[Buildroot] [PATCH 1/1] package/wireshark: security bump to version 4.0.8

[Buildroot] [PATCH 1/1] package/wireshark: security bump to version 4.0.8

[Fabrice Fontaine]

Fix CVE-2023-3648 and CVE-2023-3649

https://www.wireshark.org/security/wnpa-sec-2023-21
https://www.wireshark.org/security/wnpa-sec-2023-22
https://www.wireshark.org/security/wnpa-sec-2023-23
https://www.wireshark.org/security/wnpa-sec-2023-24
https://www.wireshark.org/security/wnpa-sec-2023-25
https://www.wireshark.org/security/wnpa-sec-2023-26
https://www.wireshark.org/docs/relnotes/wireshark-4.0.7.html
https://www.wireshark.org/docs/relnotes/wireshark-4.0.8.html

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
---
 package/wireshark/wireshark.hash | 6 +++---
 package/wireshark/wireshark.mk   | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/package/wireshark/wireshark.hash b/package/wireshark/wireshark.hash
index 6598f51f53..f044f99483 100644
--- a/package/wireshark/wireshark.hash
+++ b/package/wireshark/wireshark.hash
@@ -1,6 +1,6 @@
-# From https://www.wireshark.org/download/src/all-versions/SIGNATURES-4.0.6.txt
-sha1  a60b6f8063df2a711932ba869ae86e6476087cf0  wireshark-4.0.6.tar.xz
-sha256  0079097a1b17ebc7250a73563f984c13327dac5016b7d53165810fbcca4bd884  wireshark-4.0.6.tar.xz
+# From https://www.wireshark.org/download/src/all-versions/SIGNATURES-4.0.8.txt
+sha1  8ca1cc4471d0cb835cd5216833c393fa23bc154f  wireshark-4.0.8.tar.xz
+sha256  16663585c0ffefd5593a6628d4a20cc8241b9703b11283cfe71ead2b750888c8  wireshark-4.0.8.tar.xz
 
 # Locally calculated
 sha256  8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643  COPYING
diff --git a/package/wireshark/wireshark.mk b/package/wireshark/wireshark.mk
index 80a986cfa3..500bdbb77a 100644
--- a/package/wireshark/wireshark.mk
+++ b/package/wireshark/wireshark.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-WIRESHARK_VERSION = 4.0.6
+WIRESHARK_VERSION = 4.0.8
 WIRESHARK_SOURCE = wireshark-$(WIRESHARK_VERSION).tar.xz
 WIRESHARK_SITE = https://www.wireshark.org/download/src/all-versions
 WIRESHARK_LICENSE = wireshark license
-- 
2.40.1

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH 1/1] package/wireshark: security bump to version 4.0.8

[Arnout Vandecappelle via buildroot]

On 17/09/2023 18:31, Fabrice Fontaine wrote:
> Fix CVE-2023-3648 and CVE-2023-3649
> 
> https://www.wireshark.org/security/wnpa-sec-2023-21
> https://www.wireshark.org/security/wnpa-sec-2023-22
> https://www.wireshark.org/security/wnpa-sec-2023-23
> https://www.wireshark.org/security/wnpa-sec-2023-24
> https://www.wireshark.org/security/wnpa-sec-2023-25
> https://www.wireshark.org/security/wnpa-sec-2023-26
> https://www.wireshark.org/docs/relnotes/wireshark-4.0.7.html
> https://www.wireshark.org/docs/relnotes/wireshark-4.0.8.html
> 
> Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

  Applied to master, thanks.

  Regards,
  Arnout

> ---
>   package/wireshark/wireshark.hash | 6 +++---
>   package/wireshark/wireshark.mk   | 2 +-
>   2 files changed, 4 insertions(+), 4 deletions(-)
> 
> diff --git a/package/wireshark/wireshark.hash b/package/wireshark/wireshark.hash
> index 6598f51f53..f044f99483 100644
> --- a/package/wireshark/wireshark.hash
> +++ b/package/wireshark/wireshark.hash
> @@ -1,6 +1,6 @@
> -# From https://www.wireshark.org/download/src/all-versions/SIGNATURES-4.0.6.txt
> -sha1  a60b6f8063df2a711932ba869ae86e6476087cf0  wireshark-4.0.6.tar.xz
> -sha256  0079097a1b17ebc7250a73563f984c13327dac5016b7d53165810fbcca4bd884  wireshark-4.0.6.tar.xz
> +# From https://www.wireshark.org/download/src/all-versions/SIGNATURES-4.0.8.txt
> +sha1  8ca1cc4471d0cb835cd5216833c393fa23bc154f  wireshark-4.0.8.tar.xz
> +sha256  16663585c0ffefd5593a6628d4a20cc8241b9703b11283cfe71ead2b750888c8  wireshark-4.0.8.tar.xz
>   
>   # Locally calculated
>   sha256  8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643  COPYING
> diff --git a/package/wireshark/wireshark.mk b/package/wireshark/wireshark.mk
> index 80a986cfa3..500bdbb77a 100644
> --- a/package/wireshark/wireshark.mk
> +++ b/package/wireshark/wireshark.mk
> @@ -4,7 +4,7 @@
>   #
>   ################################################################################
>   
> -WIRESHARK_VERSION = 4.0.6
> +WIRESHARK_VERSION = 4.0.8
>   WIRESHARK_SOURCE = wireshark-$(WIRESHARK_VERSION).tar.xz
>   WIRESHARK_SITE = https://www.wireshark.org/download/src/all-versions
>   WIRESHARK_LICENSE = wireshark license
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH 1/1] package/wireshark: security bump to version 4.0.8

[Peter Korsgaard]

>>>>> "Fabrice" == Fabrice Fontaine <fontaine.fabrice@gmail.com> writes:

 > Fix CVE-2023-3648 and CVE-2023-3649
 > https://www.wireshark.org/security/wnpa-sec-2023-21
 > https://www.wireshark.org/security/wnpa-sec-2023-22
 > https://www.wireshark.org/security/wnpa-sec-2023-23
 > https://www.wireshark.org/security/wnpa-sec-2023-24
 > https://www.wireshark.org/security/wnpa-sec-2023-25
 > https://www.wireshark.org/security/wnpa-sec-2023-26
 > https://www.wireshark.org/docs/relnotes/wireshark-4.0.7.html
 > https://www.wireshark.org/docs/relnotes/wireshark-4.0.8.html

 > Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

Committed to 2023.02.x, 2023.05.x and 2023.08.x, thanks.

-- 
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot