|
Bugzilla – Full Text Bug Listing |
| Summary: | VUL-0: wireshark: security updates to 1.8.12 and 1.10.4 | ||
|---|---|---|---|
| Product: | [openSUSE] openSUSE 13.1 | Reporter: | Andreas Stieger <Andreas.Stieger> |
| Component: | Network | Assignee: | Chunyan Liu <cyliu> |
| Status: | RESOLVED FIXED | QA Contact: | E-mail List <qa-bugs> |
| Severity: | Normal | ||
| Priority: | P3 - Medium | CC: | cyliu, security-team |
| Version: | Final | ||
| Target Milestone: | --- | ||
| Hardware: | All | ||
| OS: | openSUSE 13.1 | ||
| Whiteboard: | maint:released:sle11-sp2:55635 | ||
| Found By: | --- | Services Priority: | |
| Business Priority: | Blocker: | --- | |
| Marketing QA Status: | --- | IT Deployment: | --- |
| Bug Depends on: | 848738 | ||
| Bug Blocks: | |||
| Deadline: | 2014-01-10 | ||
|
Description
Andreas Stieger
2013-12-17 22:08:00 UTC
This is an autogenerated message for OBS integration: This bug (855980) was mentioned in https://build.opensuse.org/request/show/211298 Factory / wireshark https://build.opensuse.org/request/show/211300 13.1+12.2+12.3 / wireshark Please review update Accepted, although it would have been better to have separated submits for 12.2+12.3 and 13.1 because it has been updated to different versions and it makes up a cleaner PI file. bjzhang, I guess that requires SLE updates as well? Will update SLE. (In reply to comment #3) > Accepted, although it would have been better to have separated submits > for 12.2+12.3 and 13.1 because it has been updated to > different versions and it makes up a cleaner PI file. Noted. On that... 1.10.4 seems to have at least one regression, 1.10.5 has been released just now: https://www.wireshark.org/docs/relnotes/wireshark-1.10.5.html * Wireshark stops showing new packets but dumpcap keeps writing them to the temp file. * Wireshark 1.10.4 shuts down when promiscuous mode is unchecked. * Homeplug dissector bug: STATUS_ACCESS_VIOLATION: dissector accessed an invalid memory address. So we can strip the 13.1 update from the running incident 2411 and make one for 13.1 only with 1.10.5? If not this can probably be included with the next maintenance or security update. (In reply to comment #6) > So we can strip the 13.1 update from the running incident 2411 and make one for > 13.1 only with 1.10.5? See MR to that effect: https://build.opensuse.org/request/show/211796 Did so. The SWAMPID for this issue is 55633. This issue was rated as moderate. Please submit fixed packages until 2014-01-10. When done, please reassign the bug to security-team@suse.de. Patchinfo will be handled by security team. openSUSE-SU-2014:0013-1: An update that fixes three vulnerabilities is now available. Category: security (moderate) Bug References: 855980 CVE References: CVE-2013-7112,CVE-2013-7113,CVE-2013-7114 Sources used: openSUSE 12.3 (src): wireshark-1.8.12-1.28.1 openSUSE 12.2 (src): wireshark-1.8.12-1.47.1 openSUSE-SU-2014:0017-1: An update that fixes three vulnerabilities is now available. Category: security (moderate) Bug References: 855980 CVE References: CVE-2013-7112,CVE-2013-7113,CVE-2013-7114 Sources used: openSUSE 13.1 (src): wireshark-1.10.5-4.1 Updates released for openSUSE. Assigning to SLE maintainer. openSUSE-SU-2014:0020-1: An update that fixes two vulnerabilities is now available. Category: security (moderate) Bug References: 855980 CVE References: CVE-2013-7112,CVE-2013-7114 Sources used: openSUSE 11.4 (src): wireshark-1.8.12-65.1 released Update released for: wireshark, wireshark-debuginfo, wireshark-debugsource, wireshark-devel Products: SLE-DEBUGINFO 11-SP3 (i386, ia64, ppc64, s390x, x86_64) SLE-DESKTOP 11-SP3 (i386, x86_64) SLE-SDK 11-SP3 (i386, ia64, ppc64, s390x, x86_64) SLE-SERVER 11-SP3 (i386, ia64, ppc64, s390x, x86_64) SLES4VMWARE 11-SP3 (i386, x86_64) Update released for: wireshark, wireshark-debuginfo, wireshark-debugsource, wireshark-devel Products: SLE-SERVER 11-SP1-TERADATA (x86_64) Update released for: wireshark, wireshark-debuginfo, wireshark-debugsource, wireshark-devel Products: SLE-DEBUGINFO 11-SP2 (i386, ia64, ppc64, s390x, x86_64) SLE-DESKTOP 11-SP2 (i386, x86_64) SLE-SDK 11-SP2 (i386, ia64, ppc64, s390x, x86_64) SLE-SERVER 11-SP2 (i386, ia64, ppc64, s390x, x86_64) SLES4VMWARE 11-SP2 (i386, x86_64) SUSE-SU-2014:0115-1: An update that fixes three vulnerabilities is now available. Category: security (moderate) Bug References: 855980,856496,856498 CVE References: CVE-2013-7112,CVE-2013-7113,CVE-2013-7114 Sources used: SUSE Linux Enterprise Software Development Kit 11 SP3 (src): wireshark-1.8.12-0.2.1 SUSE Linux Enterprise Software Development Kit 11 SP2 (src): wireshark-1.8.12-0.2.1 SUSE Linux Enterprise Server 11 SP3 for VMware (src): wireshark-1.8.12-0.2.1 SUSE Linux Enterprise Server 11 SP3 (src): wireshark-1.8.12-0.2.1 SUSE Linux Enterprise Server 11 SP2 for VMware (src): wireshark-1.8.12-0.2.1 SUSE Linux Enterprise Server 11 SP2 (src): wireshark-1.8.12-0.2.1 SUSE Linux Enterprise Desktop 11 SP3 (src): wireshark-1.8.12-0.2.1 SUSE Linux Enterprise Desktop 11 SP2 (src): wireshark-1.8.12-0.2.1 |