https://bugzilla.novell.com/show_bug.cgi?id=820566 https://bugzilla.novell.com/show_bug.cgi?id=820566#c Andreas Stieger changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium Status|NEW |ASSIGNED AssignedTo|security-team@suse.de |Andreas.Stieger@gmx.de -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=820566 https://bugzilla.novell.com/show_bug.cgi?id=820566#c2 Andreas Stieger changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEEDINFO CC| |cyliu@suse.com InfoProvider| |security-team@suse.de --- Comment #2 from Andreas Stieger 2013-05-18 07:04:02 UTC --- maintenance request for openSUSE 12.1 through 12.3: https://build.opensuse.org/request/show/176027 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=820566 https://bugzilla.novell.com/show_bug.cgi?id=820566#c Marcus Meissner changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|wireshark security updates |VUL-0: wireshark: security |to 1.8.7 and 1.6.15 |updates to 1.8.7 and 1.6.15 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=820566 https://bugzilla.novell.com/show_bug.cgi?id=820566#c4 Andreas Stieger changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |ASSIGNED CC| |Andreas.Stieger@gmx.de InfoProvider|security-team@suse.de | AssignedTo|Andreas.Stieger@gmx.de |security-team@suse.de --- Comment #4 from Andreas Stieger 2013-05-23 19:35:54 UTC --- Additional CVEs updated from http://seclists.org/oss-sec/2013/q2/378 The RELOAD dissector could go into an infinite loop wnpa-sec-2013-23 CVE-2013-2486 CVE-2013-2487 The GTPv2 dissector could crash. wnpa-sec-2013-24 CVE-2013-3555 The ASN.1 BER dissector could crash. wnpa-sec-2013-25 CVE-2013-3556 CVE-2013-3557 The PPP CCP dissector could crash. wnpa-sec-2013-26 CVE-2013-3558 The DCP ETSI dissector could crash. wnpa-sec-2013-27 CVE-2013-3559 The MPEG DSM-CC dissector could crash. wnpa-sec-2013-28 CVE-2013-3560 The Websocket dissector could crash. wnpa-sec-2013-29 CVE-2013-3561 CVE-2013-3562 The MySQL dissector could go into an infinite loop. wnpa-sec-2013-30 CVE-2013-3561 The ETCH dissector could go into a large loop. wnpa-sec-2013-31 CVE-2013-3561 Should the update be adjusted accordingly? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=820566 https://bugzilla.novell.com/show_bug.cgi?id=820566#c Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard|obs:running:1689:moderate | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=820566 https://bugzilla.novell.com/show_bug.cgi?id=820566#c7 --- Comment #7 from Bernhard Wiedemann 2013-06-02 23:00:25 CEST --- This is an autogenerated message for OBS integration: This bug (820566) was mentioned in https://build.opensuse.org/request/show/177210 Evergreen:11.2 / wireshark -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=820566 https://bugzilla.novell.com/show_bug.cgi?id=820566#c9 --- Comment #9 from Swamp Workflow Management 2013-06-10 09:17:21 UTC --- openSUSE-SU-2013:0911-1: An update that fixes two vulnerabilities is now available. Category: security (moderate) Bug References: 820566 CVE References: CVE-2013-2486,CVE-2013-2487 Sources used: openSUSE 11.4 (src): wireshark-1.8.7-45.1 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=820566 SMASH SMASH changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| | | |CVSSv2:NVD:CVE-2013-2486:6. | |1:(AV:A/AC:L/Au:N/C:N/I:N/A | |:C) | |CVSSv2:RedHat:CVE-2013-2486 | |:4.3:(AV:N/AC:M/Au:N/C:N/I: | |N/A:P) | |CVSSv2:RedHat:CVE-2013-2487 | |:4.3:(AV:N/AC:M/Au:N/C:N/I: | |N/A:P) -- You are receiving this mail because: You are on the CC list for the bug.