CAN-2003-0081

ethereal/ethereal.patch

@@ -8,3 +8,20 @@
  
  #ifdef HAVE_IO_H
  #include <io.h> /* open/close on win32 */
+# This is a security patch for ethereal vendor release-0-9-9
+# It will be included in future vendor releases and must be removed from here accordingly
+# http://www.ethereal.com/cgi-bin/viewcvs.cgi/ethereal/packet-socks.c
+# http://www.ethereal.com/cgi-bin/viewcvs.cgi/ethereal/packet-socks.c.diff?r1=text&tr1=1.43&r2=text&tr2=1.44&diff_format=u
+# http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0081
+#
+--- packet-socks.c.orig	Wed Mar  5 11:41:01 2003
++++ packet-socks.c	Wed Mar  5 11:46:52 2003
+@@ -908,7 +908,7 @@
+                 		linelen = lineend - data;
+ 
+        		                proto_tree_add_text( tree, tvb, offset, linelen,
+-       		                	format_text(data, linelen));
++       		                	"%s", format_text(data, linelen));
+                		        offset += linelen;
+                        		data = lineend;
+                        	}

ethereal/ethereal.spec

@@ -33,7 +33,7 @@ Distribution: OpenPKG [PLUS]
 Group:        Misc
 License:      GPL
 Version:      0.9.9
-Release:      20030124
+Release:      20030305
 
 #   package options
 %option       with_zlib    no