Security update for wireshark
SUSE Security Update: Security update for wireshark
wireshark has been updated to version 1.10.11 to fix five security issues.
These security issues have been fixed:
* SigComp UDVM buffer overflow (CVE-2014-8710).
* AMQP dissector crash (CVE-2014-8711).
* NCP dissector crashes (CVE-2014-8712, CVE-2014-8713).
* TN5250 infinite loops (CVE-2014-8714).
This non-security issue has been fixed:
* enable zlib (bnc#899303).
Further bug fixes and updated protocol support as listed in:
https://www.wireshark.org/docs/relnotes/wireshark-1.10.11.html
Security Issues:
* CVE-2014-8711
* CVE-2014-8710
* CVE-2014-8714
* CVE-2014-8712
* CVE-2014-8713
| Announcement ID: | SUSE-SU-2014:1520-1 |
| Rating: | moderate |
| References: | #899303 #905245 #905246 #905247 #905248 |
| Affected Products: |
An update that fixes 5 vulnerabilities is now available. It includes one version update.
Description:
wireshark has been updated to version 1.10.11 to fix five security issues.
These security issues have been fixed:
* SigComp UDVM buffer overflow (CVE-2014-8710).
* AMQP dissector crash (CVE-2014-8711).
* NCP dissector crashes (CVE-2014-8712, CVE-2014-8713).
* TN5250 infinite loops (CVE-2014-8714).
This non-security issue has been fixed:
* enable zlib (bnc#899303).
Further bug fixes and updated protocol support as listed in:
https://www.wireshark.org/docs/relnotes/wireshark-1.10.11.html
Security Issues:
* CVE-2014-8711
* CVE-2014-8710
* CVE-2014-8714
* CVE-2014-8712
* CVE-2014-8713
Patch Instructions:
To install this SUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:
- SUSE Linux Enterprise Software Development Kit 11 SP3:
zypper in -t patch sdksp3-wireshark-9968 - SUSE Linux Enterprise Server 11 SP3 for VMware:
zypper in -t patch slessp3-wireshark-9968 - SUSE Linux Enterprise Server 11 SP3:
zypper in -t patch slessp3-wireshark-9968 - SUSE Linux Enterprise Desktop 11 SP3:
zypper in -t patch sledsp3-wireshark-9968
To bring your system up-to-date, use "zypper patch".
Package List:
- SUSE Linux Enterprise Software Development Kit 11 SP3 (i586 ia64 ppc64 s390x x86_64) [New Version: 1.10.11]:
- wireshark-devel-1.10.11-0.2.1
- SUSE Linux Enterprise Software Development Kit 11 SP3 (i586 x86_64) [New Version: 1.10.11]:
- wireshark-1.10.11-0.2.1
- SUSE Linux Enterprise Server 11 SP3 for VMware (i586 x86_64) [New Version: 1.10.11]:
- wireshark-1.10.11-0.2.1
- SUSE Linux Enterprise Server 11 SP3 (i586 ia64 ppc64 s390x x86_64) [New Version: 1.10.11]:
- wireshark-1.10.11-0.2.1
- SUSE Linux Enterprise Desktop 11 SP3 (i586 x86_64) [New Version: 1.10.11]:
- wireshark-1.10.11-0.2.1
References:
- http://support.novell.com/security/cve/CVE-2014-8710.html
- http://support.novell.com/security/cve/CVE-2014-8711.html
- http://support.novell.com/security/cve/CVE-2014-8712.html
- http://support.novell.com/security/cve/CVE-2014-8713.html
- http://support.novell.com/security/cve/CVE-2014-8714.html
- https://bugzilla.suse.com/show_bug.cgi?id=899303
- https://bugzilla.suse.com/show_bug.cgi?id=905245
- https://bugzilla.suse.com/show_bug.cgi?id=905246
- https://bugzilla.suse.com/show_bug.cgi?id=905247
- https://bugzilla.suse.com/show_bug.cgi?id=905248
- http://download.suse.com/patch/finder/?keywords=3492e3c53fb11fb448076c7c42a49659