drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Mehrere Probleme in wireshark
Name: |
Mehrere Probleme in wireshark |
|
ID: |
SUSE-SU-2019:0619-1 |
|
Distribution: |
SUSE |
|
Plattformen: |
SUSE Linux Enterprise Module for Basesystem 15, SUSE Linux Enterprise Module for Desktop Applications 15 |
|
Datum: |
Sa, 16. März 2019, 09:31 |
|
Referenzen: |
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9214
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9208
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9209 |
|
Applikationen: |
Wireshark |
|
Originalnachricht |
SUSE Security Update: Security update for wireshark ______________________________________________________________________________
Announcement ID: SUSE-SU-2019:0619-1 Rating: moderate References: #1127367 #1127369 #1127370 Cross-References: CVE-2019-9208 CVE-2019-9209 CVE-2019-9214 Affected Products: SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Basesystem 15 ______________________________________________________________________________
An update that fixes three vulnerabilities is now available.
Description:
This update for wireshark to version 2.4.13 fixes the following issues:
Security issues fixed:
- CVE-2019-9214: Avoided a dereference of a null coversation which could make RPCAP dissector crash (bsc#1127367). - CVE-2019-9209: Fixed a buffer overflow in time values which could make ASN.1 BER and related dissectors crash (bsc#1127369). - CVE-2019-9208: Fixed a null pointer dereference which could make TCAP dissector crash (bsc#1127370).
Release notes: https://www.wireshark.org/docs/relnotes/wireshark-2.4.13.html
Patch Instructions:
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- SUSE Linux Enterprise Module for Desktop Applications 15:
zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-2019-619=1
- SUSE Linux Enterprise Module for Basesystem 15:
zypper in -t patch SUSE-SLE-Module-Basesystem-15-2019-619=1
Package List:
- SUSE Linux Enterprise Module for Desktop Applications 15 (aarch64 ppc64le s390x x86_64):
wireshark-debuginfo-2.4.13-3.22.1 wireshark-debugsource-2.4.13-3.22.1 wireshark-devel-2.4.13-3.22.1 wireshark-ui-qt-2.4.13-3.22.1 wireshark-ui-qt-debuginfo-2.4.13-3.22.1
- SUSE Linux Enterprise Module for Basesystem 15 (aarch64 ppc64le s390x x86_64):
libwireshark9-2.4.13-3.22.1 libwireshark9-debuginfo-2.4.13-3.22.1 libwiretap7-2.4.13-3.22.1 libwiretap7-debuginfo-2.4.13-3.22.1 libwscodecs1-2.4.13-3.22.1 libwscodecs1-debuginfo-2.4.13-3.22.1 libwsutil8-2.4.13-3.22.1 libwsutil8-debuginfo-2.4.13-3.22.1 wireshark-2.4.13-3.22.1 wireshark-debuginfo-2.4.13-3.22.1 wireshark-debugsource-2.4.13-3.22.1
References:
https://www.suse.com/security/cve/CVE-2019-9208.html https://www.suse.com/security/cve/CVE-2019-9209.html https://www.suse.com/security/cve/CVE-2019-9214.html https://bugzilla.suse.com/1127367 https://bugzilla.suse.com/1127369 https://bugzilla.suse.com/1127370
_______________________________________________ sle-security-updates mailing list sle-security-updates@lists.suse.com http://lists.suse.com/mailman/listinfo/sle-security-updates
|
|
|
|