Andreas Stieger
1a5e352e8d
This release fixes minor vulnerabilities that could be used to trigger dissector crashes or infinite loops by making Wireshark read specially crafted packages from the network or a capture file (boo#1062645): * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42) * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43) * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44) * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45) * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46) OBS-URL: https://build.opensuse.org/package/show/network:utilities/wireshark?expand=0&rev=232
437 lines
13 KiB
RPMSpec
437 lines
13 KiB
RPMSpec
#
|
|
# spec file for package wireshark
|
|
#
|
|
# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
|
|
#
|
|
# All modifications and additions to the file contributed by third parties
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
# upon. The license for this file, and modifications and additions to the
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
# license for the pristine package is not an Open Source License, in which
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
# published by the Open Source Initiative.
|
|
|
|
# Please submit bugfixes or comments via http://bugs.opensuse.org/
|
|
#
|
|
|
|
|
|
# define libraries
|
|
%define libutil libwsutil8
|
|
%define libwire libwireshark10
|
|
%define libtap libwiretap7
|
|
%define libcodecs libwscodecs1
|
|
# disable caps
|
|
%define use_caps 0
|
|
# Enable new Qt gui on new releases and build old GTK2 gui on old releases
|
|
%if 0%{?suse_version} > 1140
|
|
%bcond_without gnutls
|
|
%bcond_without qt
|
|
%bcond_with gtk
|
|
%bcond_without geoip
|
|
%else
|
|
%bcond_with gnutls
|
|
%bcond_with qt
|
|
%bcond_without gtk
|
|
%bcond_with geoip
|
|
%endif
|
|
Name: wireshark
|
|
Version: 2.4.2
|
|
Release: 0
|
|
Summary: A Network Traffic Analyser
|
|
License: GPL-2.0+ AND GPL-3.0+
|
|
Group: Productivity/Networking/Diagnostic
|
|
Url: https://www.wireshark.org/
|
|
Source: https://www.wireshark.org/download/src/%{name}-%{version}.tar.xz
|
|
Source2: https://www.wireshark.org/download/SIGNATURES-%{version}.txt
|
|
Source3: https://www.wireshark.org/download/gerald_at_wireshark_dot_org.gpg#/wireshark.keyring
|
|
# PATCH-FIX-OPENSUSE wireshark-1.6.3-disable-warning-dialog.patch bnc#349782 prusnak@suse.cz -- don't show warning when running as root
|
|
Patch1: wireshark-1.2.0-disable-warning-dialog.patch
|
|
# PATCH-FEATURE-OPENSUSE wireshark-1.2.0-geoip.patch prusnak@suse.cz -- search in /var/lib/GeoIP if user hasn't set any GeoIP folders
|
|
Patch2: wireshark-1.2.0-geoip.patch
|
|
Patch4: wireshark-1.10.0-enable_lua.patch
|
|
# for patch7 wireshark-1.12.6-fix-QT-PIC-PIE.patch
|
|
BuildRequires: bison
|
|
BuildRequires: flex
|
|
BuildRequires: glib2-devel
|
|
BuildRequires: hicolor-icon-theme
|
|
BuildRequires: krb5-devel
|
|
BuildRequires: libcares-devel
|
|
BuildRequires: libgcrypt-devel >= 1.4.2
|
|
BuildRequires: libpcap-devel
|
|
BuildRequires: libsmi-devel
|
|
BuildRequires: libtool
|
|
BuildRequires: net-snmp-devel
|
|
BuildRequires: openssl-devel
|
|
BuildRequires: pcre-devel
|
|
BuildRequires: pkgconfig
|
|
BuildRequires: portaudio-devel
|
|
BuildRequires: tcpd-devel
|
|
BuildRequires: update-desktop-files
|
|
BuildRequires: zlib-devel
|
|
Requires: hicolor-icon-theme
|
|
Requires(pre): shadow
|
|
Recommends: wireshark-ui = %{version}
|
|
Provides: ethereal = %{version}
|
|
Obsoletes: ethereal < %{version}
|
|
%if %{with gnutls}
|
|
BuildRequires: libgnutls-devel >= 2.12.0
|
|
%endif
|
|
%if !0%{use_caps}
|
|
Requires: xdg-utils
|
|
%else
|
|
BuildRequires: libcap-devel
|
|
Requires(pre): permissions
|
|
%endif
|
|
%if %{with geoip}
|
|
BuildRequires: GeoIP-devel
|
|
Recommends: GeoIP
|
|
%endif
|
|
%if 0%{?suse_version} > 1310
|
|
BuildRequires: pkgconfig(libnl-3.0)
|
|
%endif
|
|
%if %{with gtk}
|
|
BuildRequires: cairo-devel
|
|
BuildRequires: gtk2-devel >= 2.12.0
|
|
%endif
|
|
%if %{with qt}
|
|
BuildRequires: libqt5-linguist
|
|
BuildRequires: pkgconfig(Qt5Core) >= 5.0.0
|
|
BuildRequires: pkgconfig(Qt5Gui)
|
|
BuildRequires: pkgconfig(Qt5Multimedia)
|
|
BuildRequires: pkgconfig(Qt5PrintSupport)
|
|
BuildRequires: pkgconfig(Qt5Widgets)
|
|
%endif
|
|
%if 0%{?suse_version} > 1320
|
|
BuildRequires: lua51-devel
|
|
%else
|
|
BuildRequires: lua-devel
|
|
%endif
|
|
%if 0%{?suse_version} <= 1110
|
|
BuildRequires: xz
|
|
%endif
|
|
|
|
%description
|
|
Wireshark is a network protocol analyzer. It allows examining data
|
|
from a live network or from a capture file on disk. You can
|
|
interactively browse the capture data, viewing summary and detailed
|
|
information for each packet. Wireshark has several features,
|
|
including a rich display filter language and the ability to view the
|
|
reconstructed stream of a TCP session.
|
|
|
|
%package -n %{libutil}
|
|
Summary: Library for wireshark utilities
|
|
Group: System/Libraries
|
|
|
|
%description -n %{libutil}
|
|
The libwsutil library provides utility functions for libwireshark.
|
|
|
|
%package -n %{libwire}
|
|
Summary: Network packet dissection library
|
|
Group: System/Libraries
|
|
|
|
%description -n %{libwire}
|
|
The libwireshark library provides the network packet dissection services
|
|
developed by the Wireshark project.
|
|
|
|
%package -n %{libtap}
|
|
Summary: Wireshark library for tapping
|
|
Group: System/Libraries
|
|
|
|
%description -n %{libtap}
|
|
Wiretap, part of the Wireshark project, is a library that allows one to read
|
|
and write several packet capture file formats.
|
|
|
|
%package -n %{libcodecs}
|
|
Summary: Network packet dissection codecs library
|
|
Group: System/Libraries
|
|
|
|
%description -n %{libcodecs}
|
|
The libwscodecs library provides codec functions for libwireshark.
|
|
|
|
%package devel
|
|
Summary: A Network Traffic Analyser
|
|
Group: Development/Libraries/C and C++
|
|
Requires: %{libcodecs} = %{version}
|
|
Requires: %{libtap} = %{version}
|
|
Requires: %{libutil} = %{version}
|
|
Requires: %{libwire} = %{version}
|
|
Requires: %{name} = %{version}
|
|
Requires: glib2-devel
|
|
Requires: glibc-devel
|
|
Provides: ethereal-devel = %{version}
|
|
Obsoletes: ethereal-devel < %{version}
|
|
|
|
%description devel
|
|
Wireshark is a network protocol analyzer. It allows examining data
|
|
from a live network or from a capture file on disk.
|
|
|
|
%if %{with gtk}
|
|
%package ui-gtk
|
|
Summary: A Network Traffic Analyser - GTK+ UI
|
|
Group: Productivity/Networking/Diagnostic
|
|
Requires: %{name} = %{version}
|
|
Provides: %{name}-ui = %{version}
|
|
|
|
%description ui-gtk
|
|
This package contains the GTK+ UI of Wireshark.
|
|
%endif
|
|
|
|
%if %{with qt}
|
|
%package ui-qt
|
|
Summary: A Network Traffic Analyser - Qt UI
|
|
Group: Productivity/Networking/Diagnostic
|
|
Requires: %{name} = %{version}
|
|
Provides: %{name}-ui = %{version}
|
|
# gtk is the deprecated ui so ensure its uninstall
|
|
Obsoletes: %{name}-ui-gtk
|
|
|
|
%description ui-qt
|
|
This package contains the Qt based UI for Wireshark.
|
|
%endif
|
|
|
|
%prep
|
|
# The publisher doesn't sign the source tarball, but a signatures file containing multiple hashes.
|
|
# Verify hashes in that file against source tarball.
|
|
echo "`grep %{name}-%{version}.tar.xz %{SOURCE2} | grep SHA1 | head -n1 | cut -d= -f2` %{SOURCE0}" | sha1sum -c
|
|
echo "`grep %{name}-%{version}.tar.xz %{SOURCE2} | grep SHA256 | head -n1 | cut -d= -f2` %{SOURCE0}" | sha256sum -c
|
|
|
|
%setup -q
|
|
%patch2 -p1
|
|
%patch4 -p1
|
|
|
|
%if ! %{use_caps}
|
|
%patch1 -p1
|
|
# open capture files without root privileges bsc#1025714
|
|
for X in wireshark{,-gtk}.desktop; do
|
|
cp -pv $X ${X/wireshark/wireshark-file}
|
|
echo "NoDisplay=true" >> ${X/wireshark/wireshark-file}
|
|
done
|
|
sed -i '/^MimeType.*/d' wireshark{,-gtk}.desktop
|
|
# run as root if not using caps
|
|
sed -i 's!^Exec=wireshark!Exec=%{_bindir}/xdg-su -c %{_bindir}/wireshark!' wireshark{,-gtk}.desktop
|
|
%endif
|
|
sed -i 's/^Icon=wireshark.png$/Icon=wireshark/' wireshark*.desktop
|
|
|
|
%build
|
|
export CFLAGS="%{optflags} -fPIC"
|
|
export CXXFLAGS="%{optflags} -fPIC"
|
|
export LDFLAGS="-pie"
|
|
|
|
%if %{with qt}
|
|
#XXX: buggy autoconf checks..
|
|
export PATH="%{_libdir}/qt5/bin:$PATH"
|
|
%endif
|
|
|
|
%configure \
|
|
%if %{with gtk}
|
|
--with-gtk=2 \
|
|
%endif
|
|
%if %{with qt}
|
|
--with-qt=yes \
|
|
%else
|
|
--with-qt=no \
|
|
%endif
|
|
--with-ssl \
|
|
%if %{with gnutls}
|
|
--with-gnutls=yes \
|
|
%else
|
|
--with-gnutls=no \
|
|
%endif
|
|
--with-plugins=%{_libdir}/%{name}/plugins/%{version} \
|
|
--with-pic=yes
|
|
|
|
make %{?_smp_mflags} V=1
|
|
|
|
%install
|
|
%make_install
|
|
find %{buildroot} -type f -name "*.la" -delete -print
|
|
|
|
# Ethereal support (remove when SLE-11 is out of scope
|
|
%if %{with gtk}
|
|
ln -fs wireshark-gtk %{buildroot}%{_bindir}/ethereal
|
|
%endif
|
|
%if %{with qt}
|
|
ln -fs wireshark %{buildroot}%{_bindir}/ethereal
|
|
%endif
|
|
ln -fs tshark %{buildroot}%{_bindir}/tethereal
|
|
|
|
install -d -m 0755 %{buildroot}%{_sysconfdir}
|
|
install -d -m 0755 %{buildroot}%{_mandir}/man1/
|
|
# install separate appdata files corresponding to .desktop files for AppStore integration
|
|
%if %{with qt}
|
|
install -d -m0755 %{buildroot}%{_datadir}/appdata
|
|
install -m644 wireshark.appdata.xml %{buildroot}%{_datadir}/appdata/%{name}.appdata.xml
|
|
sed -i -e "/<description>/i \ \ \ \ <name>Wireshark (QT) Network Analyzer<\/name>" \
|
|
-e "/<description>/i \ \ \ \ <summary>QT interface for wireshark network traffic analyzer<\/summary>" \
|
|
%{buildroot}%{_datadir}/appdata/%{name}.appdata.xml
|
|
%else
|
|
rm -f %{buildroot}%{_datadir}/appdata/%{name}.appdata.xml
|
|
%endif
|
|
|
|
# -devel
|
|
install -d -m 0755 %{buildroot}%{_includedir}/wireshark
|
|
IDIR="%{buildroot}%{_includedir}/wireshark"
|
|
mkdir -p "${IDIR}/epan"
|
|
mkdir -p "${IDIR}/epan/crypt"
|
|
mkdir -p "${IDIR}/epan/ftypes"
|
|
mkdir -p "${IDIR}/epan/dfilter"
|
|
mkdir -p "${IDIR}/epan/dissectors"
|
|
mkdir -p "${IDIR}/epan/wmem"
|
|
mkdir -p "${IDIR}/wiretap"
|
|
mkdir -p "${IDIR}/wsutil"
|
|
install -m 644 *.h "${IDIR}/"
|
|
install -m 644 epan/*.h "${IDIR}/epan/"
|
|
install -m 644 epan/crypt/*.h "${IDIR}/epan/crypt"
|
|
install -m 644 epan/ftypes/*.h "${IDIR}/epan/ftypes"
|
|
install -m 644 epan/dfilter/*.h "${IDIR}/epan/dfilter"
|
|
install -m 644 epan/dissectors/*.h "${IDIR}/epan/dissectors"
|
|
install -m 644 epan/wmem/*.h "${IDIR}/epan/wmem"
|
|
install -m 644 wiretap/*.h "${IDIR}/wiretap"
|
|
install -m 644 wsutil/*.h "${IDIR}/wsutil"
|
|
|
|
%if %{with gtk}
|
|
install -D -m 0644 image/wsicon48.png %{buildroot}%{_datadir}/pixmaps/wireshark-gtk.png
|
|
install -D -m 0644 wireshark-gtk.desktop %{buildroot}%{_datadir}/applications/wireshark-gtk.desktop
|
|
%suse_update_desktop_file -n %{name}-gtk
|
|
%if ! %{use_caps}
|
|
install -D -m 0644 wireshark-file-gtk.desktop %{buildroot}%{_datadir}/applications/wireshark-file-gtk.desktop
|
|
%suse_update_desktop_file -n %{name}-file-gtk
|
|
%endif
|
|
%else
|
|
# sometimes the gtk.desktop gets autoinstalled by make_install
|
|
rm -f %{buildroot}%{_datadir}/applications/wireshark-gtk.desktop
|
|
%endif
|
|
|
|
%if %{with qt}
|
|
install -D -m 0644 image/wsicon48.png %{buildroot}%{_datadir}/pixmaps/wireshark.png
|
|
install -D -m 0644 wireshark.desktop %{buildroot}%{_datadir}/applications/wireshark.desktop
|
|
%suse_update_desktop_file %{name}
|
|
%if ! %{use_caps}
|
|
install -D -m 0644 wireshark-file.desktop %{buildroot}%{_datadir}/applications/wireshark-file.desktop
|
|
%suse_update_desktop_file %{name}-file
|
|
%endif
|
|
%else
|
|
rm -f %{buildroot}%{_datadir}/applications/wireshark.desktop
|
|
%endif
|
|
|
|
%if %{use_caps}
|
|
%pre
|
|
getent group wireshark >/dev/null || groupadd -r wireshark
|
|
|
|
%verifyscript
|
|
%{verify_permissions -e %{_bindir}/dumpcap}
|
|
%endif
|
|
|
|
%post
|
|
%if %{use_caps}
|
|
%if 0%{?set_permissions:1} > 0
|
|
%set_permissions %{_bindir}/dumpcap
|
|
%else
|
|
%run_permissions
|
|
%endif
|
|
%endif # use_caps
|
|
exit 0
|
|
|
|
%post -n %{libutil} -p /sbin/ldconfig
|
|
%postun -n %{libutil} -p /sbin/ldconfig
|
|
%post -n %{libwire} -p /sbin/ldconfig
|
|
%postun -n %{libwire} -p /sbin/ldconfig
|
|
%post -n %{libtap} -p /sbin/ldconfig
|
|
%postun -n %{libtap} -p /sbin/ldconfig
|
|
%post -n %{libcodecs} -p /sbin/ldconfig
|
|
%postun -n %{libcodecs} -p /sbin/ldconfig
|
|
|
|
%files
|
|
%doc AUTHORS COPYING NEWS README README.linux README.vmware
|
|
%{_mandir}/man1/[^i]*
|
|
%{_mandir}/man4/*
|
|
%{_bindir}/capinfos
|
|
%{_bindir}/captype
|
|
%{_bindir}/dftest
|
|
%{_bindir}/editcap
|
|
%{_bindir}/idl2wrs
|
|
%{_bindir}/mergecap
|
|
%{_bindir}/randpkt
|
|
%{_bindir}/rawshark
|
|
%{_bindir}/reordercap
|
|
%{_bindir}/tethereal
|
|
%{_bindir}/text2pcap
|
|
%{_bindir}/tshark
|
|
%{_bindir}/sharkd
|
|
%if %{use_caps}
|
|
%verify(not mode caps) %attr(0750,root,wireshark) %caps(cap_net_raw,cap_net_admin=eip) %{_bindir}/dumpcap
|
|
%else
|
|
%{_bindir}/dumpcap
|
|
%endif
|
|
%{_libdir}/wireshark/
|
|
%{_datadir}/wireshark/
|
|
%{_datadir}/icons/hicolor/*/apps/wireshark.png
|
|
%{_datadir}/icons/hicolor/*/mimetypes/application-wireshark-doc.png
|
|
%{_datadir}/icons/hicolor/scalable/apps/wireshark.svg
|
|
%{_datadir}/mime/packages/wireshark.xml
|
|
|
|
%files -n %{libutil}
|
|
%{_libdir}/libwsutil*.so.*
|
|
|
|
%files -n %{libwire}
|
|
%{_libdir}/libwireshark.so.*
|
|
|
|
%files -n %{libtap}
|
|
%{_libdir}/libwiretap.so.*
|
|
|
|
%files -n %{libcodecs}
|
|
%{_libdir}/libwscodecs.so.*
|
|
|
|
%files devel
|
|
%doc doc/README.*
|
|
%{_includedir}/wireshark
|
|
%{_libdir}/lib*.so
|
|
%{_libdir}/pkgconfig/wireshark.pc
|
|
|
|
%if %{with gtk}
|
|
%files ui-gtk
|
|
%{_bindir}/wireshark-gtk
|
|
%{_bindir}/ethereal
|
|
%{_datadir}/applications/wireshark-gtk.desktop
|
|
%if ! %{use_caps}
|
|
%{_datadir}/applications/wireshark-file-gtk.desktop
|
|
%endif
|
|
%{_datadir}/pixmaps/wireshark-gtk.png
|
|
|
|
%post ui-gtk
|
|
test -f %{_bindir}/update-mime-database && %{_bindir}/update-mime-database %{_datadir}/mime > /dev/null || :
|
|
test -f %{_bindir}/update-desktop-database && %{_bindir}/update-desktop-database > /dev/null || :
|
|
test -f /sbin/conf.d/SuSEconfig.gtk2 && SuSEconfig --module gtk2 > /dev/null || :
|
|
test -f /sbin/conf.d/SuSEconfig.glib2 && SuSEconfig --module glib2 > /dev/null || :
|
|
|
|
%postun ui-gtk
|
|
test -f %{_bindir}/update-mime-database && %{_bindir}/update-mime-database %{_datadir}/mime > /dev/null || :
|
|
test -f %{_bindir}/update-desktop-database && %{_bindir}/update-desktop-database > /dev/null || :
|
|
test -f /sbin/conf.d/SuSEconfig.gtk2 && SuSEconfig --module gtk2 > /dev/null || :
|
|
test -f /sbin/conf.d/SuSEconfig.glib2 && SuSEconfig --module glib2 > /dev/null || :
|
|
%endif
|
|
|
|
%if %{with qt}
|
|
%files ui-qt
|
|
%{_bindir}/wireshark
|
|
%{_bindir}/ethereal
|
|
%dir %{_datadir}/appdata
|
|
%{_datadir}/appdata/wireshark.appdata.xml
|
|
%{_datadir}/applications/wireshark.desktop
|
|
%if ! %{use_caps}
|
|
%{_datadir}/applications/wireshark-file.desktop
|
|
%endif
|
|
%{_datadir}/pixmaps/wireshark.png
|
|
|
|
%post ui-qt
|
|
%desktop_database_post
|
|
%icon_theme_cache_post
|
|
|
|
%postun ui-qt
|
|
%desktop_database_postun
|
|
%icon_theme_cache_postun
|
|
%endif
|
|
|
|
%changelog
|