bugtraq - [SECURITY] [DSA 3002-1] wireshark security update

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Sun, 10 Aug 2014 23:02:16 +0200
From: Moritz Muehlenhoff <jmm@...ian.org>
To: bugtraq@...urityfocus.com
Subject: [SECURITY] [DSA 3002-1] wireshark security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3002-1                   security@...ian.org
http://www.debian.org/security/                        Moritz Muehlenhoff
August 10, 2014                        http://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : wireshark
CVE ID         : CVE-2014-5161 CVE-2014-5162 CVE-2014-5163 CVE-2014-5164 
                 CVE-2014-5165

Multiple vulnerabilities were discovered in the dissectors for Catapult 
DCT2000, IrDA, GSM Management, RLC ASN.1 BER, which could result in 
denial of service.

For the stable distribution (wheezy), these problems have been fixed in
version 1.8.2-5wheezy11.

For the unstable distribution (sid), these problems will be fixed soon.

We recommend that you upgrade your wireshark packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@...ts.debian.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=7RKp
-----END PGP SIGNATURE-----