* [Buildroot] [PATCH] wireshark: security bump to version 2.0.2
@ 2016-02-27 13:05 Gustavo Zacarias
2016-02-27 15:28 ` Thomas Petazzoni
0 siblings, 1 reply; 2+ messages in thread
From: Gustavo Zacarias @ 2016-02-27 13:05 UTC (permalink / raw)
To: buildroot
Fixes:
CVE-2016-2521 - DLL hijacking vulnerability.
CVE-2016-2522 - ASN.1 BER dissector crash.
CVE-2016-2523 - DNP dissector infinite loop.
CVE-2016-2524 - X.509AF dissector crash.
CVE-2016-2525 - HTTP/2 dissector crash.
CVE-2016-2526 - HiQnet dissector crash.
CVE-2016-2527 - 3GPP TS 32.423 Trace file parser crash.
CVE-2016-2528 - LBMC dissector crash.
CVE-2016-2529 - iSeries file parser crash.
CVE-2016-2530 - RSL dissector crash.
CVE-2016-2531 - RSL dissector crash.
CVE-2016-2532 - LLRP dissector crash.
wnpa-sec-2016-12 - Ixia IxVeriWave file parser crash.
wnpa-sec-2016-13 - IEEE 802.11 dissector crash.
wnpa-sec-2016-14 - GSM A-bis OML dissector crash.
wnpa-sec-2016-15 - ASN.1 BER dissector crash.
wnpa-sec-2016-16 - SPICE dissector large loop.
wnpa-sec-2016-17 - NFS dissector crash.
wnpa-sec-2016-18 - ASN.1 BER dissector crash.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
---
package/wireshark/wireshark.hash | 4 ++--
package/wireshark/wireshark.mk | 2 +-
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/package/wireshark/wireshark.hash b/package/wireshark/wireshark.hash
index d95eaa9..ed0d2ef 100644
--- a/package/wireshark/wireshark.hash
+++ b/package/wireshark/wireshark.hash
@@ -1,2 +1,2 @@
-# From: https://www.wireshark.org/download/src/all-versions/SIGNATURES-2.0.1.txt
-sha256 c9bd07dd0d0045d6ca7537390a1afbcdf33716d193ea7d7084ae4f6c30b683ab wireshark-2.0.1.tar.bz2
+# From: https://www.wireshark.org/download/src/all-versions/SIGNATURES-2.0.2.txt
+sha256 e921fb072085a5654d899949bb561d0687f4819f7b63ba35777bb949a9b6b9c1 wireshark-2.0.2.tar.bz2
diff --git a/package/wireshark/wireshark.mk b/package/wireshark/wireshark.mk
index b624e2b..34a5a85 100644
--- a/package/wireshark/wireshark.mk
+++ b/package/wireshark/wireshark.mk
@@ -4,7 +4,7 @@
#
################################################################################
-WIRESHARK_VERSION = 2.0.1
+WIRESHARK_VERSION = 2.0.2
WIRESHARK_SOURCE = wireshark-$(WIRESHARK_VERSION).tar.bz2
WIRESHARK_SITE = http://www.wireshark.org/download/src/all-versions
WIRESHARK_LICENSE = wireshark license
--
2.4.10
^ permalink raw reply related [flat|nested] 2+ messages in thread
* [Buildroot] [PATCH] wireshark: security bump to version 2.0.2
2016-02-27 13:05 [Buildroot] [PATCH] wireshark: security bump to version 2.0.2 Gustavo Zacarias
@ 2016-02-27 15:28 ` Thomas Petazzoni
0 siblings, 0 replies; 2+ messages in thread
From: Thomas Petazzoni @ 2016-02-27 15:28 UTC (permalink / raw)
To: buildroot
Dear Gustavo Zacarias,
On Sat, 27 Feb 2016 10:05:13 -0300, Gustavo Zacarias wrote:
> CVE-2016-2521 - DLL hijacking vulnerability.
> CVE-2016-2522 - ASN.1 BER dissector crash.
> CVE-2016-2523 - DNP dissector infinite loop.
> CVE-2016-2524 - X.509AF dissector crash.
> CVE-2016-2525 - HTTP/2 dissector crash.
> CVE-2016-2526 - HiQnet dissector crash.
> CVE-2016-2527 - 3GPP TS 32.423 Trace file parser crash.
> CVE-2016-2528 - LBMC dissector crash.
> CVE-2016-2529 - iSeries file parser crash.
> CVE-2016-2530 - RSL dissector crash.
> CVE-2016-2531 - RSL dissector crash.
> CVE-2016-2532 - LLRP dissector crash.
> wnpa-sec-2016-12 - Ixia IxVeriWave file parser crash.
> wnpa-sec-2016-13 - IEEE 802.11 dissector crash.
> wnpa-sec-2016-14 - GSM A-bis OML dissector crash.
> wnpa-sec-2016-15 - ASN.1 BER dissector crash.
> wnpa-sec-2016-16 - SPICE dissector large loop.
> wnpa-sec-2016-17 - NFS dissector crash.
> wnpa-sec-2016-18 - ASN.1 BER dissector crash.
Nice set of CVEs :-)
Applied to master, thanks!
Thomas
--
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2016-02-27 15:28 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2016-02-27 13:05 [Buildroot] [PATCH] wireshark: security bump to version 2.0.2 Gustavo Zacarias
2016-02-27 15:28 ` Thomas Petazzoni
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox