bugtraq - [SECURITY] [DSA 3516-1] wireshark security update

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Sun, 13 Mar 2016 21:52:12 +0100
From: Moritz Muehlenhoff <jmm@...ian.org>
To: bugtraq@...urityfocus.com
Subject: [SECURITY] [DSA 3516-1] wireshark security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3516-1                   security@...ian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
March 13, 2016                        https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : wireshark
CVE ID         : CVE-2015-8731 CVE-2016-2523 CVE-2016-2530 CVE-2016-2531 
                 CVE-2016-2532

Multiple vulnerabilities were discovered in the dissectors/parsers for
DNP, RSL, LLRP, GSM A-bis OML, ASN 1 BER which could result in denial
of service.

For the oldstable distribution (wheezy), these problems have been fixed
in version 1.8.2-5wheezy18.

For the stable distribution (jessie), these problems have been fixed in
version 1.12.1+g01b65bf-4+deb8u5.

For the testing distribution (stretch), these problems have been fixed
in version 2.0.2+ga16e22e-1.

For the unstable distribution (sid), these problems have been fixed in
version 2.0.2+ga16e22e-1.

We recommend that you upgrade your wireshark packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@...ts.debian.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=gZ+n
-----END PGP SIGNATURE-----