RHSA-2011:0369: wireshark security update

Description

Wireshark is a program for monitoring network traffic. Wireshark waspreviously known as Ethereal.A heap-based buffer overflow flaw was found in the Wireshark MAC-LTEdissector. If Wireshark read a malformed packet off a network or opened amalicious dump file, it could crash or, possibly, execute arbitrary code asthe user running Wireshark. (CVE-2011-0444)A heap-based buffer overflow flaw was found in the way Wireshark processedsignaling traces generated by the Gammu utility on Nokia DCT3 phonesrunning in Netmonitor mode. If Wireshark opened a specially-crafted capturefile, it could crash or, possibly, execute arbitrary code as the userrunning Wireshark. (CVE-2011-0713)Several denial of service flaws were found in Wireshark. Wireshark couldcrash or stop responding if it read a malformed packet off a network, oropened a malicious dump file. (CVE-2011-0538, CVE-2011-1139, CVE-2011-1140,CVE-2011-1141)Users of Wireshark should upgrade to these updated packages, which containWireshark version 1.2.15, and resolve these issues. All running instancesof Wireshark must be restarted for the update to take effect.