bugtraq - [ MDVSA-2015:022 ] wireshark

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <E1YAeC0-0004fq-Be@titan.mandriva.com>
Date: Mon, 12 Jan 2015 13:34:00 +0100
From: security@...driva.com
To: bugtraq@...urityfocus.com
Subject: [ MDVSA-2015:022 ] wireshark

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 _______________________________________________________________________

 Mandriva Linux Security Advisory                         MDVSA-2015:022
 http://www.mandriva.com/en/support/security/
 _______________________________________________________________________

 Package : wireshark
 Date    : January 12, 2015
 Affected: Business Server 1.0
 _______________________________________________________________________

 Problem Description:

 Updated wireshark packages fix security vulnerabilities:
 
 The DEC DNA Routing Protocol dissector could crash (CVE-2015-0562).
 
 The SMTP dissector could crash (CVE-2015-0563).
 
 Wireshark could crash while decypting TLS/SSL sessions (CVE-2015-0564).
 _______________________________________________________________________

 References:

 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0562
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0563
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0564
 http://advisories.mageia.org/MGASA-2015-0019.html
 _______________________________________________________________________

 Updated Packages:

 Mandriva Business Server 1/X86_64:
 474d317ca4b029019926afd145a6794a  mbs1/x86_64/dumpcap-1.10.12-1.mbs1.x86_64.rpm
 59153145445de5bd38d69de04052cfdd  mbs1/x86_64/lib64wireshark3-1.10.12-1.mbs1.x86_64.rpm
 19f2130070276ee9c93c4e165c8e214e  mbs1/x86_64/lib64wireshark-devel-1.10.12-1.mbs1.x86_64.rpm
 b8f96dcb067b528efb64b97f7810fdab  mbs1/x86_64/lib64wiretap3-1.10.12-1.mbs1.x86_64.rpm
 34b551f8da6393b7ac83553d16ef4d95  mbs1/x86_64/lib64wsutil3-1.10.12-1.mbs1.x86_64.rpm
 7cf1f42cb8ced49f973f1b4601f71b6b  mbs1/x86_64/rawshark-1.10.12-1.mbs1.x86_64.rpm
 c86b593e57d09516678c045494fcbf32  mbs1/x86_64/tshark-1.10.12-1.mbs1.x86_64.rpm
 820c11480eed44c94c51aff4b1bdb169  mbs1/x86_64/wireshark-1.10.12-1.mbs1.x86_64.rpm
 501baf2415a78d245fc01050f52b7f2e  mbs1/x86_64/wireshark-tools-1.10.12-1.mbs1.x86_64.rpm 
 014f8255b6a72f1902cc8da7b8a3fd7b  mbs1/SRPMS/wireshark-1.10.12-1.mbs1.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/en/support/security/advisories/

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com
 _______________________________________________________________________

 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Mandriva Security Team
  <security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iD8DBQFUs7E2mqjQ0CJFipgRAiABAJ4ykqdbsm+nbTH5o7fo3F6y9lyfswCgonA6
7zrJmeGT4jAnhd8hMJgX4Kg=
=Jsml
-----END PGP SIGNATURE-----