-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Ethereal 0.10.13 has been released.
Bug Fixes
Several security vulnerabilities have been fixed since the
previous release. See the [1]application advisory for more
details.
o The ISAKMP dissector could exhaust system memory. Versions
affected: 0.10.11 to 0.10.12.
o The FC-FCS dissector could exhaust system memory. Versions
affected: 0.9.0 to 0.10.12.
o The RSVP dissector could exhaust system memory. Versions
affected: 0.9.4 to 0.10.12.
o The ISIS LSP dissector could exhaust system memory. Versions
affected: 0.8.18 to 0.10.12.
o The IrDA dissector could crash. Versions affected: 0.10.0 to
0.10.12.
o The SLIMP3 dissector could overflow a buffer. Versions
affected: 0.9.1 to 0.10.12.
o The BER dissector was susceptible to an infinite loop.
Versions affected: 0.10.3 to 0.10.12.
o The SCSI dissector could dereference a null pointer and crash.
Versions affected: 0.10.3 to 0.10.12.
o If the "Dissect unknown RPC program numbers" option was
enabled, the ONC RPC dissector might be able to exhaust system
memory. This option is disabled by default. Versions affected:
0.7.7 to 0.10.12.
o The sFlow dissector could dereference a null pointer and
crash. Versions affected: 0.9.14 to 0.10.12.
o The RTnet dissector could dereference a null pointer and
crash. Versions affected: 0.10.8 to 0.10.12.
o The SigComp UDVM could go into an infinite loop or crash.
Versions affected: 0.10.12.
o If SMB transaction payload reassembly is enabled the SMB
dissector could crash. This preference is disabled by default.
Versions affected: 0.9.7 to 0.10.12.
o The X11 dissector could attempt to divide by zero. Versions
affected: 0.10.1 to 0.10.12.
o The AgentX dissector could overflow a buffer. Versions
affected: 0.10.10 to 0.10.12.
o The WSP dissector could free an invalid pointer. Versions
affected: 0.10.1 to 0.10.12.
o The NCP dissector was susceptible to an infinite loop.
Versions affected: 0.9.7 to 0.10.12.
o The ACSE dissector was susceptible to infinite recursion.
Versions affected: 0.10.12.
o The CLNP dissector could crash. Versions affected: 0.9.11 to
0.10.12.
o iDEFENSE found a buffer overflow in the SRVLOC dissector.
Versions affected: 0.10.0 to 0.10.12.
When trying to save a flow graph, Ethereal could crash.
When viewing protocol hierarchy statistics, Ethereal and Tethereal
could crash.
The PCRE library that ships with the Windows installer has been
upgraded from version 4.4 to 6.3 in response to a [2]security
vulnerability.
New and Updated Features
The following features are new (or have been significantly
updated) since the last release:
o The timestamp display precision of the Packet List can be
adjusted now. The precision will be automatically adjusted
depending on the file format loaded, e.g. libpcap typically
uses microsecond resolution displayed like "0.000000". In
addition you can adjust the precision manually through the
View/Time Display Format menu items.
o The WinPcap version 3.1 installer was released since the last
Ethereal release. The version included in the Ethereal Windows
installer has been updated from 3.1 beta 4 to 3.1. If you want
to upgrade WinPcap separately or install a different version
you can download it from: [3]the WinPcap web site.
o The behavior of the display filter "ip.checksum_bad" has
changed. Instead of merely checking for its presence you must
now make sure it is set, e.g. instead of using
"ip.checksum_bad" you must now use "ip.checksum_bad == 1".
o A new capture file format "Nanosecond libpcap (Ethereal)" was
added. It is very similar to the common libpcap file format
but is capable of keeping nanosecond resolution timestamps.
This format is currently supported only by Ethereal.
o Ethereal's memory managment has been greatly improved.
o Ethereal can now save gzip-compressed capture files.
New Protocol Support
CIMD, CISCOWL-L2, DCCP, EDP, GNM, LLDP, ROS, RTSE, STANAG 4406,
WINS Replication, X.411, X.420
Updated Protocol Support
802.11 Radiotap, A11, AARP, ACSE, ACtrace, AFP, AFS, AgentX, AIM,
AJP13, ALCAP, AMR, ANSI A, ANSI IS-637-A, ANSI IS-683-A, ANSI
IS-801, ANSI MAP, AOE, AppleTalk, Armagetronad, ARP, ASAP, ASN.1,
BACapp, BER, BGP, BitTorrent, BOOTP, CAMEL, CLNP, CMIP, CMP, CMS,
COPS, CRMF, CSM_ENCAPS, DAAP, DCERPC (ATSVC, DCE_DFS, FLDB,
INITSHUTDOWN, LSA, NETLOGON, NT, SAMR, SPOOLSS, WINREG), DCM,
DCOM, DHCP Failover, DIAMETER, ENRP, ESS, FC, FCCT, FCDNS, FCELS,
FCFCS, FCFZS, FCP, FCSWILS, FTAM, GIOP, GPRS LLC, GSM, GTP, H1,
H.225, H.235, H.245, H.248, H.261, H.263, H.450, HSRP, HTTP, IAX2,
IEEE 802.11, IEEE 802.3, IEEE 802.3 Slow protocols, IP,
IP/IEEE1394, IRC, IrDA, ISAKMP, iSCSI, ISIS, ISUP, Jabber, JFIF,
Juniper, JXTA, K12, Kerberos, LDAP, LDP, LLC, LPD,
MAP_DialoguePDU, MDSHDR, Media, MEGACO, MGCP, MIME multipart, MMS,
MOUNT, MQ, MSMMS, NBNS, NCP, NDMP, NS_CERT_EXTS, OCSP, OPSI, OSPF,
PARLAY, PER, PKINIT, PKIX, PN-RT, PPP, PRES, PTP, RADIUS, RDT,
RPC, RSVP, RTCP, RTnet, RTSP, SCCP, SCSI, SCTP, SES, sFlow,
SIGCOMP, SIP, SliMP3, SMB, SMPP, SMRSE, SNA, SNMP, SPNEGO, SRVLOC,
STUN, T.38, TCAP, TCP, Text, TPKT, UMA, WBXML, WLANCERTEXTN, WSP,
X11, X.25, X.509, XML, YMSG
New and Updated Capture File Support
5Views, AiroPeek, ERF, EtherPeek, i4btrace, LANAlyzer, Libpcap,
Windows Sniffer, Tektronix K12
Getting Ethereal
The source code, Windows and Solaris installers can be downloaded
immediately from the following locations:
Main site:
Windows installer:
http://www.ethereal.com/distribution/win32/ethereal-setup-0.10.13.exe
Source code:
http://www.ethereal.com/distribution/ethereal-0.10.13.tar.gz
http://www.ethereal.com/distribution/ethereal-0.10.13.tar.bz2
Solaris installers:
http://www.ethereal.com/distribution/solaris/
SourceForge:
http://sourceforge.net/project/showfiles.php?group_id=255
The mirror sites listed at
http://www.ethereal.com/download.html#releases
should be updated shortly.
Digests
MD5(ethereal-0.10.13.tar.bz2)=9998cb4907a70925d33292bae89530d4
SHA1(ethereal-0.10.13.tar.bz2)=d83a326bb3b274c63e96c783c8b65a0ca848d721
RIPEMD160(ethereal-0.10.13.tar.bz2)=7d209f6c0a932f844ac1ab5fe9cfdef4145ee423
MD5(ethereal-0.10.13.tar.gz)=cae316aea6bb7113382adb3526fab899
SHA1(ethereal-0.10.13.tar.gz)=eb7309c3774c23bdc4be08fcdb0ef2bd31634667
RIPEMD160(ethereal-0.10.13.tar.gz)=69d94b74157b6d2c86a3c25ac5220b3934de2108
MD5(ethereal-setup-0.10.13.exe)=35560442d1bb695d7cba0e6eb0f9f9d5
SHA1(ethereal-setup-0.10.13.exe)=a57891da5e7e963598769b709374c514427f2563
RIPEMD160(ethereal-setup-0.10.13.exe)=c5ff5b55e2c104974cb7848691b51129dc259fbf
MD5(ethereal-0.10.13-solaris2.8-sparc-local.bz2)=5c7d399b18dcfbb48ca6fade0988dda0
SHA1(ethereal-0.10.13-solaris2.8-sparc-local.bz2)=7bbc7b6e0295ed1a91b4ab7d439f997c28c6c36c
RIPEMD160(ethereal-0.10.13-solaris2.8-sparc-local.bz2)=95c148ae5b45c3730bc61f834779b1d2eaeaec2f
MD5(ethereal-0.10.13-solaris2.9-sparc-local.bz2)=7e8c1ce2afe7e765b5cedec7f616f9ec
SHA1(ethereal-0.10.13-solaris2.9-sparc-local.bz2)=719c939cfd67d019680ea1786b13ed3e505c7f01
RIPEMD160(ethereal-0.10.13-solaris2.9-sparc-local.bz2)=9d77d53f1fef26f39b7bf819020e55b27bbbd5ac
MD5(patch-ethereal-0.10.12-to-0.10.13.diff.bz2)=9e2063f125dd9293a5148f43dbfacca6
SHA1(patch-ethereal-0.10.12-to-0.10.13.diff.bz2)=b2304a5299010f863049dd4276367dab978511d4
RIPEMD160(patch-ethereal-0.10.12-to-0.10.13.diff.bz2)=8c3328bccb50e16496b30507ab8080ee1fc0ef63
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFDVqr6kXaEuZt2wEERAl3DAJ0YT2r1RIx0t+a82CdloLr3kIG8wwCdEuyR
CEUhFsJYQLHoXsX/hkltE70=
=ID1d
-----END PGP SIGNATURE-----
_______________________________________________
Ethereal-announce mailing list
Ethereal-announce@ethereal.com
http://www.ethereal.com/mailman/listinfo/ethereal-announce
Hash: SHA1
Ethereal 0.10.13 has been released.
Bug Fixes
Several security vulnerabilities have been fixed since the
previous release. See the [1]application advisory for more
details.
o The ISAKMP dissector could exhaust system memory. Versions
affected: 0.10.11 to 0.10.12.
o The FC-FCS dissector could exhaust system memory. Versions
affected: 0.9.0 to 0.10.12.
o The RSVP dissector could exhaust system memory. Versions
affected: 0.9.4 to 0.10.12.
o The ISIS LSP dissector could exhaust system memory. Versions
affected: 0.8.18 to 0.10.12.
o The IrDA dissector could crash. Versions affected: 0.10.0 to
0.10.12.
o The SLIMP3 dissector could overflow a buffer. Versions
affected: 0.9.1 to 0.10.12.
o The BER dissector was susceptible to an infinite loop.
Versions affected: 0.10.3 to 0.10.12.
o The SCSI dissector could dereference a null pointer and crash.
Versions affected: 0.10.3 to 0.10.12.
o If the "Dissect unknown RPC program numbers" option was
enabled, the ONC RPC dissector might be able to exhaust system
memory. This option is disabled by default. Versions affected:
0.7.7 to 0.10.12.
o The sFlow dissector could dereference a null pointer and
crash. Versions affected: 0.9.14 to 0.10.12.
o The RTnet dissector could dereference a null pointer and
crash. Versions affected: 0.10.8 to 0.10.12.
o The SigComp UDVM could go into an infinite loop or crash.
Versions affected: 0.10.12.
o If SMB transaction payload reassembly is enabled the SMB
dissector could crash. This preference is disabled by default.
Versions affected: 0.9.7 to 0.10.12.
o The X11 dissector could attempt to divide by zero. Versions
affected: 0.10.1 to 0.10.12.
o The AgentX dissector could overflow a buffer. Versions
affected: 0.10.10 to 0.10.12.
o The WSP dissector could free an invalid pointer. Versions
affected: 0.10.1 to 0.10.12.
o The NCP dissector was susceptible to an infinite loop.
Versions affected: 0.9.7 to 0.10.12.
o The ACSE dissector was susceptible to infinite recursion.
Versions affected: 0.10.12.
o The CLNP dissector could crash. Versions affected: 0.9.11 to
0.10.12.
o iDEFENSE found a buffer overflow in the SRVLOC dissector.
Versions affected: 0.10.0 to 0.10.12.
When trying to save a flow graph, Ethereal could crash.
When viewing protocol hierarchy statistics, Ethereal and Tethereal
could crash.
The PCRE library that ships with the Windows installer has been
upgraded from version 4.4 to 6.3 in response to a [2]security
vulnerability.
New and Updated Features
The following features are new (or have been significantly
updated) since the last release:
o The timestamp display precision of the Packet List can be
adjusted now. The precision will be automatically adjusted
depending on the file format loaded, e.g. libpcap typically
uses microsecond resolution displayed like "0.000000". In
addition you can adjust the precision manually through the
View/Time Display Format menu items.
o The WinPcap version 3.1 installer was released since the last
Ethereal release. The version included in the Ethereal Windows
installer has been updated from 3.1 beta 4 to 3.1. If you want
to upgrade WinPcap separately or install a different version
you can download it from: [3]the WinPcap web site.
o The behavior of the display filter "ip.checksum_bad" has
changed. Instead of merely checking for its presence you must
now make sure it is set, e.g. instead of using
"ip.checksum_bad" you must now use "ip.checksum_bad == 1".
o A new capture file format "Nanosecond libpcap (Ethereal)" was
added. It is very similar to the common libpcap file format
but is capable of keeping nanosecond resolution timestamps.
This format is currently supported only by Ethereal.
o Ethereal's memory managment has been greatly improved.
o Ethereal can now save gzip-compressed capture files.
New Protocol Support
CIMD, CISCOWL-L2, DCCP, EDP, GNM, LLDP, ROS, RTSE, STANAG 4406,
WINS Replication, X.411, X.420
Updated Protocol Support
802.11 Radiotap, A11, AARP, ACSE, ACtrace, AFP, AFS, AgentX, AIM,
AJP13, ALCAP, AMR, ANSI A, ANSI IS-637-A, ANSI IS-683-A, ANSI
IS-801, ANSI MAP, AOE, AppleTalk, Armagetronad, ARP, ASAP, ASN.1,
BACapp, BER, BGP, BitTorrent, BOOTP, CAMEL, CLNP, CMIP, CMP, CMS,
COPS, CRMF, CSM_ENCAPS, DAAP, DCERPC (ATSVC, DCE_DFS, FLDB,
INITSHUTDOWN, LSA, NETLOGON, NT, SAMR, SPOOLSS, WINREG), DCM,
DCOM, DHCP Failover, DIAMETER, ENRP, ESS, FC, FCCT, FCDNS, FCELS,
FCFCS, FCFZS, FCP, FCSWILS, FTAM, GIOP, GPRS LLC, GSM, GTP, H1,
H.225, H.235, H.245, H.248, H.261, H.263, H.450, HSRP, HTTP, IAX2,
IEEE 802.11, IEEE 802.3, IEEE 802.3 Slow protocols, IP,
IP/IEEE1394, IRC, IrDA, ISAKMP, iSCSI, ISIS, ISUP, Jabber, JFIF,
Juniper, JXTA, K12, Kerberos, LDAP, LDP, LLC, LPD,
MAP_DialoguePDU, MDSHDR, Media, MEGACO, MGCP, MIME multipart, MMS,
MOUNT, MQ, MSMMS, NBNS, NCP, NDMP, NS_CERT_EXTS, OCSP, OPSI, OSPF,
PARLAY, PER, PKINIT, PKIX, PN-RT, PPP, PRES, PTP, RADIUS, RDT,
RPC, RSVP, RTCP, RTnet, RTSP, SCCP, SCSI, SCTP, SES, sFlow,
SIGCOMP, SIP, SliMP3, SMB, SMPP, SMRSE, SNA, SNMP, SPNEGO, SRVLOC,
STUN, T.38, TCAP, TCP, Text, TPKT, UMA, WBXML, WLANCERTEXTN, WSP,
X11, X.25, X.509, XML, YMSG
New and Updated Capture File Support
5Views, AiroPeek, ERF, EtherPeek, i4btrace, LANAlyzer, Libpcap,
Windows Sniffer, Tektronix K12
Getting Ethereal
The source code, Windows and Solaris installers can be downloaded
immediately from the following locations:
Main site:
Windows installer:
http://www.ethereal.com/distribution/win32/ethereal-setup-0.10.13.exe
Source code:
http://www.ethereal.com/distribution/ethereal-0.10.13.tar.gz
http://www.ethereal.com/distribution/ethereal-0.10.13.tar.bz2
Solaris installers:
http://www.ethereal.com/distribution/solaris/
SourceForge:
http://sourceforge.net/project/showfiles.php?group_id=255
The mirror sites listed at
http://www.ethereal.com/download.html#releases
should be updated shortly.
Digests
MD5(ethereal-0.10.13.tar.bz2)=9998cb4907a70925d33292bae89530d4
SHA1(ethereal-0.10.13.tar.bz2)=d83a326bb3b274c63e96c783c8b65a0ca848d721
RIPEMD160(ethereal-0.10.13.tar.bz2)=7d209f6c0a932f844ac1ab5fe9cfdef4145ee423
MD5(ethereal-0.10.13.tar.gz)=cae316aea6bb7113382adb3526fab899
SHA1(ethereal-0.10.13.tar.gz)=eb7309c3774c23bdc4be08fcdb0ef2bd31634667
RIPEMD160(ethereal-0.10.13.tar.gz)=69d94b74157b6d2c86a3c25ac5220b3934de2108
MD5(ethereal-setup-0.10.13.exe)=35560442d1bb695d7cba0e6eb0f9f9d5
SHA1(ethereal-setup-0.10.13.exe)=a57891da5e7e963598769b709374c514427f2563
RIPEMD160(ethereal-setup-0.10.13.exe)=c5ff5b55e2c104974cb7848691b51129dc259fbf
MD5(ethereal-0.10.13-solaris2.8-sparc-local.bz2)=5c7d399b18dcfbb48ca6fade0988dda0
SHA1(ethereal-0.10.13-solaris2.8-sparc-local.bz2)=7bbc7b6e0295ed1a91b4ab7d439f997c28c6c36c
RIPEMD160(ethereal-0.10.13-solaris2.8-sparc-local.bz2)=95c148ae5b45c3730bc61f834779b1d2eaeaec2f
MD5(ethereal-0.10.13-solaris2.9-sparc-local.bz2)=7e8c1ce2afe7e765b5cedec7f616f9ec
SHA1(ethereal-0.10.13-solaris2.9-sparc-local.bz2)=719c939cfd67d019680ea1786b13ed3e505c7f01
RIPEMD160(ethereal-0.10.13-solaris2.9-sparc-local.bz2)=9d77d53f1fef26f39b7bf819020e55b27bbbd5ac
MD5(patch-ethereal-0.10.12-to-0.10.13.diff.bz2)=9e2063f125dd9293a5148f43dbfacca6
SHA1(patch-ethereal-0.10.12-to-0.10.13.diff.bz2)=b2304a5299010f863049dd4276367dab978511d4
RIPEMD160(patch-ethereal-0.10.12-to-0.10.13.diff.bz2)=8c3328bccb50e16496b30507ab8080ee1fc0ef63
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFDVqr6kXaEuZt2wEERAl3DAJ0YT2r1RIx0t+a82CdloLr3kIG8wwCdEuyR
CEUhFsJYQLHoXsX/hkltE70=
=ID1d
-----END PGP SIGNATURE-----
_______________________________________________
Ethereal-announce mailing list
Ethereal-announce@ethereal.com
http://www.ethereal.com/mailman/listinfo/ethereal-announce