[Buildroot] [PATCH] package/wireshark: security bump to version 4.2.9

[Buildroot] [PATCH] package/wireshark: security bump to version 4.2.9

[Peter Korsgaard]

Fixes the following vulnerabilities:

4.2.9:

CVE-2024-11595: wnpa-sec-2024-14 · FiveCo RAP dissector infinite loop
https://www.wireshark.org/security/wnpa-sec-2024-14

CVE-2024-11596: wnpa-sec-2024-15 · ECMP dissector crash
https://www.wireshark.org/security/wnpa-sec-2024-15

4.2.8:

CVE-2024-9781: wnpa-sec-2024-13 · AppleTalk and RELOAD Framing dissector
crashes
https://www.wireshark.org/security/wnpa-sec-2024-13

4.2.7:

CVE-2024-8250: wnpa-sec-2024-11 · NTLMSSP dissector crash
https://www.wireshark.org/security/wnpa-sec-2024-11

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
---
 package/wireshark/wireshark.hash | 6 +++---
 package/wireshark/wireshark.mk   | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/package/wireshark/wireshark.hash b/package/wireshark/wireshark.hash
index 06119861f2..642bc5866d 100644
--- a/package/wireshark/wireshark.hash
+++ b/package/wireshark/wireshark.hash
@@ -1,6 +1,6 @@
-# From https://www.wireshark.org/download/src/all-versions/SIGNATURES-4.2.6.txt
-sha1  db0374dce360b99d8abb9a3f3471f3fc98d6d099  wireshark-4.2.6.tar.xz
-sha256  5ec6028df29068d889c98489bf194a884b00831106fea1e921fea3c65f2003f5  wireshark-4.2.6.tar.xz
+# From https://www.wireshark.org/download/src/all-versions/SIGNATURES-4.2.9.txt
+sha1  d1abbe110451dab9e57c9ee1fe0892e0d6a7d515  wireshark-4.2.9.tar.xz
+sha256  62c2b6652d7f9a50668867bd57b21609c9a9b6950f26e7f30a24b2de0e72ded3  wireshark-4.2.9.tar.xz
 
 # Locally calculated
 sha256  8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643  COPYING
diff --git a/package/wireshark/wireshark.mk b/package/wireshark/wireshark.mk
index 242430194f..bade68f258 100644
--- a/package/wireshark/wireshark.mk
+++ b/package/wireshark/wireshark.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-WIRESHARK_VERSION = 4.2.6
+WIRESHARK_VERSION = 4.2.9
 WIRESHARK_SOURCE = wireshark-$(WIRESHARK_VERSION).tar.xz
 WIRESHARK_SITE = https://www.wireshark.org/download/src/all-versions
 WIRESHARK_LICENSE = wireshark license
-- 
2.39.5

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH] package/wireshark: security bump to version 4.2.9

[Julien Olivain]

On 14/12/2024 12:48, Peter Korsgaard wrote:
> Fixes the following vulnerabilities:
> 
> 4.2.9:
> 
> CVE-2024-11595: wnpa-sec-2024-14 · FiveCo RAP dissector infinite loop
> https://www.wireshark.org/security/wnpa-sec-2024-14
> 
> CVE-2024-11596: wnpa-sec-2024-15 · ECMP dissector crash
> https://www.wireshark.org/security/wnpa-sec-2024-15
> 
> 4.2.8:
> 
> CVE-2024-9781: wnpa-sec-2024-13 · AppleTalk and RELOAD Framing 
> dissector
> crashes
> https://www.wireshark.org/security/wnpa-sec-2024-13
> 
> 4.2.7:
> 
> CVE-2024-8250: wnpa-sec-2024-11 · NTLMSSP dissector crash
> https://www.wireshark.org/security/wnpa-sec-2024-11
> 
> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

Applied to master, thanks.

> ---
>  package/wireshark/wireshark.hash | 6 +++---
>  package/wireshark/wireshark.mk   | 2 +-
>  2 files changed, 4 insertions(+), 4 deletions(-)
> 
> diff --git a/package/wireshark/wireshark.hash 
> b/package/wireshark/wireshark.hash
> index 06119861f2..642bc5866d 100644
> --- a/package/wireshark/wireshark.hash
> +++ b/package/wireshark/wireshark.hash
> @@ -1,6 +1,6 @@
> -# From 
> https://www.wireshark.org/download/src/all-versions/SIGNATURES-4.2.6.txt
> -sha1  db0374dce360b99d8abb9a3f3471f3fc98d6d099  wireshark-4.2.6.tar.xz
> -sha256  
> 5ec6028df29068d889c98489bf194a884b00831106fea1e921fea3c65f2003f5  
> wireshark-4.2.6.tar.xz
> +# From 
> https://www.wireshark.org/download/src/all-versions/SIGNATURES-4.2.9.txt
> +sha1  d1abbe110451dab9e57c9ee1fe0892e0d6a7d515  wireshark-4.2.9.tar.xz
> +sha256  
> 62c2b6652d7f9a50668867bd57b21609c9a9b6950f26e7f30a24b2de0e72ded3  
> wireshark-4.2.9.tar.xz
> 
>  # Locally calculated
>  sha256  
> 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643  
> COPYING
> diff --git a/package/wireshark/wireshark.mk 
> b/package/wireshark/wireshark.mk
> index 242430194f..bade68f258 100644
> --- a/package/wireshark/wireshark.mk
> +++ b/package/wireshark/wireshark.mk
> @@ -4,7 +4,7 @@
>  #
>  
> ################################################################################
> 
> -WIRESHARK_VERSION = 4.2.6
> +WIRESHARK_VERSION = 4.2.9
>  WIRESHARK_SOURCE = wireshark-$(WIRESHARK_VERSION).tar.xz
>  WIRESHARK_SITE = https://www.wireshark.org/download/src/all-versions
>  WIRESHARK_LICENSE = wireshark license
> --
> 2.39.5
> 
> _______________________________________________
> buildroot mailing list
> buildroot@buildroot.org
> https://lists.buildroot.org/mailman/listinfo/buildroot
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH] package/wireshark: security bump to version 4.2.9

[Peter Korsgaard]

>>>>> "Peter" == Peter Korsgaard <peter@korsgaard.com> writes:

 > Fixes the following vulnerabilities:
 > 4.2.9:

 > CVE-2024-11595: wnpa-sec-2024-14 · FiveCo RAP dissector infinite loop
 > https://www.wireshark.org/security/wnpa-sec-2024-14

 > CVE-2024-11596: wnpa-sec-2024-15 · ECMP dissector crash
 > https://www.wireshark.org/security/wnpa-sec-2024-15

 > 4.2.8:

 > CVE-2024-9781: wnpa-sec-2024-13 · AppleTalk and RELOAD Framing dissector
 > crashes
 > https://www.wireshark.org/security/wnpa-sec-2024-13

 > 4.2.7:

 > CVE-2024-8250: wnpa-sec-2024-11 · NTLMSSP dissector crash
 > https://www.wireshark.org/security/wnpa-sec-2024-11

 > Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

Committed to 2024.11.x, thanks.

-- 
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot