Oval Definition:oval:org.opensuse.security:def:56335
Revision Date:2020-12-01Version:1
Title:Security update for wireshark (Moderate)
Description:

This update for wireshark to version 2.2.12 fixes the following issues:

- CVE-2018-5334: IxVeriWave file could crash (bsc#1075737) - CVE-2018-5335: WCP dissector could crash (bsc#1075738) - CVE-2018-5336: Multiple dissector crashes (bsc#1075739) - CVE-2017-17935: Incorrect handling of '\n' in file_read_line function could have lead to denial of service (bsc#1074171)

This release no longer enables the Linux kernel BPF JIT compiler via the net.core.bpf_jit_enable sysctl, as this would make systems more vulnerable to Spectre variant 1 CVE-2017-5753 - (bsc#1075748)

Further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-2.2.12.html
Family:unixClass:patch
Status:Reference(s):1002573
1027519
1038505
1046637
1047675
1048920
1049578
1051787
1051788
1052686
1072834
1074171
1074562
1075737
1075738
1075739
1075748
1076537
1080635
1080662
1082299
1083125
1083242
1083275
1084536
1085279
1085331
1086162
1086194
1087088
1087251
1087260
1088147
1088260
1088261
1089608
1089752
1090643
1102682
1103203
1105323
1139083
CVE-2009-0023
CVE-2009-0159
CVE-2009-1252
CVE-2009-2412
CVE-2009-2473
CVE-2009-2474
CVE-2009-3560
CVE-2009-3720
CVE-2010-1623
CVE-2011-2485
CVE-2011-4405
CVE-2013-5211
CVE-2014-0467
CVE-2014-5044
CVE-2014-9116
CVE-2014-9293
CVE-2014-9294
CVE-2014-9295
CVE-2014-9296
CVE-2014-9297
CVE-2014-9298
CVE-2015-1798
CVE-2015-1799
CVE-2015-3405
CVE-2015-4000
CVE-2015-4410
CVE-2015-4491
CVE-2015-5276
CVE-2015-5300
CVE-2015-7552
CVE-2015-7673
CVE-2015-7674
CVE-2015-7691
CVE-2015-7692
CVE-2015-7701
CVE-2015-7702
CVE-2015-7703
CVE-2015-7704
CVE-2015-7705
CVE-2015-7848
CVE-2015-7849
CVE-2015-7850
CVE-2015-7851
CVE-2015-7852
CVE-2015-7853
CVE-2015-7854
CVE-2015-7855
CVE-2015-7871
CVE-2015-7973
CVE-2015-7974
CVE-2015-7975
CVE-2015-7976
CVE-2015-7977
CVE-2015-7978
CVE-2015-7979
CVE-2015-8138
CVE-2015-8139
CVE-2015-8140
CVE-2015-8158
CVE-2016-1547
CVE-2016-1548
CVE-2016-1549
CVE-2016-1550
CVE-2016-1551
CVE-2016-2516
CVE-2016-2517
CVE-2016-2518
CVE-2016-2519
CVE-2016-4953
CVE-2016-4954
CVE-2016-4955
CVE-2016-4956
CVE-2016-4957
CVE-2016-6352
CVE-2016-9840
CVE-2016-9841
CVE-2016-9842
CVE-2016-9843
CVE-2017-0861
CVE-2017-10664
CVE-2017-10806
CVE-2017-11089
CVE-2017-11334
CVE-2017-11434
CVE-2017-12135
CVE-2017-12137
CVE-2017-1289
CVE-2017-13220
CVE-2017-17935
CVE-2017-18203
CVE-2017-3509
CVE-2017-3511
CVE-2017-3533
CVE-2017-3539
CVE-2017-3544
CVE-2017-5715
CVE-2017-5753
CVE-2017-5754
CVE-2018-10087
CVE-2018-10124
CVE-2018-1087
CVE-2018-10902
CVE-2018-5334
CVE-2018-5335
CVE-2018-5336
CVE-2018-5390
CVE-2018-7540
CVE-2018-7541
CVE-2018-7757
CVE-2018-8781
CVE-2018-8822
CVE-2018-8897
CVE-2019-12900
SUSE-SU-2017:1385-1
SUSE-SU-2017:2319-1
SUSE-SU-2018:0191-1
SUSE-SU-2018:0909-1
SUSE-SU-2018:1220-1
SUSE-SU-2019:2013-1
Platform(s):openSUSE Leap 15.0
openSUSE Leap 15.1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE OpenStack Cloud 6
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 9
SUSE OpenStack Cloud Crowbar 8
SUSE OpenStack Cloud Crowbar 9
Product(s):
Definition Synopsis
  • openSUSE Leap 15.0 is installed
  • AND Package Information
  • bzip2-1.0.6-lp150.3 is installed
  • OR libbz2-1-1.0.6-lp150.3 is installed
  • OR libbz2-1-32bit-1.0.6-lp150.3 is installed
  • Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND Package Information
  • neovim-0.3.7-lp151.2.7 is installed
  • OR neovim-lang-0.3.7-lp151.2.7 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP2 is installed
  • AND Package Information
  • libwireshark8-2.2.12-48.18 is installed
  • OR libwiretap6-2.2.12-48.18 is installed
  • OR libwscodecs1-2.2.12-48.18 is installed
  • OR libwsutil7-2.2.12-48.18 is installed
  • OR wireshark-2.2.12-48.18 is installed
  • OR wireshark-gtk-2.2.12-48.18 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND Package Information
  • cpp48-4.8.5-24 is installed
  • OR gcc48-4.8.5-24 is installed
  • OR gcc48-32bit-4.8.5-24 is installed
  • OR gcc48-c++-4.8.5-24 is installed
  • OR gcc48-info-4.8.5-24 is installed
  • OR gcc48-locale-4.8.5-24 is installed
  • OR libasan0-4.8.5-24 is installed
  • OR libasan0-32bit-4.8.5-24 is installed
  • OR libstdc++48-devel-4.8.5-24 is installed
  • OR libstdc++48-devel-32bit-4.8.5-24 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1-LTSS is installed
  • AND Package Information
  • xen-4.5.5_14-22.25 is installed
  • OR xen-doc-html-4.5.5_14-22.25 is installed
  • OR xen-kmp-default-4.5.5_14_k3.12.74_60.64.54-22.25 is installed
  • OR xen-libs-4.5.5_14-22.25 is installed
  • OR xen-libs-32bit-4.5.5_14-22.25 is installed
  • OR xen-tools-4.5.5_14-22.25 is installed
  • OR xen-tools-domU-4.5.5_14-22.25 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • gdk-pixbuf-lang-2.34.0-16 is installed
  • OR gdk-pixbuf-query-loaders-2.34.0-16 is installed
  • OR gdk-pixbuf-query-loaders-32bit-2.34.0-16 is installed
  • OR libgdk_pixbuf-2_0-0-2.34.0-16 is installed
  • OR libgdk_pixbuf-2_0-0-32bit-2.34.0-16 is installed
  • OR typelib-1_0-GdkPixbuf-2_0-2.34.0-16 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-BCL is installed
  • AND clamav-0.100.1-33.15 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
  • AND Package Information
  • java-1_7_1-ibm-1.7.1_sr4.35-38.29 is installed
  • OR java-1_7_1-ibm-alsa-1.7.1_sr4.35-38.29 is installed
  • OR java-1_7_1-ibm-devel-1.7.1_sr4.35-38.29 is installed
  • OR java-1_7_1-ibm-jdbc-1.7.1_sr4.35-38.29 is installed
  • OR java-1_7_1-ibm-plugin-1.7.1_sr4.35-38.29 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-LTSS is installed
  • AND shadow-4.2.1-27.9 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND Package Information
  • aaa_base-13.2+git20140911.61c1681-36 is installed
  • OR aaa_base-extras-13.2+git20140911.61c1681-36 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-LTSS is installed
  • AND Package Information
  • libpcap-1.8.1-10.3 is installed
  • OR libpcap1-1.8.1-10.3 is installed
  • OR tcpdump-4.9.2-14.14 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • AND Package Information
  • libmysqlclient18-10.0.38-29.27 is installed
  • OR libmysqlclient18-32bit-10.0.38-29.27 is installed
  • OR mariadb-10.0.38-29.27 is installed
  • OR mariadb-client-10.0.38-29.27 is installed
  • OR mariadb-errormessages-10.0.38-29.27 is installed
  • OR mariadb-tools-10.0.38-29.27 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND davfs2-1.5.2-2 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 6 is installed
  • AND ruby2.1-rubygem-bson-1_11-1.11.1-2 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 7 is installed
  • AND Package Information
  • java-1_8_0-openjdk-1.8.0.181-27.26 is installed
  • OR java-1_8_0-openjdk-demo-1.8.0.181-27.26 is installed
  • OR java-1_8_0-openjdk-devel-1.8.0.181-27.26 is installed
  • OR java-1_8_0-openjdk-headless-1.8.0.181-27.26 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 9 is installed
  • AND python-Django1-1.11.20-3.6 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 8 is installed
  • AND Package Information
  • java-1_8_0-openjdk-1.8.0.222-27.35 is installed
  • OR java-1_8_0-openjdk-demo-1.8.0.222-27.35 is installed
  • OR java-1_8_0-openjdk-devel-1.8.0.222-27.35 is installed
  • OR java-1_8_0-openjdk-headless-1.8.0.222-27.35 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 9 is installed
  • AND python-Django1-1.11.20-3.6 is installed
  • BACK