Skip to contentSkip to conversation

wireshark: security bump to version 1.12.4

PATCH New Gustavo Zacarias 2 participants 2 messages Mar 5, 2015

lore
Share & tools
lore

Gustavo Zacarias

author
#0 lore raw

PATCH 1/1 wireshark: security bump to version 1.12.4

Fixes:
CVE-2015-2187 - The ATN-CPDLC dissector could crash. CVE-2015-2188 - The WCP dissector could crash. CVE-2015-2189 - The pcapng file parser could crash. CVE-2015-2190 - The LLDP dissector could crash. CVE-2015-2191 - The TNEF dissector could go into an infinite loop. CVE-2015-2192 - The SCSI OSD dissector could go into an infinite loop.

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/wireshark/wireshark.hash | 6 +++---
 package/wireshark/wireshark.mk   | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)
package/wireshark/wireshark.hash +3 -3
index f6c5434..fa4cf18 100644
@@ -1,3 +1,3 @@
-# From https://www.wireshark.org/download/SIGNATURES-1.12.3.txt
-md5	e6318b8451d4e56d39bd911da296ef19	wireshark-1.12.3.tar.bz2
-sha1	44ad77b6e80f41ba34ac0eaf477b81cb1345ceed	wireshark-1.12.3.tar.bz2
+# From https://www.wireshark.org/download/SIGNATURES-1.12.4.txt
+md5	acfa156fd35cb66c867b1ace992e4b5b	wireshark-1.12.4.tar.bz2
+sha1	dbbd4090c02fe170f35b26fa26d8aba0b399c659	wireshark-1.12.4.tar.bz2
package/wireshark/wireshark.mk +1 -1
index d13d80c..434687c 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-WIRESHARK_VERSION = 1.12.3
+WIRESHARK_VERSION = 1.12.4
 WIRESHARK_SOURCE = wireshark-$(WIRESHARK_VERSION).tar.bz2
 WIRESHARK_SITE = http://www.wireshark.org/download/src/all-versions
 WIRESHARK_LICENSE = wireshark license
Signature · 1 line
2.0.5
Applied
#1 lore raw

PATCH 1/1 wireshark: security bump to version 1.12.4

Dear Gustavo Zacarias,

Quoted 9 lines · Gustavo Zacarias

Fixes:
CVE-2015-2187 - The ATN-CPDLC dissector could crash. CVE-2015-2188 - The WCP dissector could crash. CVE-2015-2189 - The pcapng file parser could crash. CVE-2015-2190 - The LLDP dissector could crash. CVE-2015-2191 - The TNEF dissector could go into an infinite loop. CVE-2015-2192 - The SCSI OSD dissector could go into an infinite loop.

Signed-off-by Gustavo Zacarias <[email protected]>

Applied, thanks!

Thomas

Signature · 3 lines
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com