 
Log Message:
- multiple security issues fixed (#227140)

wireshark-0.99.5-pie.patch:
 Makefile.in     |    8 ++++----
 gtk/Makefile.in |    4 ++--
 2 files changed, 6 insertions(+), 6 deletions(-)

--- NEW FILE wireshark-0.99.5-pie.patch ---
--- wireshark-0.99.5-SVN-20402/Makefile.in.pie	2007-01-12 05:39:22.000000000 +0100
+++ wireshark-0.99.5-SVN-20402/Makefile.in	2007-01-15 10:25:54.000000000 +0100
@@ -910,7 +910,7 @@
 wireshark_optional_objects = @GETOPT_O@ @STRERROR_O@ \
 	@STRCASECMP_O@ @STRNCASECMP_O@ @MKSTEMP_O@ @STRPTIME_O@
 
- at ENABLE_STATIC_FALSE@wireshark_LDFLAGS = -export-dynamic
+ at ENABLE_STATIC_FALSE@wireshark_LDFLAGS = -export-dynamic -pie
 @ENABLE_STATIC_TRUE at wireshark_LDFLAGS = -Wl,-static -all-static
 
 # Libraries and plugin flags with which to link wireshark.
@@ -935,7 +935,7 @@
 	@LIBGNUTLS_LIBS@		\
 	@PORTAUDIO_LIBS@
 
- at ENABLE_STATIC_FALSE@tshark_LDFLAGS = -export-dynamic
+ at ENABLE_STATIC_FALSE@tshark_LDFLAGS = -export-dynamic -pie
 @ENABLE_STATIC_TRUE at tshark_LDFLAGS = -Wl,-static -all-static
 
 # Libraries and plugin flags with which to link tshark.
@@ -1489,14 +1489,14 @@
 @AMDEP_TRUE@@am__include@ @am__quote at ./$(DEPDIR)/version_info.Po at am__quote@
 
 .c.o:
- at am__fastdepCC_TRUE@	if $(COMPILE) -MT $@ -MD -MP -MF "$(DEPDIR)/$*.Tpo" -c -o $@ $<; \
+ at am__fastdepCC_TRUE@	if $(COMPILE) $(PIECFLAGS) -MT $@ -MD -MP -MF "$(DEPDIR)/$*.Tpo" -c -o $@ $<; \
 @am__fastdepCC_TRUE@	then mv -f "$(DEPDIR)/$*.Tpo" "$(DEPDIR)/$*.Po"; else rm -f "$(DEPDIR)/$*.Tpo"; exit 1; fi
 @AMDEP_TRUE@@am__fastdepCC_FALSE@	source='$<' object='$@' libtool=no @AMDEPBACKSLASH@
 @AMDEP_TRUE@@am__fastdepCC_FALSE@	DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
 @am__fastdepCC_FALSE@	$(COMPILE) -c $<
 
 .c.obj:
- at am__fastdepCC_TRUE@	if $(COMPILE) -MT $@ -MD -MP -MF "$(DEPDIR)/$*.Tpo" -c -o $@ `$(CYGPATH_W) '$<'`; \
+ at am__fastdepCC_TRUE@	if $(COMPILE) $(PIECFLAGS) -MT $@ -MD -MP -MF "$(DEPDIR)/$*.Tpo" -c -o $@ `$(CYGPATH_W) '$<'`; \
 @am__fastdepCC_TRUE@	then mv -f "$(DEPDIR)/$*.Tpo" "$(DEPDIR)/$*.Po"; else rm -f "$(DEPDIR)/$*.Tpo"; exit 1; fi
 @AMDEP_TRUE@@am__fastdepCC_FALSE@	source='$<' object='$@' libtool=no @AMDEPBACKSLASH@
 @AMDEP_TRUE@@am__fastdepCC_FALSE@	DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
--- wireshark-0.99.5-SVN-20402/gtk/Makefile.in.pie	2007-01-12 05:39:09.000000000 +0100
+++ wireshark-0.99.5-SVN-20402/gtk/Makefile.in	2007-01-15 10:22:01.000000000 +0100
@@ -961,14 +961,14 @@
 @AMDEP_TRUE@@am__include@ @am__quote at ./$(DEPDIR)/wsp_stat.Po at am__quote@
 
 .c.o:
- at am__fastdepCC_TRUE@	if $(COMPILE) -MT $@ -MD -MP -MF "$(DEPDIR)/$*.Tpo" -c -o $@ $<; \
+ at am__fastdepCC_TRUE@	if $(COMPILE) $(PIECFLAGS) -MT $@ -MD -MP -MF "$(DEPDIR)/$*.Tpo" -c -o $@ $<; \
 @am__fastdepCC_TRUE@	then mv -f "$(DEPDIR)/$*.Tpo" "$(DEPDIR)/$*.Po"; else rm -f "$(DEPDIR)/$*.Tpo"; exit 1; fi
 @AMDEP_TRUE@@am__fastdepCC_FALSE@	source='$<' object='$@' libtool=no @AMDEPBACKSLASH@
 @AMDEP_TRUE@@am__fastdepCC_FALSE@	DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
 @am__fastdepCC_FALSE@	$(COMPILE) -c $<
 
 .c.obj:
- at am__fastdepCC_TRUE@	if $(COMPILE) -MT $@ -MD -MP -MF "$(DEPDIR)/$*.Tpo" -c -o $@ `$(CYGPATH_W) '$<'`; \
+ at am__fastdepCC_TRUE@	if $(COMPILE) $(PIECFLAGS) -MT $@ -MD -MP -MF "$(DEPDIR)/$*.Tpo" -c -o $@ `$(CYGPATH_W) '$<'`; \
 @am__fastdepCC_TRUE@	then mv -f "$(DEPDIR)/$*.Tpo" "$(DEPDIR)/$*.Po"; else rm -f "$(DEPDIR)/$*.Tpo"; exit 1; fi
 @AMDEP_TRUE@@am__fastdepCC_FALSE@	source='$<' object='$@' libtool=no @AMDEPBACKSLASH@
 @AMDEP_TRUE@@am__fastdepCC_FALSE@	DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@


Index: .cvsignore
===================================================================
RCS file: /cvs/dist/rpms/wireshark/FC-6/.cvsignore,v
retrieving revision 1.7
retrieving revision 1.8
diff -u -r1.7 -r1.8
--- .cvsignore	1 Nov 2006 13:05:59 -0000	1.7
+++ .cvsignore	5 Feb 2007 14:46:48 -0000	1.8
@@ -1 +1 @@
-wireshark-0.99.4.tar.gz
+wireshark-0.99.5.tar.gz


Index: sources
===================================================================
RCS file: /cvs/dist/rpms/wireshark/FC-6/sources,v
retrieving revision 1.7
retrieving revision 1.8
diff -u -r1.7 -r1.8
--- sources	1 Nov 2006 13:05:59 -0000	1.7
+++ sources	5 Feb 2007 14:46:48 -0000	1.8
@@ -1 +1 @@
-2556a31d0d770dd1990bd67b98bd2f9b  wireshark-0.99.4.tar.gz
+d034fc3936d16cfc3becac2daec9f591  wireshark-0.99.5.tar.gz


Index: wireshark.spec
===================================================================
RCS file: /cvs/dist/rpms/wireshark/FC-6/wireshark.spec,v
retrieving revision 1.8
retrieving revision 1.9
diff -u -r1.8 -r1.9
--- wireshark.spec	23 Nov 2006 10:30:48 -0000	1.8
+++ wireshark.spec	5 Feb 2007 14:46:48 -0000	1.9
@@ -1,9 +1,9 @@
 %define python_sitelib %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib()")
-%define svn_version 19466
+%define svn_version 0
 
 Summary: 	Network traffic analyzer
 Name: 		wireshark
-Version:	0.99.4
+Version:	0.99.5
 Release: 	1%{?dist}
 License: 	GPL
 Group: 		Applications/Internet
@@ -11,7 +11,7 @@
 Source1:	wireshark.pam
 Source2:	wireshark.console
 Source3:	wireshark.desktop
-Patch1:		wireshark-0.99.1-pie.patch
+Patch1:		wireshark-0.99.5-pie.patch
 Patch3:		wireshark-nfsv4-opts.patch
 Url: 		http://www.wireshark.org/
 BuildRoot: 	%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
@@ -175,6 +175,13 @@
 
 
 %changelog
+* Mon Feb  5 2007 Radek Vokál <rvokal at redhat.com> 0.99.5-1
+- multiple security issues fixed (#227140)
+- CVE-2007-0459 - The TCP dissector could hang or crash while reassembling HTTP packets
+- CVE-2007-0459 - The HTTP dissector could crash.
+- CVE-2007-0457 - On some systems, the IEEE 802.11 dissector could crash.
+- CVE-2007-0456 - On some systems, the LLT dissector could crash.
+
 * Wed Nov  1 2006 Radek Vokál <rvokal at redhat.com> 0.99.4-1
 - upgrade to 0.99.4-1, fixes multiple security issues 
 - CVE-2006-5468 - The HTTP dissector could dereference a null pointer.


--- wireshark-0.99.1-pie.patch DELETED ---




More information about the fedora-cvs-commits mailing list