Removing dependency on wireshark metapackage from wireshark-cli

----

Added wireshark-qt to wireshark metapackage

----

  - New version 2.4.5

  - Contains fixes for CVE-2018-7419, CVE-2018-7418,     CVE-2018-7417, CVE-2018-7420, CVE-2018-7320,     CVE-2018-7336, CVE-2018-7337, CVE-2018-7334,     CVE-2018-7335, CVE-2018-6836, CVE-2018-5335,     CVE-2018-5334, CVE-2017-6014, CVE-2017-9616,     CVE-2017-9617, CVE-2017-9766

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for wireshark fixes the following issues: Security issue fixed (bsc#1082692) :

  - CVE-2018-7335: The IEEE 802.11 dissector could crash     (wnpa-sec-2018-05)

  - CVE-2018-7321: thrift long dissector loop     (dissect_thrift_map)

  - CVE-2018-7322: DICOM: inifinite loop (dissect_dcm_tag)

  - CVE-2018-7323: WCCP: very long loop     (dissect_wccp2_alternate_mask_value_set_element)

  - CVE-2018-7324: SCCP: infinite loop     (dissect_sccp_optional_parameters)

  - CVE-2018-7325: RPKI-Router Protocol: infinite loop     (dissect_rpkirtr_pdu)

  - CVE-2018-7326: LLTD: infinite loop (dissect_lltd_tlv)

  - CVE-2018-7327: openflow_v6: infinite loop     (dissect_openflow_bundle_control_v6)

  - CVE-2018-7328: USB-DARWIN: long loop     (dissect_darwin_usb_iso_transfer)

  - CVE-2018-7329: S7COMM: infinite loop     (s7comm_decode_ud_cpu_alarm_main)

  - CVE-2018-7330: thread_meshcop: infinite loop     (get_chancount)

  - CVE-2018-7331: GTP: infinite loop     (dissect_gprscdr_GGSNPDPRecord, dissect_ber_set)

  - CVE-2018-7332: RELOAD: infinite loop (dissect_statans)

  - CVE-2018-7333: RPCoRDMA: infinite loop in     get_write_list_chunk_count

  - CVE-2018-7421: Multiple dissectors could go into large     infinite loops (wnpa-sec-2018-06)

  - CVE-2018-7334: The UMTS MAC dissector could crash     (wnpa-sec-2018-07)

  - CVE-2018-7337: The DOCSIS dissector could crash     (wnpa-sec-2018-08)

  - CVE-2018-7336: The FCP dissector could crash     (wnpa-sec-2018-09)

  - CVE-2018-7320: The SIGCOMP dissector could crash     (wnpa-sec-2018-10)

  - CVE-2018-7420: The pcapng file parser could crash     (wnpa-sec-2018-11)

  - CVE-2018-7417: The IPMI dissector could crash     (wnpa-sec-2018-12)

  - CVE-2018-7418: The SIGCOMP dissector could crash     (wnpa-sec-2018-13)

  - CVE-2018-7419: The NBAP disssector could crash     (wnpa-sec-2018-14)

  - CVE-2017-17997: Misuse of NULL pointer in MRDISC     dissector (bsc#1077080).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several issues in wireshark, a tool that captures and analyzes packets off the wire, have been found by different people. These are basically issues with length checks or invalid memory access in different dissectors. This could result in infinite loops or crashes by malicious packets.

For Debian 8 'Jessie', these problems have been fixed in version 1.12.1+g01b65bf-4+deb8u16.

We recommend that you upgrade your wireshark packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
108674	Fedora 27 : 1:wireshark (2018-cdf3f8e8b0)	Nessus	Fedora Local Security Checks	2018/3/28	2024/12/3	critical
108831	SUSE SLES11 Security Update : wireshark (SUSE-SU-2018:0867-1)	Nessus	SuSE Local Security Checks	2018/4/4	2024/11/21	high
121193	Debian DLA-1634-1 : wireshark security update	Nessus	Debian Local Security Checks	2019/1/16	2024/6/26	high

偵測

搜尋 Plugin

critical

high

high