- Issued:
- 2009-11-26
- Updated:
- 2010-04-07
RHBA-2009:1605 - Bug Fix Advisory
Synopsis
tcpdump bug fix update
Type/Severity
Bug Fix Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
Updated tcpdump packages that fix two bugs are now available for Red Hat
Enterprise Linux 5.
[Updated 7 April 2010]
These packages have also been made available in the following child channels:
Red Hat Enterprise Linux Desktop Client 5 for x86, and Red Hat Desktop
Workstation Client 5 for x86. No changes have been made to the packages.
Description
The tcpdump tool is a command line utility for monitoring network traffic.
These updated packages resolve the following issues:
- when run on 64-bit architectures, tcpslice read the timestamps in pcap
files as 64-bit values despite them always been stored as 32-bit.
Consequently, rather than extracting packet-trace file portions as
expected, tcpslice returned a "couldn't find final packet in file" error.
With this update tcpslice reads pcap timestamps as 32-bit values and now
works as expected on 64-bit architectures. (BZ#485670)
- running "tcpdump -i [n]", where [n] was an invalid interface index,
caused tcpdump to SEGFAULT rather than return an "Invalid adapter index"
error. tcpdump now explicitly checks for the last entry in the device list.
If the [n] specified is higher than this entry, it returns "Invalid adapter
index" as expected and does not crash. (BZ#497819)
All tcpdump users should upgrade to these updated packages, which resolve
these issues.
Solution
Before applying this update, make sure all previously-released errata
relevant to your system have been applied.
This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259
Affected Products
- Red Hat Enterprise Linux Server 5 x86_64
- Red Hat Enterprise Linux Server 5 ia64
- Red Hat Enterprise Linux Server 5 i386
- Red Hat Enterprise Linux Workstation 5 x86_64
- Red Hat Enterprise Linux Workstation 5 i386
- Red Hat Enterprise Linux Desktop 5 x86_64
- Red Hat Enterprise Linux Desktop 5 i386
- Red Hat Enterprise Linux for IBM z Systems 5 s390x
- Red Hat Enterprise Linux for Power, big endian 5 ppc
- Red Hat Enterprise Linux Server from RHUI 5 x86_64
- Red Hat Enterprise Linux Server from RHUI 5 i386
Fixes
- BZ - 485670 - tcpslice doesn't work on x86_64 on RHEL5
- BZ - 497819 - tcpdump segfaults when passing invalid interface number
CVEs
(none)
References
(none)
Red Hat Enterprise Linux Server 5
SRPM | |
---|---|
tcpdump-3.9.4-15.el5.src.rpm | SHA-256: 01cb91bd59c9d506a8079d3b9f7880e223d3e8a117bda2fc51581713aafa09d8 |
x86_64 | |
arpwatch-2.1a13-22.el5.x86_64.rpm | SHA-256: 8ed3133c0056c5b6ec751e973b1cb14900aba86d386117d0c25d2c9b790c36d3 |
libpcap-0.9.4-15.el5.i386.rpm | SHA-256: 3781c0e09dcac80938bf20d1bd30da0e28efc7d5b16f1bfc2ec2a7f829b1e93c |
libpcap-0.9.4-15.el5.x86_64.rpm | SHA-256: 142d4e0b98f88d38aba6e4238f632919271749a7cd11628153ff9768e240c2af |
libpcap-devel-0.9.4-15.el5.i386.rpm | SHA-256: 6179a4cff09ca5bf1b04e8fd002bc38180ff7890d18270e14a77137e8f163ff6 |
libpcap-devel-0.9.4-15.el5.x86_64.rpm | SHA-256: 98d4791f82e6352fb64982aab216536924c86b37dcc891bcb8509810d4abde70 |
tcpdump-3.9.4-15.el5.x86_64.rpm | SHA-256: 9801c04555e2dd4cc20178cf0e41686bbb400c61fdc01f62594130420d42aeca |
ia64 | |
arpwatch-2.1a13-22.el5.ia64.rpm | SHA-256: df9dad7bc649debde2a1292009370b1516b261ae1ff11bb0087090c250ba147e |
libpcap-0.9.4-15.el5.ia64.rpm | SHA-256: 9936d0009a42186f4b53c9290f89c5c1880fc175ba00a0c376791427ca4849ad |
libpcap-devel-0.9.4-15.el5.ia64.rpm | SHA-256: 804131b8cf4f87e5e981b72ff32916099dce4649e94d68aaf772cc8e12f589bb |
tcpdump-3.9.4-15.el5.ia64.rpm | SHA-256: e1dafa1a28cfd3bcd11a42abe7beae049aedf6847e422c26fd488cf9378720d3 |
i386 | |
arpwatch-2.1a13-22.el5.i386.rpm | SHA-256: a5aff25cd7a3ef93d9907d20856cc18881df5910676bdcfdb8108410d7a534c9 |
libpcap-0.9.4-15.el5.i386.rpm | SHA-256: 3781c0e09dcac80938bf20d1bd30da0e28efc7d5b16f1bfc2ec2a7f829b1e93c |
libpcap-devel-0.9.4-15.el5.i386.rpm | SHA-256: 6179a4cff09ca5bf1b04e8fd002bc38180ff7890d18270e14a77137e8f163ff6 |
tcpdump-3.9.4-15.el5.i386.rpm | SHA-256: d9bbea225c26b5a5b0e260c1669c2d2cb711e498c76807c7d741d8ef509a615f |
Red Hat Enterprise Linux Workstation 5
SRPM | |
---|---|
tcpdump-3.9.4-15.el5.src.rpm | SHA-256: 01cb91bd59c9d506a8079d3b9f7880e223d3e8a117bda2fc51581713aafa09d8 |
x86_64 | |
arpwatch-2.1a13-22.el5.x86_64.rpm | SHA-256: 8ed3133c0056c5b6ec751e973b1cb14900aba86d386117d0c25d2c9b790c36d3 |
libpcap-0.9.4-15.el5.i386.rpm | SHA-256: 3781c0e09dcac80938bf20d1bd30da0e28efc7d5b16f1bfc2ec2a7f829b1e93c |
libpcap-0.9.4-15.el5.x86_64.rpm | SHA-256: 142d4e0b98f88d38aba6e4238f632919271749a7cd11628153ff9768e240c2af |
libpcap-devel-0.9.4-15.el5.i386.rpm | SHA-256: 6179a4cff09ca5bf1b04e8fd002bc38180ff7890d18270e14a77137e8f163ff6 |
libpcap-devel-0.9.4-15.el5.x86_64.rpm | SHA-256: 98d4791f82e6352fb64982aab216536924c86b37dcc891bcb8509810d4abde70 |
tcpdump-3.9.4-15.el5.x86_64.rpm | SHA-256: 9801c04555e2dd4cc20178cf0e41686bbb400c61fdc01f62594130420d42aeca |
i386 | |
arpwatch-2.1a13-22.el5.i386.rpm | SHA-256: a5aff25cd7a3ef93d9907d20856cc18881df5910676bdcfdb8108410d7a534c9 |
libpcap-0.9.4-15.el5.i386.rpm | SHA-256: 3781c0e09dcac80938bf20d1bd30da0e28efc7d5b16f1bfc2ec2a7f829b1e93c |
libpcap-devel-0.9.4-15.el5.i386.rpm | SHA-256: 6179a4cff09ca5bf1b04e8fd002bc38180ff7890d18270e14a77137e8f163ff6 |
tcpdump-3.9.4-15.el5.i386.rpm | SHA-256: d9bbea225c26b5a5b0e260c1669c2d2cb711e498c76807c7d741d8ef509a615f |
Red Hat Enterprise Linux Desktop 5
SRPM | |
---|---|
tcpdump-3.9.4-15.el5.src.rpm | SHA-256: 01cb91bd59c9d506a8079d3b9f7880e223d3e8a117bda2fc51581713aafa09d8 |
x86_64 | |
libpcap-0.9.4-15.el5.i386.rpm | SHA-256: 3781c0e09dcac80938bf20d1bd30da0e28efc7d5b16f1bfc2ec2a7f829b1e93c |
libpcap-0.9.4-15.el5.x86_64.rpm | SHA-256: 142d4e0b98f88d38aba6e4238f632919271749a7cd11628153ff9768e240c2af |
tcpdump-3.9.4-15.el5.x86_64.rpm | SHA-256: 9801c04555e2dd4cc20178cf0e41686bbb400c61fdc01f62594130420d42aeca |
i386 | |
libpcap-0.9.4-15.el5.i386.rpm | SHA-256: 3781c0e09dcac80938bf20d1bd30da0e28efc7d5b16f1bfc2ec2a7f829b1e93c |
tcpdump-3.9.4-15.el5.i386.rpm | SHA-256: d9bbea225c26b5a5b0e260c1669c2d2cb711e498c76807c7d741d8ef509a615f |
Red Hat Enterprise Linux for IBM z Systems 5
SRPM | |
---|---|
tcpdump-3.9.4-15.el5.src.rpm | SHA-256: 01cb91bd59c9d506a8079d3b9f7880e223d3e8a117bda2fc51581713aafa09d8 |
s390x | |
arpwatch-2.1a13-22.el5.s390x.rpm | SHA-256: 41681eca5850634747ec34584a07b3358b392e313c0058f5911cf7fd7f0d4893 |
libpcap-0.9.4-15.el5.s390.rpm | SHA-256: 46bbc84feb02b7290b7610e20038a8fe6ce6f0aee9f0077e639ff494c1ba6c43 |
libpcap-0.9.4-15.el5.s390x.rpm | SHA-256: ec25506be54beb324f382bce993447647492cea0f1398614b3731978bdc89733 |
libpcap-devel-0.9.4-15.el5.s390.rpm | SHA-256: 14ba8a51b1e6ee19372dd6b3386cef733082b3628fdca02702c375b661be56dd |
libpcap-devel-0.9.4-15.el5.s390x.rpm | SHA-256: a0fd66dbe119f05acdeb3bd0889fbfb818704495b2413e825d1f1776d9af5d2d |
tcpdump-3.9.4-15.el5.s390x.rpm | SHA-256: 865744855b6a89d8648ee1c3e3f1e8ecdbf9c8e3dbe5173ae299a9c1f1db8796 |
Red Hat Enterprise Linux for Power, big endian 5
SRPM | |
---|---|
tcpdump-3.9.4-15.el5.src.rpm | SHA-256: 01cb91bd59c9d506a8079d3b9f7880e223d3e8a117bda2fc51581713aafa09d8 |
ppc | |
arpwatch-2.1a13-22.el5.ppc.rpm | SHA-256: 6e950306b45d191ef5dd198f0d7ed4dd6dd2f01ff80ad665eef087f058284ef6 |
libpcap-0.9.4-15.el5.ppc.rpm | SHA-256: d157a2683b24fc0b4916e9245a5538d9afa50d4234bc020668f4fff657cbe9e2 |
libpcap-0.9.4-15.el5.ppc64.rpm | SHA-256: 3b5eac728eacb7ef9047b465c3c3d02de75c430b189cbd26710e3a7ce3845945 |
libpcap-devel-0.9.4-15.el5.ppc.rpm | SHA-256: b6bf85a018f2c8a650991e511c36c1d32cac633fad891beba0f25247040f216c |
libpcap-devel-0.9.4-15.el5.ppc64.rpm | SHA-256: 7db5abd2f359344baf4309963d46b3787006dba6374ce1beb2676217d7cbea6c |
tcpdump-3.9.4-15.el5.ppc.rpm | SHA-256: 6b7e0bd343fc126692ccf9e74236454ddc5b43268b906421c1a0b09fd2fe88d9 |
Red Hat Enterprise Linux Server from RHUI 5
SRPM | |
---|---|
tcpdump-3.9.4-15.el5.src.rpm | SHA-256: 01cb91bd59c9d506a8079d3b9f7880e223d3e8a117bda2fc51581713aafa09d8 |
x86_64 | |
arpwatch-2.1a13-22.el5.x86_64.rpm | SHA-256: 8ed3133c0056c5b6ec751e973b1cb14900aba86d386117d0c25d2c9b790c36d3 |
libpcap-0.9.4-15.el5.i386.rpm | SHA-256: 3781c0e09dcac80938bf20d1bd30da0e28efc7d5b16f1bfc2ec2a7f829b1e93c |
libpcap-0.9.4-15.el5.x86_64.rpm | SHA-256: 142d4e0b98f88d38aba6e4238f632919271749a7cd11628153ff9768e240c2af |
libpcap-devel-0.9.4-15.el5.i386.rpm | SHA-256: 6179a4cff09ca5bf1b04e8fd002bc38180ff7890d18270e14a77137e8f163ff6 |
libpcap-devel-0.9.4-15.el5.x86_64.rpm | SHA-256: 98d4791f82e6352fb64982aab216536924c86b37dcc891bcb8509810d4abde70 |
tcpdump-3.9.4-15.el5.x86_64.rpm | SHA-256: 9801c04555e2dd4cc20178cf0e41686bbb400c61fdc01f62594130420d42aeca |
i386 | |
arpwatch-2.1a13-22.el5.i386.rpm | SHA-256: a5aff25cd7a3ef93d9907d20856cc18881df5910676bdcfdb8108410d7a534c9 |
libpcap-0.9.4-15.el5.i386.rpm | SHA-256: 3781c0e09dcac80938bf20d1bd30da0e28efc7d5b16f1bfc2ec2a7f829b1e93c |
libpcap-devel-0.9.4-15.el5.i386.rpm | SHA-256: 6179a4cff09ca5bf1b04e8fd002bc38180ff7890d18270e14a77137e8f163ff6 |
tcpdump-3.9.4-15.el5.i386.rpm | SHA-256: d9bbea225c26b5a5b0e260c1669c2d2cb711e498c76807c7d741d8ef509a615f |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.