[Buildroot] [PATCH] wireshark: bump version to 2.2.10 (security)

Peter Korsgaard peter at korsgaard.com
Tue Nov 7 09:27:48 UTC 2017


>>>>> "André" == André Hentschel <nerv at dawncrow.de> writes:

 > Security fixes since 2.2.7:
 > - wnpa-sec-2017-22
 >   Bazaar dissector infinite loop (Bug 13599) CVE-2017-9352
 > - wnpa-sec-2017-23
 >   DOF dissector read overflow (Bug 13608) CVE-2017-9348
 > - wnpa-sec-2017-24
 >   DHCP dissector read overflow (Bug 13609, Bug 13628) CVE-2017-9351
 > - wnpa-sec-2017-25
 >   SoulSeek dissector infinite loop (Bug 13631) CVE-2017-9346
 > - wnpa-sec-2017-26
 >   DNS dissector infinite loop (Bug 13633) CVE-2017-9345
 > - wnpa-sec-2017-27
 >   DICOM dissector infinite loop (Bug 13685) CVE-2017-9349
 > - wnpa-sec-2017-28
 >   openSAFETY dissector memory exhaustion (Bug 13649) CVE-2017-9350
 > - wnpa-sec-2017-29
 >   BT L2CAP dissector divide by zero (Bug 13701) CVE-2017-9344
 > - wnpa-sec-2017-30
 >   MSNIP dissector crash (Bug 13725) CVE-2017-9343
 > - wnpa-sec-2017-31
 >   ROS dissector crash (Bug 13637) CVE-2017-9347
 > - wnpa-sec-2017-32
 >   RGMP dissector crash (Bug 13646) CVE-2017-9354
 > - wnpa-sec-2017-33
 >   IPv6 dissector crash (Bug 13675) CVE-2017-9353
 > - wnpa-sec-2017-13
 >   WBMXL dissector infinite loop (Bug 13477, Bug 13796) CVE-2017-7702, CVE-2017-11410
 >   Note: This is an update for a fix in Wireshark 2.2.6 and 2.0.12.
 > - wnpa-sec-2017-28
 >   openSAFETY dissector memory exhaustion (Bug 13649, Bug 13755) CVE-2017-9350, CVE-2017-11411
 >   Note: This is an update for a fix in Wireshark 2.2.7.
 > - wnpa-sec-2017-34
 >   AMQP dissector crash. (Bug 13780) CVE-2017-11408
 > - wnpa-sec-2017-35
 >   MQ dissector crash. (Bug 13792) CVE-2017-11407
 > - wnpa-sec-2017-36
 >   DOCSIS infinite loop. (Bug 13797) CVE-2017-11406
 > - wnpa-sec-2017-38
 >   MSDP dissector infinite loop (Bug 13933)
 > - wnpa-sec-2017-39
 >   Profinet I/O buffer overrun (Bug 13847)
 > - wnpa-sec-2017-41
 >   IrCOMM dissector buffer overrun (Bug 13929)

 > Full release notes:

 >   https://www.wireshark.org/docs/relnotes/wireshark-2.2.10.html

 > Signed-off-by: André Hentschel <nerv at dawncrow.de>

Committed, thanks.

-- 
Bye, Peter Korsgaard



More information about the buildroot mailing list