Bug#770415: Bug#770434: CVE-2014-8767 tcpdump denial of service in verbose mode using malformed OLSR payload, Bug#770424: CVE-2014-8769 tcpdump unreliable output using malformed AOVD payload, Bug#7704

2014-11-21 Thread Romain Francoise
Thanks. Upstream doesn't seem to have released official patches yet, or if they have they haven't kept me in the loop. I've asked for clarification on the mailing list. -- Romain Francoise rfranco...@debian.org http://people.debian.org/~rfrancoise/ -- To UNSUBSCRIBE, email to

Bug#770415: Bug#770434: CVE-2014-8767 tcpdump denial of service in verbose mode using malformed OLSR payload, Bug#770424: CVE-2014-8769 tcpdump unreliable output using malformed AOVD payload, Bug#7704

2014-11-21 Thread Nguyen Cong
Thanks for your information. I already try on master branch of tcpdump on github, it seems that they haven't fixed it yet. Still see segfault message on dmesg. On 21/11/2014 16:10, Romain Francoise wrote: Thanks. Upstream doesn't seem to have released official patches yet, or if they have they