Mageia alert MGASA-2015-0117 (wireshark)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2015-0117: Updated wireshark package fixes security vulnerabilies 
Date:
    	     
 
Fri, 27 Mar 2015 22:12:38 +0100
Message-ID:
    	     
 
<20150327211238.30B024106E@valstar.mageia.org>
MGASA-2015-0117 - Updated wireshark package fixes security vulnerabilies

Publication date: 27 Mar 2015
URL: http://advisories.mageia.org/MGASA-2015-0117.html
Type: security
Affected Mageia releases: 4
CVE: CVE-2015-2188,
     CVE-2015-2189,
     CVE-2015-2191

Description:
The WCP dissector could crash (CVE-2015-2188).
The pcapng file parser could crash (CVE-2015-2189).
The TNEF dissector could go into an infinite loop (CVE-2015-2191).

References:
- https://bugs.mageia.org/show_bug.cgi?id=15429
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2188
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2189
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2191
- https://www.wireshark.org/security/wnpa-sec-2015-07.html
- https://www.wireshark.org/security/wnpa-sec-2015-08.html
- https://www.wireshark.org/security/wnpa-sec-2015-10.html
- https://www.wireshark.org/docs/relnotes/wireshark-1.10.13...
- https://www.wireshark.org/news/20150304.html
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2188
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2189
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2191

SRPMS:
- 4/core/wireshark-1.10.13-1.mga4