Fedora alert FEDORA-2013-20985 (wireshark)
| From: | updates@fedoraproject.org | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 19 Update: wireshark-1.10.3-3.fc19 | |
| Date: | Mon, 11 Nov 2013 02:28:41 +0000 | |
| Message-ID: | <20131111022841.4E41A21EB6@bastion01.phx2.fedoraproject.org> | |
| Archive‑link: | Article |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2013-20985 2013-11-09 02:19:54 -------------------------------------------------------------------------------- Name : wireshark Product : Fedora 19 Version : 1.10.3 Release : 3.fc19 URL : http://www.wireshark.org/ Summary : Network traffic analyzer Description : Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for wireshark. A graphical user interface is packaged separately to GTK+ package. -------------------------------------------------------------------------------- Update Information: fix subpackage requires Harden dumpcap capabilities * Ver. 1.10.3 -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 7 2013 Peter Hatina <phatina@redhat.com> - 1.10.3-3 - fix subpackage requires * Wed Nov 6 2013 Peter Hatina <phatina@redhat.com> - 1.10.3-2 - harden dumpcap capabilities * Sat Nov 2 2013 Peter Lemenkov <lemenkov@gmail.com> - 1.10.3-1 - Ver. 1.10.3 - Dropped upsteamed patch no. 13 * Tue Oct 1 2013 Peter Lemenkov <lemenkov@gmail.com> - 1.10.2-8 - Added support for rtpproxy conversations (req/resp matching) * Tue Sep 24 2013 Peter Hatina <phatina@redhat.com> - 1.10.2-7 - fix build error caused by symbols clash * Tue Sep 17 2013 Peter Hatina <phatina@redhat.com> - 1.10.2-6 - move default temporary directory to /var/tmp * Fri Sep 13 2013 Peter Lemenkov <lemenkov@gmail.com> - 1.10.2-5 - Convert automake/pkgconfig files into patches (better upstream integration) - Restored category in the *.desktop file - Install another one necessary header file - frame_data_sequence.h * Thu Sep 12 2013 Peter Lemenkov <lemenkov@gmail.com> - 1.10.2-4 - Enhance desktop integration (*.desktop and MIME-related files) * Thu Sep 12 2013 Peter Lemenkov <lemenkov@gmail.com> - 1.10.2-3 - Fix building on Fedora 18 (no perl-podlators) * Thu Sep 12 2013 Peter Lemenkov <lemenkov@gmail.com> - 1.10.2-2 - Add an OpenFlow dissector * Wed Sep 11 2013 Peter Lemenkov <lemenkov@gmail.com> - 1.10-2-1 - Ver. 1.10.2 - Actually remove the console helper * Mon Sep 9 2013 Peter Lemenkov <lemenkov@gmail.com> - 1.10.1-1 - Ver. 1.10.1 - Backported rtpproxy dissector module * Wed Sep 4 2013 Peter Hatina <phatina@redhat.com> - 1.10.0-11 - fix missing ws_symbol_export.h * Wed Sep 4 2013 Peter Hatina <phatina@redhat.com> - 1.10.0-10 - fix tap iostat overflow * Wed Sep 4 2013 Peter Hatina <phatina@redhat.com> - 1.10.0-9 - fix sctp bytes graph crash * Wed Sep 4 2013 Peter Hatina <phatina@redhat.com> - 1.10.0-8 - fix string overrun in plugins/profinet * Tue Sep 3 2013 Peter Hatina <phatina@redhat.com> - 1.10.0-7 - fix BuildRequires - libgcrypt-devel * Tue Sep 3 2013 Peter Hatina <phatina@redhat.com> - 1.10.0-6 - fix build parameter -fstack-protector-all * Sun Aug 4 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.10.0-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Mon Jun 24 2013 Peter Hatina <phatina@redhat.com> 1.10.0-4 - fix pod2man build error * Mon Jun 24 2013 Peter Hatina <phatina@redhat.com> 1.10.0-3 - fix bogus date * Mon Jun 17 2013 Peter Hatina <phatina@redhat.com> 1.10.0-2 - fix flow graph crash * Mon Jun 17 2013 Peter Hatina <phatina@redhat.com> 1.10.0-1 - upgrade to 1.10.0 - see http://www.wireshark.org/docs/relnotes/wireshark-1.10.0.html * Mon Apr 8 2013 Peter Hatina <phatina@redhat.com> 1.8.6-5 - fix documentation build error -------------------------------------------------------------------------------- References: [ 1 ] Bug #1026534 - CVE-2013-6336 wireshark: IEEE 802.15.4 dissector crash (wnpa-sec-2013-61) https://bugzilla.redhat.com/show_bug.cgi?id=1026534 [ 2 ] Bug #1026538 - CVE-2013-6337 wireshark: NBAP dissector crash (wnpa-sec-2013-62) https://bugzilla.redhat.com/show_bug.cgi?id=1026538 [ 3 ] Bug #1026539 - CVE-2013-6338 wireshark: SIP dissector crash (wnpa-sec-2013-63) https://bugzilla.redhat.com/show_bug.cgi?id=1026539 [ 4 ] Bug #1026540 - CVE-2013-6339 wireshark: ActiveMQ OpenWire dissector large loop (wnpa-sec-2013-64) https://bugzilla.redhat.com/show_bug.cgi?id=1026540 [ 5 ] Bug #1026541 - CVE-2013-6340 wireshark: TCP dissector crash (wnpa-sec-2013-65) https://bugzilla.redhat.com/show_bug.cgi?id=1026541 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update wireshark' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-...