Wireshark 1.0.2 fixes multiple vulnerabilities

[Till Ulen]

Binary package hint: wireshark

Wireshark 1.0.1 fixes multiple security issues in the previous releases.

* The GSM SMS dissector could crash
* The PANA and KISMET dissectors could force Wireshark to quit unexpectedly
* The RTMPT dissector could crash
* The RMI dissector could disclose system memory
* The syslog dissector could crash

See the upstream advisory wnpa-sec-2008-03 at <http://www.wireshark.org/security/wnpa-sec-2008-03.html>.

Please see the update in the comments.

[Till Ulen (tillulen)]

Here are the CVE numbers for the vulnerabilities fixed in Wireshark 1.0.1:
CVE-2008-3137 (GSM SMS dissector)
CVE-2008-3138 (PANA and KISMET dissectors)
CVE-2008-3139 (RTMPT dissector)
CVE-2008-3141 (RMI dissector)
CVE-2008-3140 (syslog dissector)

Wireshark 1.0.2 fixes another vulnerability:
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-3145
http://www.wireshark.org/security/wnpa-sec-2008-04.html
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2470

[nine (niin-deactivatedaccount-deactivatedaccount)]

Marked as security vulnerability. This is a DoS on wireshark. Setting to triaged.