From c5525a2ce8af7785457c5de474107ad82dc11677577b090f2f65aadf6f913e81 Mon Sep 17 00:00:00 2001 From: Andreas Stieger Date: Thu, 29 Nov 2012 20:23:47 +0000 Subject: [PATCH] Accepting request 143616 from home:AndreasStieger:branches:network:utilities - update to 1.8.4 [bnc#792005] + vulnerabilities fixed: * Wireshark could leak potentially sensitive host name resolution information when working with multiple pcap-ng files. wnpa-sec-2012-30 CVE-2012-5592 * The USB dissector could go into an infinite loop. wnpa-sec-2012-31 CVE-2012-5593 * The sFlow dissector could go into an infinite loop. wnpa-sec-2012-32 CVE-2012-5594 * The SCTP dissector could go into an infinite loop. wnpa-sec-2012-33 CVE-2012-5595 * The EIGRP dissector could go into an infinite loop. wnpa-sec-2012-34 CVE-2012-5596 * The ISAKMP dissector could crash. wnpa-sec-2012-35 CVE-2012-5597 * The iSCSI dissector could go into an infinite loop. wnpa-sec-2012-36 CVE-2012-5598 * The WTP dissector could go into an infinite loop. wnpa-sec-2012-37 CVE-2012-5599 * The RTCP dissector could go into an infinite loop. wnpa-sec-2012-38 CVE-2012-5600 * The 3GPP2 A11 dissector could go into an infinite loop. wnpa-sec-2012-39 CVE-2012-5601 * The ICMPv6 dissector could go into an infinite loop. wnpa-sec-2012-40 CVE-2012-5602 + Further bug fixes and updated protocol support as listed in: http://www.wireshark.org/docs/relnotes/wireshark-1.8.4.html OBS-URL: https://build.opensuse.org/request/show/143616 OBS-URL: https://build.opensuse.org/package/show/network:utilities/wireshark?expand=0&rev=73 --- wireshark-1.8.3.tar.bz2 | 3 --- wireshark-1.8.4.tar.bz2 | 3 +++ wireshark.changes | 32 ++++++++++++++++++++++++++++++++ wireshark.spec | 2 +- 4 files changed, 36 insertions(+), 4 deletions(-) delete mode 100644 wireshark-1.8.3.tar.bz2 create mode 100644 wireshark-1.8.4.tar.bz2 diff --git a/wireshark-1.8.3.tar.bz2 b/wireshark-1.8.3.tar.bz2 deleted file mode 100644 index 2df6de4..0000000 --- a/wireshark-1.8.3.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:83a85ff506b5e2a70f03c49de7af291802404983a23c7779e0f4ac3e672a2fb3 -size 24123989 diff --git a/wireshark-1.8.4.tar.bz2 b/wireshark-1.8.4.tar.bz2 new file mode 100644 index 0000000..a3192da --- /dev/null +++ b/wireshark-1.8.4.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:cae9ec0cb9fa0b732a76c0f72f8c15d763f8cdc2e389cda2da6c48c24559faac +size 24164286 diff --git a/wireshark.changes b/wireshark.changes index 1b98171..be65c99 100644 --- a/wireshark.changes +++ b/wireshark.changes @@ -1,3 +1,35 @@ +------------------------------------------------------------------- +Thu Nov 29 20:15:03 UTC 2012 - andreas.stieger@gmx.de + +- update to 1.8.4 [bnc#792005] + + vulnerabilities fixed: + * Wireshark could leak potentially sensitive host name + resolution information when working with multiple pcap-ng + files. + wnpa-sec-2012-30 CVE-2012-5592 + * The USB dissector could go into an infinite loop. + wnpa-sec-2012-31 CVE-2012-5593 + * The sFlow dissector could go into an infinite loop. + wnpa-sec-2012-32 CVE-2012-5594 + * The SCTP dissector could go into an infinite loop. + wnpa-sec-2012-33 CVE-2012-5595 + * The EIGRP dissector could go into an infinite loop. + wnpa-sec-2012-34 CVE-2012-5596 + * The ISAKMP dissector could crash. + wnpa-sec-2012-35 CVE-2012-5597 + * The iSCSI dissector could go into an infinite loop. + wnpa-sec-2012-36 CVE-2012-5598 + * The WTP dissector could go into an infinite loop. + wnpa-sec-2012-37 CVE-2012-5599 + * The RTCP dissector could go into an infinite loop. + wnpa-sec-2012-38 CVE-2012-5600 + * The 3GPP2 A11 dissector could go into an infinite loop. + wnpa-sec-2012-39 CVE-2012-5601 + * The ICMPv6 dissector could go into an infinite loop. + wnpa-sec-2012-40 CVE-2012-5602 + + Further bug fixes and updated protocol support as listed in: + http://www.wireshark.org/docs/relnotes/wireshark-1.8.4.html + ------------------------------------------------------------------- Wed Nov 14 00:01:02 UTC 2012 - andreas.stieger@gmx.de diff --git a/wireshark.spec b/wireshark.spec index cf35506..8940dd2 100644 --- a/wireshark.spec +++ b/wireshark.spec @@ -20,7 +20,7 @@ %define use_caps 0 Name: wireshark -Version: 1.8.3 +Version: 1.8.4 Release: 0 Summary: A Network Traffic Analyser License: GPL-2.0+ and GPL-3.0+