openSUSE alert openSUSE-SU-2013:1295-1 (wireshark)

From:
    	     
 
opensuse-security@opensuse.org 
To:
    	     
 
opensuse-updates@opensuse.org 
Subject:
    	     
 
openSUSE-SU-2013:1295-1: moderate: wireshark to 1.8.9 
Date:
    	     
 
Mon,  5 Aug 2013 11:04:30 +0200 (CEST)
Message-ID:
    	     
 
<20130805090430.93F0232276@maintenance.suse.de>
Archive-link:
    	     
 
Article, Thread
              
   openSUSE Security Update: wireshark to 1.8.9
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2013:1295-1
Rating:             moderate
References:         #831718 
Cross-References:   CVE-2013-4927 CVE-2013-4929 CVE-2013-4930
                    CVE-2013-4931 CVE-2013-4932 CVE-2013-4933
                    CVE-2013-4934 CVE-2013-4935
Affected Products:
                    openSUSE 12.3
                    openSUSE 12.2
______________________________________________________________________________

   An update that fixes 8 vulnerabilities is now available.

Description:


   Wireshark was updated to 1.8.9 [bnc#831718]
   + vulnerabilities fixed:
   * The Bluetooth SDP dissector could go into a large loop
   CVE-2013-4927 wnpa-sec-2013-45
   * The DIS dissector could go into a large loop
   CVE-2013-4929 wnpa-sec-2013-47
   * The DVB-CI dissector could crash CVE-2013-4930
   wnpa-sec-2013-48
   * The GSM RR dissector (and possibly others) could go
   into a large loop CVE-2013-4931 wnpa-sec-2013-49
   * The GSM A Common dissector could crash CVE-2013-4932
   wnpa-sec-2013-50
   * The Netmon file parser could crash CVE-2013-4933
   CVE-2013-4934 wnpa-sec-2013-51
   * The ASN.1 PER dissector could crash CVE-2013-4935
   wnpa-sec-2013-52
   + Further bug fixes and updated protocol support as listed
   in:
   https://www.wireshark.org/docs/relnotes/wireshark-1.8.9.html



Patch Instructions:

   To install this openSUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - openSUSE 12.3:

      zypper in -t patch openSUSE-2013-626

   - openSUSE 12.2:

      zypper in -t patch openSUSE-2013-626

   To bring your system up-to-date, use "zypper patch".


Package List:

   - openSUSE 12.3 (i586 x86_64):

      wireshark-1.8.9-1.16.1
      wireshark-debuginfo-1.8.9-1.16.1
      wireshark-debugsource-1.8.9-1.16.1
      wireshark-devel-1.8.9-1.16.1

   - openSUSE 12.2 (i586 x86_64):

      wireshark-1.8.9-1.35.1
      wireshark-debuginfo-1.8.9-1.35.1
      wireshark-debugsource-1.8.9-1.35.1
      wireshark-devel-1.8.9-1.35.1


References:

   http://support.novell.com/security/cve/CVE-2013-4927.html
   http://support.novell.com/security/cve/CVE-2013-4929.html
   http://support.novell.com/security/cve/CVE-2013-4930.html
   http://support.novell.com/security/cve/CVE-2013-4931.html
   http://support.novell.com/security/cve/CVE-2013-4932.html
   http://support.novell.com/security/cve/CVE-2013-4933.html
   http://support.novell.com/security/cve/CVE-2013-4934.html
   http://support.novell.com/security/cve/CVE-2013-4935.html
   https://bugzilla.novell.com/831718