TCPDump Malformed BGP Packet Memory Corruption Vulnerability Solution:
Trustix has released an advisory. Information about obtaining and applying fixes can be found in the referenced advisory.
Debian has released a new advisory (DSA 255-1) which contain new fix information.
MandrakeSoft has released an advisory. Information about obtaining and applying fixes are available in the referenced advisory.
SuSE has released an advisory (SuSE-SA:2003:0015) which contains fixes. Further information about obtaining and applying fixes can be found in the advisory.
Red Hat has released a security advisory (RHSA-2003:032-01) that contains fixes addressing this and other tcpdump issues. Users are advised to upgrade as soon as possible.
OpenPKG has released an advisory OpenPKG-SA-2004.002 to address this and other issues. Please see the referenced advisory for more information.
Fixes available:
LBL tcpdump 3.4 a6
LBL tcpdump 3.5.2
LBL tcpdump 3.6.2