Just coping wireshark security announcement: http://www.wireshark.org/security/wnpa-sec-2009-03.htm PCNFSD vulnerability in Wireshark® versions 0.8.20 to 1.0.7 Docid: wnpa-sec-2009-03 Date: May 21, 2009 Versions affected: 0.8.20 up to and including 1.0.7 Description: Wireshark 1.0.8 fixes the following vulnerability: * The PCNFSD dissector could crash. Versions affected: 0.8.20 to 1.0.7
arch teams, please, stabilize wireshark-1.0.8.
amd64/x86 stable
Stable for HPPA.
ppc64 done
ppc done
sparc stable
alpha/ia64 stable
No voting on this one, there will be a GLSA together with a bunch of other wireshark stuff.
CVE-2009-1829 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-1829): Unspecified vulnerability in the PCNFSD dissector in Wireshark 0.8.20 through 1.0.7 allows remote attackers to cause a denial of service (crash) via crafted PCNFSD packets.
GLSA 200906-05, thanks everyone