bugtraq - [SECURITY] [DSA 3719-1] wireshark security update

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Mon, 21 Nov 2016 08:59:41 +0000
From: Sebastien Delafond <seb@...ian.org>
To: bugtraq@...urityfocus.com
Subject: [SECURITY] [DSA 3719-1] wireshark security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3719-1                   security@...ian.org
https://www.debian.org/security/                       Sebastien Delafond
November 21, 2016                     https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : wireshark
CVE ID         : CVE-2016-9373 CVE-2016-9374 CVE-2016-9375 CVE-2016-9376

It was discovered that wireshark, a network protocol analyzer,
contained several vulnerabilities in the dissectors for DCERPC,
AllJoyn, DTN, and OpenFlow, that could lead to various crashes,
denial-of-service, or execution of arbitrary code.

For the stable distribution (jessie), these problems have been fixed in
version 1.12.1+g01b65bf-4+deb8u10.

For the unstable distribution (sid), these problems have been fixed in
version 2.2.2+g9c5aae3-1.

We recommend that you upgrade your wireshark packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@...ts.debian.org
-----BEGIN PGP SIGNATURE-----

iQEcBAEBCgAGBQJYMrOJAAoJEBC+iYPz1Z1k1iQH+wVRmcLdFAQ9oPuvb7y8ekxt
GJfhKtE1chHaTCbLALb7tr52Z7QWzzmZFjpVPOv3XyE1QaSPiPoB26K47T2hwIYE
rM2cY6yE2+wkwUA18JnU11kQeJZMT64zcRKNiE0oIvQX8rC9/+wqozQbCcemqorY
yxJ8tddHOsPUUmJDs+Pd6ZzKemZCIaj8MiNOj0yL/uz4qPqnQFH1U22u/VIgf8KP
fAO/Mi1HT2nHLwTX+AEbPyooVJOuecNkDTYUgxB+hYq3mxBkw05xXaiB4T3Y1ZlE
P6rQM3RxYwucB+xRCoQpudSSgAi3hkgASoIUl4vA9fj+SOB4k+cGKPS+mRbEILw=
=vgpW
-----END PGP SIGNATURE-----