Wireshark · Ethereal-announce: [Ethereal-announce] Ethereal 0.10.13 is now available

[Gerald Combs <gerald@xxxxxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ethereal 0.10.13 has been released.

  Bug Fixes

   Several security vulnerabilities have been fixed since the
   previous release. See the [1]application advisory for more
   details.

     o The ISAKMP dissector could exhaust system memory. Versions
       affected: 0.10.11 to 0.10.12.

     o The FC-FCS dissector could exhaust system memory. Versions
       affected: 0.9.0 to 0.10.12.

     o The RSVP dissector could exhaust system memory. Versions
       affected: 0.9.4 to 0.10.12.

     o The ISIS LSP dissector could exhaust system memory. Versions
       affected: 0.8.18 to 0.10.12.

     o The IrDA dissector could crash. Versions affected: 0.10.0 to
       0.10.12.

     o The SLIMP3 dissector could overflow a buffer. Versions
       affected: 0.9.1 to 0.10.12.

     o The BER dissector was susceptible to an infinite loop.
       Versions affected: 0.10.3 to 0.10.12.

     o The SCSI dissector could dereference a null pointer and crash.
       Versions affected: 0.10.3 to 0.10.12.

     o If the "Dissect unknown RPC program numbers" option was
       enabled, the ONC RPC dissector might be able to exhaust system
       memory. This option is disabled by default. Versions affected:
       0.7.7 to 0.10.12.

     o The sFlow dissector could dereference a null pointer and
       crash. Versions affected: 0.9.14 to 0.10.12.

     o The RTnet dissector could dereference a null pointer and
       crash. Versions affected: 0.10.8 to 0.10.12.

     o The SigComp UDVM could go into an infinite loop or crash.
       Versions affected: 0.10.12.

     o If SMB transaction payload reassembly is enabled the SMB
       dissector could crash. This preference is disabled by default.
       Versions affected: 0.9.7 to 0.10.12.

     o The X11 dissector could attempt to divide by zero. Versions
       affected: 0.10.1 to 0.10.12.

     o The AgentX dissector could overflow a buffer. Versions
       affected: 0.10.10 to 0.10.12.

     o The WSP dissector could free an invalid pointer. Versions
       affected: 0.10.1 to 0.10.12.

     o The NCP dissector was susceptible to an infinite loop.
       Versions affected: 0.9.7 to 0.10.12.

     o The ACSE dissector was susceptible to infinite recursion.
       Versions affected: 0.10.12.

     o The CLNP dissector could crash. Versions affected: 0.9.11 to
       0.10.12.

     o iDEFENSE found a buffer overflow in the SRVLOC dissector.
       Versions affected: 0.10.0 to 0.10.12.

   When trying to save a flow graph, Ethereal could crash.

   When viewing protocol hierarchy statistics, Ethereal and Tethereal
   could crash.

   The PCRE library that ships with the Windows installer has been
   upgraded from version 4.4 to 6.3 in response to a [2]security
   vulnerability.

  New and Updated Features

   The following features are new (or have been significantly
   updated) since the last release:

     o The timestamp display precision of the Packet List can be
       adjusted now. The precision will be automatically adjusted
       depending on the file format loaded, e.g. libpcap typically
       uses microsecond resolution displayed like "0.000000". In
       addition you can adjust the precision manually through the
       View/Time Display Format menu items.

     o The WinPcap version 3.1 installer was released since the last
       Ethereal release. The version included in the Ethereal Windows
       installer has been updated from 3.1 beta 4 to 3.1. If you want
       to upgrade WinPcap separately or install a different version
       you can download it from: [3]the WinPcap web site.

     o The behavior of the display filter "ip.checksum_bad" has
       changed. Instead of merely checking for its presence you must
       now make sure it is set, e.g. instead of using
       "ip.checksum_bad" you must now use "ip.checksum_bad == 1".

     o A new capture file format "Nanosecond libpcap (Ethereal)" was
       added. It is very similar to the common libpcap file format
       but is capable of keeping nanosecond resolution timestamps.
       This format is currently supported only by Ethereal.

     o Ethereal's memory managment has been greatly improved.

     o Ethereal can now save gzip-compressed capture files.

  New Protocol Support

   CIMD, CISCOWL-L2, DCCP, EDP, GNM, LLDP, ROS, RTSE, STANAG 4406,
   WINS Replication, X.411, X.420

  Updated Protocol Support

   802.11 Radiotap, A11, AARP, ACSE, ACtrace, AFP, AFS, AgentX, AIM,
   AJP13, ALCAP, AMR, ANSI A, ANSI IS-637-A, ANSI IS-683-A, ANSI
   IS-801, ANSI MAP, AOE, AppleTalk, Armagetronad, ARP, ASAP, ASN.1,
   BACapp, BER, BGP, BitTorrent, BOOTP, CAMEL, CLNP, CMIP, CMP, CMS,
   COPS, CRMF, CSM_ENCAPS, DAAP, DCERPC (ATSVC, DCE_DFS, FLDB,
   INITSHUTDOWN, LSA, NETLOGON, NT, SAMR, SPOOLSS, WINREG), DCM,
   DCOM, DHCP Failover, DIAMETER, ENRP, ESS, FC, FCCT, FCDNS, FCELS,
   FCFCS, FCFZS, FCP, FCSWILS, FTAM, GIOP, GPRS LLC, GSM, GTP, H1,
   H.225, H.235, H.245, H.248, H.261, H.263, H.450, HSRP, HTTP, IAX2,
   IEEE 802.11, IEEE 802.3, IEEE 802.3 Slow protocols, IP,
   IP/IEEE1394, IRC, IrDA, ISAKMP, iSCSI, ISIS, ISUP, Jabber, JFIF,
   Juniper, JXTA, K12, Kerberos, LDAP, LDP, LLC, LPD,
   MAP_DialoguePDU, MDSHDR, Media, MEGACO, MGCP, MIME multipart, MMS,
   MOUNT, MQ, MSMMS, NBNS, NCP, NDMP, NS_CERT_EXTS, OCSP, OPSI, OSPF,
   PARLAY, PER, PKINIT, PKIX, PN-RT, PPP, PRES, PTP, RADIUS, RDT,
   RPC, RSVP, RTCP, RTnet, RTSP, SCCP, SCSI, SCTP, SES, sFlow,
   SIGCOMP, SIP, SliMP3, SMB, SMPP, SMRSE, SNA, SNMP, SPNEGO, SRVLOC,
   STUN, T.38, TCAP, TCP, Text, TPKT, UMA, WBXML, WLANCERTEXTN, WSP,
   X11, X.25, X.509, XML, YMSG

  New and Updated Capture File Support

   5Views, AiroPeek, ERF, EtherPeek, i4btrace, LANAlyzer, Libpcap,
   Windows Sniffer, Tektronix K12


Getting Ethereal

  The source code, Windows and Solaris installers can be downloaded
  immediately from the following locations:

Main site:

Windows installer:

  http://www.ethereal.com/distribution/win32/ethereal-setup-0.10.13.exe

Source code:

  http://www.ethereal.com/distribution/ethereal-0.10.13.tar.gz
  http://www.ethereal.com/distribution/ethereal-0.10.13.tar.bz2

Solaris installers:

  http://www.ethereal.com/distribution/solaris/

SourceForge:

  http://sourceforge.net/project/showfiles.php?group_id=255


The mirror sites listed at

  http://www.ethereal.com/download.html#releases

should be updated shortly.


Digests

MD5(ethereal-0.10.13.tar.bz2)=9998cb4907a70925d33292bae89530d4
SHA1(ethereal-0.10.13.tar.bz2)=d83a326bb3b274c63e96c783c8b65a0ca848d721
RIPEMD160(ethereal-0.10.13.tar.bz2)=7d209f6c0a932f844ac1ab5fe9cfdef4145ee423

MD5(ethereal-0.10.13.tar.gz)=cae316aea6bb7113382adb3526fab899
SHA1(ethereal-0.10.13.tar.gz)=eb7309c3774c23bdc4be08fcdb0ef2bd31634667
RIPEMD160(ethereal-0.10.13.tar.gz)=69d94b74157b6d2c86a3c25ac5220b3934de2108

MD5(ethereal-setup-0.10.13.exe)=35560442d1bb695d7cba0e6eb0f9f9d5
SHA1(ethereal-setup-0.10.13.exe)=a57891da5e7e963598769b709374c514427f2563
RIPEMD160(ethereal-setup-0.10.13.exe)=c5ff5b55e2c104974cb7848691b51129dc259fbf

MD5(ethereal-0.10.13-solaris2.8-sparc-local.bz2)=5c7d399b18dcfbb48ca6fade0988dda0
SHA1(ethereal-0.10.13-solaris2.8-sparc-local.bz2)=7bbc7b6e0295ed1a91b4ab7d439f997c28c6c36c
RIPEMD160(ethereal-0.10.13-solaris2.8-sparc-local.bz2)=95c148ae5b45c3730bc61f834779b1d2eaeaec2f

MD5(ethereal-0.10.13-solaris2.9-sparc-local.bz2)=7e8c1ce2afe7e765b5cedec7f616f9ec
SHA1(ethereal-0.10.13-solaris2.9-sparc-local.bz2)=719c939cfd67d019680ea1786b13ed3e505c7f01
RIPEMD160(ethereal-0.10.13-solaris2.9-sparc-local.bz2)=9d77d53f1fef26f39b7bf819020e55b27bbbd5ac

MD5(patch-ethereal-0.10.12-to-0.10.13.diff.bz2)=9e2063f125dd9293a5148f43dbfacca6
SHA1(patch-ethereal-0.10.12-to-0.10.13.diff.bz2)=b2304a5299010f863049dd4276367dab978511d4
RIPEMD160(patch-ethereal-0.10.12-to-0.10.13.diff.bz2)=8c3328bccb50e16496b30507ab8080ee1fc0ef63


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDVqr6kXaEuZt2wEERAl3DAJ0YT2r1RIx0t+a82CdloLr3kIG8wwCdEuyR
CEUhFsJYQLHoXsX/hkltE70=
=ID1d
-----END PGP SIGNATURE-----