[ubuntu/raring-proposed] wireshark 1.8.2-5 (Accepted)
Scott Kitterman
scott at kitterman.com
Thu Mar 14 20:46:05 UTC 2013
wireshark (1.8.2-5) unstable; urgency=high
* security fixes from Wireshark 1.8.6:
- The TCP dissector could crash (CVE-2013-2475)
- The CSN.1 dissector could crash. Discovered by Laurent Butti.
(CVE-2013-2477)
- MMS dissector could crash. Discovered by Laurent Butti.
(CVE-2013-2478)
- The RTPS and RTPS2 dissectors could crash. Discovered by Alyssa Milburn.
(CVE-2013-2480)
- The Mount dissector could crash. Discovered by Alyssa Milburn.
(CVE-2013-2481)
- The ACN dissector could attempt to divide by zero.
Discovered by Alyssa Milburn. (CVE-2013-2483)
- The CIMD dissector could crash. Discovered by Moshe Kaplan.
(CVE-2013-2484)
- The DTLS dissector could crash. Discovered by Laurent Butti.
(CVE-2013-2488)
wireshark (1.8.2-4) unstable; urgency=high
* security fixes from Wireshark 1.8.5:
- The CLNP dissector could crash. Discovered independently by
Laurent Butti and the Wireshark development team (CVE-2013-1582)
- The DTN dissector could crash (CVE-2013-1583, CVE-2013-1584)
- The MS-MMC dissector (and possibly others) could crash (CVE-2013-1585)
- The DTLS dissector could crash. Discovered by Laurent Butti.
(CVE-2013-1586)
- The ROHC dissector could crash (CVE-2013-1587)
- The DCP-ETSI dissector could corrupt memory. Discovered by Laurent Butti.
(CVE-2013-1588)
- The Wireshark dissection engine could crash. Discovered by Laurent Butti.
- The NTLMSSP dissector could overflow a buffer. Discovered by
Ulf Härnhammar. (CVE-2013-1590)
Date: Sat, 09 Mar 2013 12:59:06 +0100
Changed-By: Scott Kitterman <scott at kitterman.com>
Maintainer: Balint Reczey <balint at balintreczey.hu>
Origin: debian/unstable
https://launchpad.net/ubuntu/raring/+source/wireshark/1.8.2-5
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sat, 09 Mar 2013 12:59:06 +0100
Source: wireshark
Binary: wireshark-common wireshark tshark wireshark-dev wireshark-dbg wireshark-doc libwireshark2 libwsutil2 libwsutil-dev libwireshark-data libwireshark-dev libwiretap2 libwiretap-dev
Architecture: source
Version: 1.8.2-5
Distribution: raring-proposed
Urgency: high
Maintainer: Balint Reczey <balint at balintreczey.hu>
Changed-By: Scott Kitterman <scott at kitterman.com>
Description:
libwireshark-data - network packet dissection library -- data files
libwireshark-dev - network packet dissection library -- development files
libwireshark2 - network packet dissection library -- shared library
libwiretap-dev - network packet capture library -- development files
libwiretap2 - network packet capture library -- shared library
libwsutil-dev - network packet dissection utilities library -- shared library
libwsutil2 - network packet dissection utilities library -- shared library
tshark - network traffic analyzer - console version
wireshark - network traffic analyzer - GTK+ version
wireshark-common - network traffic analyzer - common files
wireshark-dbg - network traffic analyzer - debug symbols
wireshark-dev - network traffic analyzer - development tools
wireshark-doc - network traffic analyzer - documentation
Changes:
wireshark (1.8.2-5) unstable; urgency=high
.
* security fixes from Wireshark 1.8.6:
- The TCP dissector could crash (CVE-2013-2475)
- The CSN.1 dissector could crash. Discovered by Laurent Butti.
(CVE-2013-2477)
- MMS dissector could crash. Discovered by Laurent Butti.
(CVE-2013-2478)
- The RTPS and RTPS2 dissectors could crash. Discovered by Alyssa Milburn.
(CVE-2013-2480)
- The Mount dissector could crash. Discovered by Alyssa Milburn.
(CVE-2013-2481)
- The ACN dissector could attempt to divide by zero.
Discovered by Alyssa Milburn. (CVE-2013-2483)
- The CIMD dissector could crash. Discovered by Moshe Kaplan.
(CVE-2013-2484)
- The DTLS dissector could crash. Discovered by Laurent Butti.
(CVE-2013-2488)
.
wireshark (1.8.2-4) unstable; urgency=high
.
* security fixes from Wireshark 1.8.5:
- The CLNP dissector could crash. Discovered independently by
Laurent Butti and the Wireshark development team (CVE-2013-1582)
- The DTN dissector could crash (CVE-2013-1583, CVE-2013-1584)
- The MS-MMC dissector (and possibly others) could crash (CVE-2013-1585)
- The DTLS dissector could crash. Discovered by Laurent Butti.
(CVE-2013-1586)
- The ROHC dissector could crash (CVE-2013-1587)
- The DCP-ETSI dissector could corrupt memory. Discovered by Laurent Butti.
(CVE-2013-1588)
- The Wireshark dissection engine could crash. Discovered by Laurent Butti.
- The NTLMSSP dissector could overflow a buffer. Discovered by
Ulf Härnhammar. (CVE-2013-1590)
Checksums-Sha1:
830e28aa920356d22395764120ab1994297e19ad 2296 wireshark_1.8.2-5.dsc
7e9ea9fa34f035ff1ad7c4604be8108c2da1e30d 87841 wireshark_1.8.2-5.debian.tar.gz
Checksums-Sha256:
306e152d3991041a55e4f6c432ff835b213595e489c7627f512474e645bc978b 2296 wireshark_1.8.2-5.dsc
6b62d9bad23ad08b7823d2d1c51e01f4a034b40f6b8a959b6eda74270b5aebb9 87841 wireshark_1.8.2-5.debian.tar.gz
Files:
726799a47d85249773774190d31a2f4e 2296 net optional wireshark_1.8.2-5.dsc
e9e4f13c0fd9105bda8bc3d742e36f25 87841 net optional wireshark_1.8.2-5.debian.tar.gz
Origin: debian/unstable
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iEYEARECAAYFAlFCNkMACgkQHajaM93NaGo8OgCgizBUoRA4L+htDPdm/yyubzgI
gQUAnjbluXrTWx969x3ZcLNxsvFLN+fJ
=Hood
-----END PGP SIGNATURE-----
More information about the Raring-changes
mailing list