Ethereal is old and dangerously buggy, update to wireshark

[Omnifarious]

Binary package hint: ethereal

This package should be removed from dapper and wireshark put in its place. Ethereal has several security problems reported against it that are now fixed in Wireshark.

http://www.wireshark.org/

It clearly states on that page that ethereal has changed it's name and lists various security problems that have been fixed since the name has been changed.

[Omnifarious (omnifarious)]

Rejecting this for Ubuntu as a whole because I believe it is only a problem in Dapper.

[acidblue (sunblaster5)]

Wireshark won't compile in Dapper.
Kicks error: 'GTK+ not found'
even though GTK+ is installed.
kicks same error even if you do './configure--disable-wireshark'
Untill the powers that be can get wireshark to install on Dapper
ethereal will most likely stay--in dapper at least.
If anyone has gotten wireshark to compile in Dapper please share.

[Gerald Combs (gerald.combs)]

Which version of Wireshark are you trying to compile, and what shows up in config.log? Also, do you have the glib and gtk+ _dev_ packages installed?

FWIW, we've been using Ubuntu (breezy, then dapper, now edgy) in our Buildbot environment since the name change. Compilation _shouldn't_ be a problem...

[Omnifarious (omnifarious)]

This bug is pointless. If it takes over 6 months to solve a security issue with a current distribution (that 6 months later is now out of date, as might be expected) then I'm not going to be using Ubuntu or recommending it to anybody I know.

I'm sorry, but every experience I've had with reporting a bug against anything here has been nothing short of awful.

[Martin Pitt (pitti)]

Omnifarius, please keep in mind that wireshark is in universe and thus not covered by the official security team. If a community member steps up and wants to prepare and fix an updated package for dapper, we are glad to help and upload, but as long as noone is interested it, it just won't happen..

[Jamie Strandboge (jdstrand)]

Thank you for taking the time to report this bug and helping to make Ubuntu better. However, I am closing it because the bug has been fixed in later versions of Ubuntu.

If you need a fix for the bug in previous versions of Ubuntu, please follow the instructions for "How to request new packages" at https://help.ubuntu.com/community/UbuntuBackports#request-new-packages