Advisories » MGASA-2016-0391

Updated wireshark packages fix security vulnerability

Publication date: 17 Nov 2016
Modification date: 17 Nov 2016
Type: security
Affected Mageia releases : 5
CVE: CVE-2016-9373 , CVE-2016-9374 , CVE-2016-9375 , CVE-2016-9376

Description

The wireshark package has been updated to version 2.0.8, which fixes
several security issues where a malformed packet trace could cause it to
crash or go into an infinite loop, and fixes several other bugs as well.
See the release notes for details.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=19806
• https://www.wireshark.org/security/wnpa-sec-2016-59.html
• https://www.wireshark.org/security/wnpa-sec-2016-60.html
• https://www.wireshark.org/security/wnpa-sec-2016-61.html
• https://www.wireshark.org/security/wnpa-sec-2016-62.html
• https://www.wireshark.org/docs/relnotes/wireshark-2.0.8.html
• https://www.wireshark.org/news/20161116.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9373
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9374
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9375
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9376

SRPMS

5/core

• wireshark-2.0.8-1.mga5