wireshark: bump version to 2.2.10 (security)

PATCH New André Hentschel 2 participants 3 messages Nov 6, 2017 – Nov 26, 2017

lore

Share & tools

lore

André Hentschel

author

2017-11-06 20:53 UTC #0 lore raw

PATCH 1/1 wireshark: bump version to 2.2.10 (security)

Security fixes since 2.2.7:

- wnpa-sec-2017-22
Bazaar dissector infinite loop (Bug 13599) CVE-2017-9352
- wnpa-sec-2017-23
DOF dissector read overflow (Bug 13608) CVE-2017-9348
- wnpa-sec-2017-24
DHCP dissector read overflow (Bug 13609, Bug 13628) CVE-2017-9351
- wnpa-sec-2017-25
SoulSeek dissector infinite loop (Bug 13631) CVE-2017-9346
- wnpa-sec-2017-26
DNS dissector infinite loop (Bug 13633) CVE-2017-9345
- wnpa-sec-2017-27
DICOM dissector infinite loop (Bug 13685) CVE-2017-9349
- wnpa-sec-2017-28
openSAFETY dissector memory exhaustion (Bug 13649) CVE-2017-9350
- wnpa-sec-2017-29
BT L2CAP dissector divide by zero (Bug 13701) CVE-2017-9344
- wnpa-sec-2017-30
MSNIP dissector crash (Bug 13725) CVE-2017-9343
- wnpa-sec-2017-31
ROS dissector crash (Bug 13637) CVE-2017-9347
- wnpa-sec-2017-32
RGMP dissector crash (Bug 13646) CVE-2017-9354
- wnpa-sec-2017-33
IPv6 dissector crash (Bug 13675) CVE-2017-9353
- wnpa-sec-2017-13
WBMXL dissector infinite loop (Bug 13477, Bug 13796) CVE-2017-7702, CVE-2017-11410
Note: This is an update for a fix in Wireshark 2.2.6 and 2.0.12.
- wnpa-sec-2017-28
openSAFETY dissector memory exhaustion (Bug 13649, Bug 13755) CVE-2017-9350, CVE-2017-11411
Note: This is an update for a fix in Wireshark 2.2.7.
- wnpa-sec-2017-34
AMQP dissector crash. (Bug 13780) CVE-2017-11408
- wnpa-sec-2017-35
MQ dissector crash. (Bug 13792) CVE-2017-11407
- wnpa-sec-2017-36
DOCSIS infinite loop. (Bug 13797) CVE-2017-11406
- wnpa-sec-2017-38
MSDP dissector infinite loop (Bug 13933)
- wnpa-sec-2017-39
Profinet I/O buffer overrun (Bug 13847)
- wnpa-sec-2017-41
IrCOMM dissector buffer overrun (Bug 13929)

Full release notes:

https://www.wireshark.org/docs/relnotes/wireshark-2.2.10.html

Signed-off-by Andr? Hentschel <[email protected]>

---
 package/wireshark/wireshark.hash | 4 ++--
 package/wireshark/wireshark.mk   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

package/wireshark/wireshark.hash +2 -2

index c61c520..3494f2e 100644
@@ -1,2 +1,2 @@
-# From: https://www.wireshark.org/download/src/all-versions/SIGNATURES-2.2.7.txt
-sha256 689ddf62221b152779d8846ab5b2063cc7fd41ec1a9f04eefab09b5d5486dbb5  wireshark-2.2.7.tar.bz2
+# From: https://www.wireshark.org/download/src/all-versions/SIGNATURES-2.2.10.txt
+sha256 8574a5e1fdec7affae640924bd46c1aed1bd866e02632fa5625e1450e4a50707  wireshark-2.2.10.tar.bz2

package/wireshark/wireshark.mk +1 -1

index 58292f7..34ee563 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-WIRESHARK_VERSION = 2.2.7
+WIRESHARK_VERSION = 2.2.10
 WIRESHARK_SOURCE = wireshark-$(WIRESHARK_VERSION).tar.bz2
 WIRESHARK_SITE = https://www.wireshark.org/download/src/all-versions
 WIRESHARK_LICENSE = wireshark license

Signature · 1 line

2.7.4

Peter Korsgaard

2017-11-07 09:27 UTC #1 lore raw

PATCH 1/1 wireshark: bump version to 2.2.10 (security)

Quoted 46 lines

Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line
"Andr?" == Andr? Hentschel <[email protected]> writes:
Security fixes since 2.2.7:
- wnpa-sec-2017-22
Bazaar dissector infinite loop (Bug 13599) CVE-2017-9352
- wnpa-sec-2017-23
DOF dissector read overflow (Bug 13608) CVE-2017-9348
- wnpa-sec-2017-24
DHCP dissector read overflow (Bug 13609, Bug 13628) CVE-2017-9351
- wnpa-sec-2017-25
SoulSeek dissector infinite loop (Bug 13631) CVE-2017-9346
- wnpa-sec-2017-26
DNS dissector infinite loop (Bug 13633) CVE-2017-9345
- wnpa-sec-2017-27
DICOM dissector infinite loop (Bug 13685) CVE-2017-9349
- wnpa-sec-2017-28
openSAFETY dissector memory exhaustion (Bug 13649) CVE-2017-9350
- wnpa-sec-2017-29
BT L2CAP dissector divide by zero (Bug 13701) CVE-2017-9344
- wnpa-sec-2017-30
MSNIP dissector crash (Bug 13725) CVE-2017-9343
- wnpa-sec-2017-31
ROS dissector crash (Bug 13637) CVE-2017-9347
- wnpa-sec-2017-32
RGMP dissector crash (Bug 13646) CVE-2017-9354
- wnpa-sec-2017-33
IPv6 dissector crash (Bug 13675) CVE-2017-9353
- wnpa-sec-2017-13
WBMXL dissector infinite loop (Bug 13477, Bug 13796) CVE-2017-7702, CVE-2017-11410
Note: This is an update for a fix in Wireshark 2.2.6 and 2.0.12.
- wnpa-sec-2017-28
openSAFETY dissector memory exhaustion (Bug 13649, Bug 13755) CVE-2017-9350, CVE-2017-11411
Note: This is an update for a fix in Wireshark 2.2.7.
- wnpa-sec-2017-34
AMQP dissector crash. (Bug 13780) CVE-2017-11408
- wnpa-sec-2017-35
MQ dissector crash. (Bug 13792) CVE-2017-11407
- wnpa-sec-2017-36
DOCSIS infinite loop. (Bug 13797) CVE-2017-11406
- wnpa-sec-2017-38
MSDP dissector infinite loop (Bug 13933)
- wnpa-sec-2017-39
Profinet I/O buffer overrun (Bug 13847)
- wnpa-sec-2017-41
IrCOMM dissector buffer overrun (Bug 13929)

Quoted 5 lines

Full release notes:
https://www.wireshark.org/docs/relnotes/wireshark-2.2.10.html
Signed-off-by Andr? Hentschel <[email protected]>

Committed, thanks.

Signature · 1 line

Bye, Peter Korsgaard

Peter Korsgaard

2017-11-26 21:10 UTC #2 lore raw

PATCH 1/1 wireshark: bump version to 2.2.10 (security)

In reply to André Hentschel

Quoted 46 lines

Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line
"Andr?" == Andr? Hentschel <[email protected]> writes:
Security fixes since 2.2.7:
- wnpa-sec-2017-22
Bazaar dissector infinite loop (Bug 13599) CVE-2017-9352
- wnpa-sec-2017-23
DOF dissector read overflow (Bug 13608) CVE-2017-9348
- wnpa-sec-2017-24
DHCP dissector read overflow (Bug 13609, Bug 13628) CVE-2017-9351
- wnpa-sec-2017-25
SoulSeek dissector infinite loop (Bug 13631) CVE-2017-9346
- wnpa-sec-2017-26
DNS dissector infinite loop (Bug 13633) CVE-2017-9345
- wnpa-sec-2017-27
DICOM dissector infinite loop (Bug 13685) CVE-2017-9349
- wnpa-sec-2017-28
openSAFETY dissector memory exhaustion (Bug 13649) CVE-2017-9350
- wnpa-sec-2017-29
BT L2CAP dissector divide by zero (Bug 13701) CVE-2017-9344
- wnpa-sec-2017-30
MSNIP dissector crash (Bug 13725) CVE-2017-9343
- wnpa-sec-2017-31
ROS dissector crash (Bug 13637) CVE-2017-9347
- wnpa-sec-2017-32
RGMP dissector crash (Bug 13646) CVE-2017-9354
- wnpa-sec-2017-33
IPv6 dissector crash (Bug 13675) CVE-2017-9353
- wnpa-sec-2017-13
WBMXL dissector infinite loop (Bug 13477, Bug 13796) CVE-2017-7702, CVE-2017-11410
Note: This is an update for a fix in Wireshark 2.2.6 and 2.0.12.
- wnpa-sec-2017-28
openSAFETY dissector memory exhaustion (Bug 13649, Bug 13755) CVE-2017-9350, CVE-2017-11411
Note: This is an update for a fix in Wireshark 2.2.7.
- wnpa-sec-2017-34
AMQP dissector crash. (Bug 13780) CVE-2017-11408
- wnpa-sec-2017-35
MQ dissector crash. (Bug 13792) CVE-2017-11407
- wnpa-sec-2017-36
DOCSIS infinite loop. (Bug 13797) CVE-2017-11406
- wnpa-sec-2017-38
MSDP dissector infinite loop (Bug 13933)
- wnpa-sec-2017-39
Profinet I/O buffer overrun (Bug 13847)
- wnpa-sec-2017-41
IrCOMM dissector buffer overrun (Bug 13929)

Quoted 5 lines

Full release notes:
https://www.wireshark.org/docs/relnotes/wireshark-2.2.10.html
Signed-off-by Andr? Hentschel <[email protected]>

Committed to 2017.02.x and 2017.08.x, thanks.

Signature · 1 line

Bye, Peter Korsgaard