Buildroot Archive on lore.kernel.org
 help / color / mirror / Atom feed
* [Buildroot] [PATCH] wireshark: bump version to 2.2.6 (security)
@ 2017-04-13 13:37 Vicente Olivert Riera
  2017-04-13 19:32 ` Thomas Petazzoni
  2017-04-24 19:25 ` Peter Korsgaard
  0 siblings, 2 replies; 3+ messages in thread
From: Vicente Olivert Riera @ 2017-04-13 13:37 UTC (permalink / raw)
  To: buildroot

Security fixes:

- wnpa-sec-2017-12
  IMAP dissector crash (Bug 13466) CVE-2017-7703
- wnpa-sec-2017-13
  WBMXL dissector infinite loop (Bug 13477) CVE-2017-7702
- wnpa-sec-2017-14
  NetScaler file parser infinite loop (Bug 13478) CVE-2017-7700
- wnpa-sec-2017-15
  RPCoRDMA dissector infinite loop (Bug 13558) CVE-2017-7705
- wnpa-sec-2017-16
  BGP dissector infinite loop (Bug 13557) CVE-2017-7701
- wnpa-sec-2017-17
  DOF dissector infinite loop (Bug 13453) CVE-2017-7704
- wnpa-sec-2017-18
  PacketBB dissector crash (Bug 13559)
- wnpa-sec-2017-19
  SLSK dissector long loop (Bug 13576)
- wnpa-sec-2017-20
  SIGCOMP dissector infinite loop (Bug 13578)
- wnpa-sec-2017-21
  WSP dissector infinite loop (Bug 13581)

Full release notes:

  https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html

Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
---
 package/wireshark/wireshark.hash | 4 ++--
 package/wireshark/wireshark.mk   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/package/wireshark/wireshark.hash b/package/wireshark/wireshark.hash
index 3d1f7af..09f6573 100644
--- a/package/wireshark/wireshark.hash
+++ b/package/wireshark/wireshark.hash
@@ -1,2 +1,2 @@
-# From: https://www.wireshark.org/download/src/all-versions/SIGNATURES-2.2.5.txt
-sha256 75dd88d3d6336559e5b0b72077d8a772a988197d571f00029986225fef609ac8  wireshark-2.2.5.tar.bz2
+# From: https://www.wireshark.org/download/src/all-versions/SIGNATURES-2.2.6.txt
+sha256 f627d51eda85f5ae5f5c8c9fc1f6539ffc2a270dd7500dc7f67490a8534ca849  wireshark-2.2.6.tar.bz2
diff --git a/package/wireshark/wireshark.mk b/package/wireshark/wireshark.mk
index 14c2943..fee6a81 100644
--- a/package/wireshark/wireshark.mk
+++ b/package/wireshark/wireshark.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-WIRESHARK_VERSION = 2.2.5
+WIRESHARK_VERSION = 2.2.6
 WIRESHARK_SOURCE = wireshark-$(WIRESHARK_VERSION).tar.bz2
 WIRESHARK_SITE = https://www.wireshark.org/download/src/all-versions
 WIRESHARK_LICENSE = wireshark license
-- 
2.10.2

^ permalink raw reply related	[flat|nested] 3+ messages in thread

* [Buildroot] [PATCH] wireshark: bump version to 2.2.6 (security)
  2017-04-13 13:37 [Buildroot] [PATCH] wireshark: bump version to 2.2.6 (security) Vicente Olivert Riera
@ 2017-04-13 19:32 ` Thomas Petazzoni
  2017-04-24 19:25 ` Peter Korsgaard
  1 sibling, 0 replies; 3+ messages in thread
From: Thomas Petazzoni @ 2017-04-13 19:32 UTC (permalink / raw)
  To: buildroot

Hello,

On Thu, 13 Apr 2017 14:37:20 +0100, Vicente Olivert Riera wrote:
> Security fixes:
> 
> - wnpa-sec-2017-12
>   IMAP dissector crash (Bug 13466) CVE-2017-7703
> - wnpa-sec-2017-13
>   WBMXL dissector infinite loop (Bug 13477) CVE-2017-7702
> - wnpa-sec-2017-14
>   NetScaler file parser infinite loop (Bug 13478) CVE-2017-7700
> - wnpa-sec-2017-15
>   RPCoRDMA dissector infinite loop (Bug 13558) CVE-2017-7705
> - wnpa-sec-2017-16
>   BGP dissector infinite loop (Bug 13557) CVE-2017-7701
> - wnpa-sec-2017-17
>   DOF dissector infinite loop (Bug 13453) CVE-2017-7704
> - wnpa-sec-2017-18
>   PacketBB dissector crash (Bug 13559)
> - wnpa-sec-2017-19
>   SLSK dissector long loop (Bug 13576)
> - wnpa-sec-2017-20
>   SIGCOMP dissector infinite loop (Bug 13578)
> - wnpa-sec-2017-21
>   WSP dissector infinite loop (Bug 13581)
> 
> Full release notes:
> 
>   https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html
> 
> Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
> ---
>  package/wireshark/wireshark.hash | 4 ++--
>  package/wireshark/wireshark.mk   | 2 +-
>  2 files changed, 3 insertions(+), 3 deletions(-)

Applied to master, thanks. Peter, we want this patch for the LTS branch
as well.

Thanks!

Thomas
-- 
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com

^ permalink raw reply	[flat|nested] 3+ messages in thread

* [Buildroot] [PATCH] wireshark: bump version to 2.2.6 (security)
  2017-04-13 13:37 [Buildroot] [PATCH] wireshark: bump version to 2.2.6 (security) Vicente Olivert Riera
  2017-04-13 19:32 ` Thomas Petazzoni
@ 2017-04-24 19:25 ` Peter Korsgaard
  1 sibling, 0 replies; 3+ messages in thread
From: Peter Korsgaard @ 2017-04-24 19:25 UTC (permalink / raw)
  To: buildroot

>>>>> "Vicente" == Vicente Olivert Riera <Vincent.Riera@imgtec.com> writes:

 > Security fixes:
 > - wnpa-sec-2017-12
 >   IMAP dissector crash (Bug 13466) CVE-2017-7703
 > - wnpa-sec-2017-13
 >   WBMXL dissector infinite loop (Bug 13477) CVE-2017-7702
 > - wnpa-sec-2017-14
 >   NetScaler file parser infinite loop (Bug 13478) CVE-2017-7700
 > - wnpa-sec-2017-15
 >   RPCoRDMA dissector infinite loop (Bug 13558) CVE-2017-7705
 > - wnpa-sec-2017-16
 >   BGP dissector infinite loop (Bug 13557) CVE-2017-7701
 > - wnpa-sec-2017-17
 >   DOF dissector infinite loop (Bug 13453) CVE-2017-7704
 > - wnpa-sec-2017-18
 >   PacketBB dissector crash (Bug 13559)
 > - wnpa-sec-2017-19
 >   SLSK dissector long loop (Bug 13576)
 > - wnpa-sec-2017-20
 >   SIGCOMP dissector infinite loop (Bug 13578)
 > - wnpa-sec-2017-21
 >   WSP dissector infinite loop (Bug 13581)

 > Full release notes:

 >   https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html

 > Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>

Committed to 2017.02.x, thanks.

-- 
Bye, Peter Korsgaard

^ permalink raw reply	[flat|nested] 3+ messages in thread

end of thread, other threads:[~2017-04-24 19:25 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2017-04-13 13:37 [Buildroot] [PATCH] wireshark: bump version to 2.2.6 (security) Vicente Olivert Riera
2017-04-13 19:32 ` Thomas Petazzoni
2017-04-24 19:25 ` Peter Korsgaard

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox