Check for an infinite loop while processing cipher suites. Fixes bug 1582.
[obnox/wireshark/wip.git] / docbook / release-notes.xml
1 <?xml version="1.0"?>
2 <!DOCTYPE article PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
3 "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd" [
4
5 <!-- $Id$ -->
6
7 <!--
8 DOCUMENT SECTION
9 -Use this section to encode all document information
10 -->
11
12 <!--
13 Wireshark Info
14 -->
15   <!ENTITY WiresharkCurrentVersion "0.99.6">
16
17 ]>
18
19 <article>
20   <title>Wireshark &WiresharkCurrentVersion; Release Notes</title>
21
22   <section id="WhatIs"><title>What is Wireshark?</title>
23     <para>
24       Wireshark is the world's most popular network protocol analyzer.  It
25       is used for troubleshooting, analysis, development, and education.
26     </para>
27   </section>
28
29   <section id="WhatsNew"><title>What's New</title>
30     <section><title>Bug Fixes</title>
31     <para>
32
33       The following vulnerabilities have been fixed.  See the
34       <ulink url="http://www.wireshark.org/security/wnpa-sec-2007-02.html">security advisory</ulink> for details and a workaround.
35
36       <itemizedlist>
37
38         <listitem>
39           <para>
40             Wireshark could crash when dissecting an HTTP chunked
41             response.
42             <!-- Fixed in r21034 -->
43             (Bug <ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1394">1394</ulink>)
44           </para>
45           <para>Versions affected: 0.99.5</para>
46           <para>
47             <!-- <ulink url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-????">CVE-2007-????</ulink> -->
48           </para>
49         </listitem>
50
51         <listitem>
52           <para>
53             On some systems, Wireshark could crash while reading
54             iSeries capture files.
55             <!-- Fixed in r20990 -->
56             (Bug <ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1415">1415</ulink>)
57           </para>
58           <para>Versions affected: 0.10.14 to 0.99.5</para>
59           <para>
60             <!-- <ulink url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-????">CVE-2007-????</ulink> -->
61           </para>
62         </listitem>
63
64         <listitem>
65           <para>
66             Wireshark could exhaust system memory while reading a malformed
67             DCP ETSI packet.
68             <!-- Fixed in r21007 -->
69             (Bug <ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1264">1264</ulink>)
70           </para>
71           <para>Versions affected: 0.99.5</para>
72           <para>
73             <!-- <ulink url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-????">CVE-2007-????</ulink> -->
74           </para>
75         </listitem>
76
77         <listitem>
78           <para>
79             Defining a display filter macro with no arguments would make
80             Wireshark crash.
81             <!-- Fixed in r21664 -->
82             <!-- CID 232 -->
83           </para>
84           <para>Versions affected: 0.99.5</para>
85           <para>
86             <!-- <ulink url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-????">CVE-2007-????</ulink> -->
87           </para>
88         </listitem>
89
90         <listitem>
91           <para>
92             Wireshark could loop excessively while reading a malformed SSL
93             packet.
94             <!-- Fixed in r? -->
95             (Bug <ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1582">1582</ulink>)
96           </para>
97           <para>Versions affected: ?</para>
98           <para>
99             <!-- <ulink url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-????">CVE-2007-????</ulink> -->
100           </para>
101         </listitem>
102
103       </itemizedlist>
104
105     </para>
106
107     <para>
108
109     The following bugs have been fixed:
110
111       <itemizedlist>
112
113         <listitem><para>
114           WEP decryption would only work for the first key specified.
115           disappear or become unusable.
116         </para></listitem>
117
118
119
120       </itemizedlist>
121     </para>
122
123     </section>
124
125     <section><title>New and Updated Features</title>
126     <para>
127       The following features are new (or have been significantly updated)
128       since the last release:
129
130       <!--
131       - HTTP object export
132       - Delta times
133       - Code cleanup
134       -->
135
136     </para>
137     </section>
138
139     <section><title>New Protocol Support</title>
140     <para>
141
142     </para>
143     </section>
144
145     <section><title>Updated Protocol Support</title> <para>
146
147     </para>
148     </section>
149
150     <section><title>New and Updated Capture File Support</title>
151     <para>
152
153     </para>
154     </section>
155
156   </section>
157
158   <section id="GettingWireshark"><title>Getting Wireshark</title>
159     <para>
160       Wireshark source code and installation packages are available from
161       the <ulink url="http://www.wireshark.org/download.html">download
162       page</ulink> on the main web site.
163     </para>
164
165     <section><title>Vendor-supplied Packages</title>
166       <para>
167         Most Linux and Unix vendors supply their own Wireshark packages.
168         You can usually install or upgrade Wireshark using the package management
169         system specific to that platform.  A list of third-party packages
170         can be found on the
171         <ulink url="http://www.wireshark.org/download.html#otherplat">download page</ulink> on the Wireshark web site.
172       </para>
173     </section>
174
175   </section>
176
177   <!-- XXX needs to be written
178   <section id="RemovingWireshark"><title>Removing Wireshark</title>
179     <para>
180     </para>
181   </section>
182   -->
183
184   <section id="FileLocations"><title>File Locations</title>
185     <para>
186       Wireshark and TShark look in several different locations for
187       preference files, plugins, SNMP MIBS, and RADIUS dictionaries.
188       These locations vary from platform to platform.  You can use
189       About->Folders to find the default locations on your system.
190     </para>
191   </section>
192
193   <section id="KnownProblems"><title>Known Problems</title>
194
195     <para>
196       The <guibutton>Filter</guibutton> button is nonfunctional in the
197       file dialogs under Windows.
198       (<ulink url="http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=942">Bug
199       942</ulink>)
200     </para>
201
202   </section>
203
204   <section id="GettingHelp"><title>Getting Help</title>
205     <para>
206     Community support is available on the wireshark-users mailing list.
207     Subscription information and archives for all of Wireshark's mailing
208     lists can be found on <ulink url="http://www.wireshark.org/lists/">the
209     web site</ulink>.
210     </para>
211     <para>
212     Commercial support, training, and development services are available
213     from <ulink url="http://www.cacetech.com/">CACE Technologies</ulink>.
214     </para>
215   </section>
216
217   <section id="FAQ"><title>Frequently Asked Questions</title>
218     <para>
219     A complete FAQ is available on the
220     <ulink url="http://www.wireshark.org/faq.html">Wireshark web site</ulink>.
221     </para>
222   </section>
223
224 </article>