From 1ee896835b9b9410642144628e9c9aa35fb4c0111d8581f962ecbcff1ae79849 Mon Sep 17 00:00:00 2001 From: Robert Frohl Date: Mon, 23 Jan 2023 13:10:50 +0000 Subject: [PATCH 1/3] Accepting request 1060416 from home:rfrohl:branches:network:utilities add missing refrence to changes OBS-URL: https://build.opensuse.org/request/show/1060416 OBS-URL: https://build.opensuse.org/package/show/network:utilities/wireshark?expand=0&rev=388 --- wireshark.changes | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/wireshark.changes b/wireshark.changes index 6a8c779..c6b0182 100644 --- a/wireshark.changes +++ b/wireshark.changes @@ -16,7 +16,7 @@ Thu Jan 19 11:56:26 UTC 2023 - Robert Frohl Thu Dec 8 07:55:00 UTC 2022 - Robert Frohl - Wireshark 4.0.2: - * Multiple dissector infinite loops (boo#1206189). + * CVE-2022-4345: Multiple dissector infinite loops (boo#1206189). * Kafka dissector memory exhaustion (boo#1206190). - Further features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-4.0.2.html From 02a36ccc170f2e275b6957792ca9f75cd92dc70e6c4990cbe79d1b38b049e825 Mon Sep 17 00:00:00 2001 From: Robert Frohl Date: Tue, 24 Jan 2023 09:34:41 +0000 Subject: [PATCH 2/3] add missing reference to changes OBS-URL: https://build.opensuse.org/package/show/network:utilities/wireshark?expand=0&rev=389 --- wireshark.changes | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/wireshark.changes b/wireshark.changes index c6b0182..24884d8 100644 --- a/wireshark.changes +++ b/wireshark.changes @@ -1,7 +1,7 @@ ------------------------------------------------------------------- Thu Jan 19 11:56:26 UTC 2023 - Robert Frohl -- Wireshark 4.0.3: +- Wireshark 4.0.3 (bsc#1207447): * EAP dissector crash. * NFS dissector memory leak. * Dissection engine crash. From a5fd18565b3a01afb36ad45939b6e8d6fb688eca45353375f6c8ef604edeaeeb Mon Sep 17 00:00:00 2001 From: Robert Frohl Date: Fri, 27 Jan 2023 10:00:34 +0000 Subject: [PATCH 3/3] add missing cve references to changes OBS-URL: https://build.opensuse.org/package/show/network:utilities/wireshark?expand=0&rev=390 --- wireshark.changes | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/wireshark.changes b/wireshark.changes index 24884d8..6385aaf 100644 --- a/wireshark.changes +++ b/wireshark.changes @@ -2,13 +2,13 @@ Thu Jan 19 11:56:26 UTC 2023 - Robert Frohl - Wireshark 4.0.3 (bsc#1207447): - * EAP dissector crash. - * NFS dissector memory leak. - * Dissection engine crash. - * GNW dissector crash. - * iSCSI dissector crash. - * Multiple dissector excessive loops. - * TIPC dissector crash. + * CVE-2023-0414: EAP dissector crash (boo#1207666). + * CVE-2023-0417: NFS dissector memory leak (boo#1207669). + * CVE-2023-0413: Dissection engine crash (boo#1207665). + * CVE-2023-0416: GNW dissector crash (boo#1207668). + * CVE-2023-0415: iSCSI dissector crash (boo#1207667). + * CVE-2023-0411: Multiple dissector excessive loops (boo#1207663). + * CVE-2023-0412: TIPC dissector crash (boo#1207664). - Further features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-4.0.3.html