Oval Definition:oval:org.opensuse.security:def:79174
Revision Date:2018-01-24Version:1
Title:Security update for wireshark (Moderate)
Description:

This update for wireshark to version 2.2.12 fixes the following issues:

- CVE-2018-5334: IxVeriWave file could crash (bsc#1075737) - CVE-2018-5335: WCP dissector could crash (bsc#1075738) - CVE-2018-5336: Multiple dissector crashes (bsc#1075739) - CVE-2017-17935: Incorrect handling of '\n' in file_read_line function could have lead to denial of service (bsc#1074171)

This release no longer enables the Linux kernel BPF JIT compiler via the net.core.bpf_jit_enable sysctl, as this would make systems more vulnerable to Spectre variant 1 CVE-2017-5753 - (bsc#1075748)

Further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-2.2.12.html
Family:unixClass:patch
Status:Reference(s):1074171
1075737
1075738
1075739
1075748
CVE-2017-17935
CVE-2018-5334
CVE-2018-5335
CVE-2018-5336
SUSE-SU-2018:0191-1
Platform(s):SUSE Linux Enterprise Desktop 12 SP3
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND Package Information
  • libwireshark8-2.2.12-48.18.1 is installed
  • OR libwiretap6-2.2.12-48.18.1 is installed
  • OR libwscodecs1-2.2.12-48.18.1 is installed
  • OR libwsutil7-2.2.12-48.18.1 is installed
  • OR wireshark-2.2.12-48.18.1 is installed
  • OR wireshark-gtk-2.2.12-48.18.1 is installed
  • BACK