Debian alert DLA-1353-1 (wireshark)
From: | Thorsten Alteholz <debian@alteholz.de> | |
To: | debian-lts-announce@lists.debian.org | |
Subject: | [SECURITY] [DLA 1353-1] wireshark security update | |
Date: | Wed, 18 Apr 2018 22:15:09 +0200 (CEST) | |
Message-ID: | <alpine.DEB.2.02.1804182213010.15977@jupiter.server.alteholz.net> |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Package : wireshark Version : 1.12.1+g01b65bf-4+deb8u6~deb7u10 CVE ID : CVE-2018-7322 CVE-2018-7323 CVE-2018-7324 CVE-2018-7332 CVE-2018-7334 CVE-2018-7335 CVE-2018-7336 CVE-2018-7337 CVE-2018-7417 CVE-2018-7418 CVE-2018-7419 CVE-2018-7420 It was discovered that wireshark, a network protocol analyzer, contained several vulnerabilities that could result in infinite loops in different dissectors. Other issues are related to crash in dissectors that are caused by special crafted and malformed packets. For Debian 7 "Wheezy", these problems have been fixed in version 1.12.1+g01b65bf-4+deb8u6~deb7u10. We recommend that you upgrade your wireshark packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQJ8BAEBCgBmBQJa16dOXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ2MjAxRkJGRkRCQkRFMDc4MjJFQUJCOTY5 NkZDQUMwRDM4N0I1ODQ3AAoJEJb8rA04e1hH94UP/3sALPNOP0kF4l61EQ0Z8LJE EUY9DTciWnxcwkm0Q3Tv9ae80tU5hobIkpmoKjURlmkIv/yBHunnVbdUZg3g3qhb kGxgYlXD5S7E+s0sel2GONF4RscgLf/XC7fUi7rNLtRMjC3+NO0XeVwg8w0QLN27 F8RyM8TH0B3V3I5MWDfNZFwua5vq9XBop+VtQeav42ojnlPnqEqiWK8Hnb8un1Wk 9iGz+ckzwFjBcXdWZkqJPBIrRzWyLTAU1N8DLPTznWbJ3esJCm7bYVf25z7ilsrc lRmxGwYfwFe6KBNeE0jgTc30laP8RYvpH5WbB24KGiwZYNzR+wJaJcLOQEyZK+kQ 4L8LlU5T7tGaw7qLLjFGaI4rJFo1g1OGCoHq4FKNmflr2hc8EGXXr51VNl6Xyz/8 ChKkPFmXCPy75kGHs1VXJ8XV2wgMVbWN3+70TK8z6XMFW+cJ4aUBYGs2hMhrbjfi 88Xy3t80KSzYFXBSqteq7q8J0G6uOD4euj9CvPFGBdmeozhu1X4gnX2MzYu3dnGg lNppaM1sSGlpbMUgjLV/VjVAvFwNRmWp9YD8EEDwctjr2e2cNc4vUssQLPC4kS1g D1FQJH9Qg/cwjXrbB6GvRD301BzzMii7nihm50+nZsIBCX/mElnccVzG8nALd6Vn vyhcT9jwDK3SFO0TVVWL =3916 -----END PGP SIGNATURE-----