bugtraq - [SECURITY] [DSA 3585-1] wireshark security update

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20160522212937.GA15366@pisco.westfalen.local>
Date: Sun, 22 May 2016 23:29:37 +0200
From: Moritz Muehlenhoff <jmm@...ian.org>
To: bugtraq@...urityfocus.com
Subject: [SECURITY] [DSA 3585-1] wireshark security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3585-1                   security@...ian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
May 22, 2016                          https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : wireshark
CVE ID         : CVE-2016-4006 CVE-2016-4079 CVE-2016-4080 CVE-2016-4081 
                 CVE-2016-4082 CVE-2016-4085

Multiple vulnerabilities were discovered in the dissectors/parsers for
PKTC, IAX2, GSM CBCH and NCP which could result in denial of service.

For the stable distribution (jessie), these problems have been fixed in
version 1.12.1+g01b65bf-4+deb8u6.

For the testing distribution (stretch), these problems have been fixed
in version 2.0.3+geed34f0-1.

For the unstable distribution (sid), these problems have been fixed in
version 2.0.3+geed34f0-1.

We recommend that you upgrade your wireshark packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@...ts.debian.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=OdPp
-----END PGP SIGNATURE-----