Accepted tcpick 0.2.1-3 (source)

Ubuntu Installer archive at ubuntu.com
Tue May 9 20:57:45 BST 2006


Accepted:
 OK: tcpick_0.2.1-3.dsc
     -> Component: universe Section: net
 OK: tcpick_0.2.1-3.diff.gz

Origin: Debian/unstable
Format: 1.7
Date: Tue,  09 May 2006 20:50:31 +0100
Source: tcpick
Binary: tcpick
Architecture: source
Version: 0.2.1-3
Distribution: dapper
Urgency: high
Maintainer: Cedric Delfosse <cedric at debian.org>
Changed-By: Martin Pitt <martin.pitt at ubuntu.com>
Description: 
 tcpick     - TCP stream sniffer and connection tracker
Closes: 360571
Changes: 
 tcpick (0.2.1-3) unstable; urgency=high
 .
   * src/write.c: temporary patch to fix CVE-2006-0048 (Closes: Bug#360571)
     As upstream is not responsive, I have written this one-line patch.
     With the option -yP, tcpick shows data contained in the captured packets.
     For some packets, tcpick computes a negative buffer length, which is used
     in a while (buffer length) {} loop to display the packet content. When the
     buffer length is negative, the loop never ends, and tcpick segfaults after
     a while.
     This patch tests if the computed buffer length is negative before using
     it, and set it to 0 in this case.
Files: 
 0f68563f61fbc42b344a9bb2a4455c33 593 net optional tcpick_0.2.1-3.dsc
 5008447b0492f666df27669f89d9b382 4895 net optional tcpick_0.2.1-3.diff.gz





More information about the dapper-changes mailing list