Mageia alert MGASA-2019-0297 (libpcap and tcpdump)

From:
             
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
             
 
updates-announce@ml.mageia.org 
Subject:
             
 
[updates-announce] MGASA-2019-0297: Updated libpcap and tcpdump packages fix security vulnerabilities 
Date:
             
 
Thu, 17 Oct 2019 00:23:42 +0200
Message-ID:
             
 
<20191016222342.B99EB9F6FB@duvel.mageia.org>
MGASA-2019-0297 - Updated libpcap and tcpdump packages fix security vulnerabilities

Publication date: 16 Oct 2019
URL: https://advisories.mageia.org/MGASA-2019-0297.html
Type: security
Affected Mageia releases: 7
CVE: CVE-2017-16808,
     CVE-2018-10103,
     CVE-2018-10105,
     CVE-2018-14461,
     CVE-2018-14462,
     CVE-2018-14463,
     CVE-2018-14464,
     CVE-2018-14465,
     CVE-2018-14466,
     CVE-2018-14467,
     CVE-2018-14468,
     CVE-2018-14469,
     CVE-2018-14470,
     CVE-2018-14879,
     CVE-2018-14880,
     CVE-2018-14881,
     CVE-2018-14882,
     CVE-2018-16227,
     CVE-2018-16228,
     CVE-2018-16229,
     CVE-2018-16230,
     CVE-2018-16300,
     CVE-2018-16301,
     CVE-2018-16451,
     CVE-2018-16452,
     CVE-2019-15161,
     CVE-2019-15162,
     CVE-2019-15163,
     CVE-2019-15164,
     CVE-2019-15165,
     CVE-2019-15166,
     CVE-2019-15167

Description:
Updated libpcap and tcpdump packages fix security vulnerabilities:

The libpcap packages have been updated to versions 1.9.1 and tcpdump
to 4.9.3, respectively, fixing several buffer overread and overflow
issues.

References:
- https://bugs.mageia.org/show_bug.cgi?id=25565
- https://www.tcpdump.org/libpcap-changes.txt
- https://www.tcpdump.org/tcpdump-changes.txt
- https://www.tcpdump.org/public-cve-list.txt
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1...

SRPMS:
- 7/core/libpcap-1.9.1-1.mga7
- 7/core/tcpdump-4.9.3-1.mga7