Security update for wireshark
Wireshark was updated to 1.10.13 to fix bugs and security issues. The following security issues were fixed: * The WCP dissector could crash. wnpa-sec-2015-07 CVE-2015-2188 [bnc#920696] * The pcapng file parser could crash. wnpa-sec-2015-08 CVE-2015-2189 [bnc#920697] * The TNEF dissector could go into an infinite loop. wnpa-sec-2015-10 CVE-2015-2191 [bnc#920699] - Further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-1.10.13.html
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Wireshark was updated to 1.10.13 to fix bugs and security issues. The following security issues were fixed: * The WCP dissector could crash. wnpa-sec-2015-07 CVE-2015-2188 [bnc#920696] * The pcapng file parser could crash. wnpa-sec-2015-08 CVE-2015-2189 [bnc#920697] * The TNEF dissector could go into an infinite loop. wnpa-sec-2015-10 CVE-2015-2191 [bnc#920699] - Further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-1.10.13.html
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/920696
- https://bugzilla.suse.com/920697
- https://bugzilla.suse.com/920699
- https://www.suse.com/security/cve/CVE-2015-2188
- https://www.suse.com/security/cve/CVE-2015-2189
- https://www.suse.com/security/cve/CVE-2015-2191
- https://www.suse.com/support/update/announcement/2015/suse-su-20150657-2/