Security update for wireshark

SUSE Security Update: Security update for wireshark
Announcement ID: SUSE-SU-2015:1676-2
Rating: moderate
References: #935158 #941500
Affected Products:
  • SUSE Linux Enterprise Desktop 11-SP4
  • SUSE Linux Enterprise Desktop 11-SP3
  • SUSE Linux Enterprise Debuginfo 11-SP4
  • SUSE Linux Enterprise Debuginfo 11-SP3

  • An update that fixes 11 vulnerabilities is now available.

    Description:


    Wireshark has been updated to 1.12.7. (FATE#319388)

    The following vulnerabilities have been fixed:
    * Wireshark could crash when adding an item to the protocol tree.
    wnpa-sec-2015-21 CVE-2015-6241
    * Wireshark could attempt to free invalid memory. wnpa-sec-2015-22
    CVE-2015-6242
    * Wireshark could crash when searching for a protocol dissector.
    wnpa-sec-2015-23 CVE-2015-6243
    * The ZigBee dissector could crash. wnpa-sec-2015-24 CVE-2015-6244
    * The GSM RLC/MAC dissector could go into an infinite loop.
    wnpa-sec-2015-25 CVE-2015-6245
    * The WaveAgent dissector could crash. wnpa-sec-2015-26 CVE-2015-6246
    * The OpenFlow dissector could go into an infinite loop. wnpa-sec-2015-27
    CVE-2015-6247
    * Wireshark could crash due to invalid ptvcursor length checking.
    wnpa-sec-2015-28 CVE-2015-6248
    * The WCCP dissector could crash. wnpa-sec-2015-29 CVE-2015-6249
    * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-1.12.7.html

    Also a fix from 1.12.6 in GSM DTAP was backported. (bnc#935158
    CVE-2015-4652)

    Patch Instructions:

    To install this SUSE Security Update use YaST online_update.
    Alternatively you can run the command listed for your product:

    • SUSE Linux Enterprise Desktop 11-SP4:
      zypper in -t patch sledsp4-wireshark-1127-12112=1
    • SUSE Linux Enterprise Desktop 11-SP3:
      zypper in -t patch sledsp3-wireshark-1127-12112=1
    • SUSE Linux Enterprise Debuginfo 11-SP4:
      zypper in -t patch dbgsp4-wireshark-1127-12112=1
    • SUSE Linux Enterprise Debuginfo 11-SP3:
      zypper in -t patch dbgsp3-wireshark-1127-12112=1

    To bring your system up-to-date, use "zypper patch".

    Package List:

    • SUSE Linux Enterprise Desktop 11-SP4 (i586 x86_64):
      • wireshark-1.12.7-0.5.3
    • SUSE Linux Enterprise Desktop 11-SP3 (i586 x86_64):
      • wireshark-1.12.7-0.5.3
    • SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ia64 ppc64 s390x x86_64):
      • wireshark-debuginfo-1.12.7-0.5.3
      • wireshark-debugsource-1.12.7-0.5.3
    • SUSE Linux Enterprise Debuginfo 11-SP3 (i586 ia64 ppc64 s390x x86_64):
      • wireshark-debuginfo-1.12.7-0.5.3
      • wireshark-debugsource-1.12.7-0.5.3

    References: