Wireshark の Ver.1.6.2 が出ています。2011/09/07 付け。(現地時間) Security Fix です。
Old Stable と云う事で 1.4.9 も出ています。CVE-2011-3266 他。
(図11)
Wireshark 1.6.2 。
(画像サイズ 159.3 KB)
リリースノート:
Wireshark http://www.wireshark.org/docs/relnotes/wireshark-1.6.2.html
> Wireshark 1.6.2 Release Notes
Security Advisories:
Wireshark http://www.wireshark.org/security/wnpa-sec-2011-12.html
> Summary
> Name: Wireshark OpenSafety dissector vulnerability
> Docid: wnpa-sec-2011-12
> Date: September 7, 2011
> Versions affected: 1.6.0 to 1.6.1
> Fixed in: 1.6.2
Wireshark http://www.wireshark.org/security/wnpa-sec-2011-13.html
> Summary
> Name: Wireshark IKE dissector vulnerability
> Docid: wnpa-sec-2011-13
> Date: September 7, 2011
> Versions affected: 1.6.0 to 1.6.1, 1.4.0 to 1.4.8
> Fixed in: 1.6.2, 1.4.9
> References: CVE-2011-3266
Wireshark http://www.wireshark.org/security/wnpa-sec-2011-14.html
> Summary
> Name: Wireshark buffer exception handling vulnerability
> Docid: wnpa-sec-2011-14
> Date: September 7, 2011
> Versions affected: 1.6.0 to 1.6.1
> Fixed in: 1.6.2
Wireshark http://www.wireshark.org/security/wnpa-sec-2011-15.html
> Summary
> Name: Wireshark Lua script execution vulnerability
> Docid: wnpa-sec-2011-15
> Date: September 7, 2011
> Versions affected: 1.6.0 to 1.6.1, 1.4.0 to 1.4.8
> Fixed in: 1.6.2, 1.4.9
Wireshark http://www.wireshark.org/security/wnpa-sec-2011-16.html
> Summary
> Name: Wireshark CSN.1 dissector vulnerability
> Docid: wnpa-sec-2011-16
> Date: September 7, 2011
> Versions affected: 1.6.0 to 1.6.1
> Fixed in: 1.6.2
ワークアラウンドは、無い模様。"Resolution Upgrade to Wireshark 1.6.2 or later. " です。
ダウンロードサイト:
Wireshark http://www.wireshark.org/download.html
> Download
(関連)
Secunia Advisories http://secunia.com/advisories/45927/
> Wireshark Multiple Vulnerabilities - Secunia.com
・・・
http://d.hatena.ne.jp/TsuSUZUKI/20110725/1311544217
※ Wireshark 1.6.1 Release Notes
いじょうです。
-
- -
