Hello community, here is the log from the commit of package wireshark.1689 for openSUSE:12.1:Update checked in at 2013-05-31 15:25:27 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:12.1:Update/wireshark.1689 (Old) and /work/SRC/openSUSE:12.1:Update/.wireshark.1689.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "wireshark.1689" Changes: -------- New Changes file: --- /dev/null 2013-05-23 01:40:31.032032505 +0200 +++ /work/SRC/openSUSE:12.1:Update/.wireshark.1689.new/wireshark.changes 2013-05-31 15:25:30.000000000 +0200 @@ -0,0 +1,2057 @@ +------------------------------------------------------------------- +Sat May 18 05:58:37 UTC 2013 - andreas.stieger@gmx.de + +- update to 1.8.7 [bnc#820566] + + vulnerabilities fixed: + * The RELOAD dissector could go into an infinite loop. + wnpa-sec-2013-23 CVE-2013-2486 CVE-2013-2487 + * The GTPv2 dissector could crash. + wnpa-sec-2013-24 + * The ASN.1 BER dissector could crash. + wnpa-sec-2013-25 + * The PPP CCP dissector could crash. + wnpa-sec-2013-26 + * The DCP ETSI dissector could crash. + wnpa-sec-2013-27 + * The MPEG DSM-CC dissector could crash. + wnpa-sec-2013-28 + * The Websocket dissector could crash. + wnpa-sec-2013-29 + * The MySQL dissector could go into an infinite loop. + wnpa-sec-2013-30 + * The ETCH dissector could go into a large loop. + wnpa-sec-2013-31 + + Further bug fixes and updated protocol support as listed in: + https://www.wireshark.org/docs/relnotes/wireshark-1.8.7.html + +------------------------------------------------------------------- +Thu Mar 7 00:11:30 UTC 2013 - andreas.stieger@gmx.de + +- update to 1.8.6 [bnc#807942] + + vulnerabilities fixed: + * The TCP dissector could crash. + wnpa-sec-2013-10 CVE-2013-2475 + * The HART/IP dissectory could go into an infinite loop. + wnpa-sec-2013-11 CVE-2013-2476 + * The CSN.1 dissector could crash. + wnpa-sec-2013-12 CVE-2013-2477 + * The MS-MMS dissector could crash. + wnpa-sec-2013-13 CVE-2013-2478 + * The MPLS Echo dissector could go into an infinite loop. + wnpa-sec-2013-14 CVE-2013-2479 + * The RTPS and RTPS2 dissectors could crash. + wnpa-sec-2013-15 CVE-2013-2480 + * The Mount dissector could crash. + wnpa-sec-2013-16 CVE-2013-2481 + * The AMPQ dissector could go into an infinite loop. + wnpa-sec-2013-17 CVE-2013-2482 + * The ACN dissector could attempt to divide by zero. + wnpa-sec-2013-18 CVE-2013-2483 + * The CIMD dissector could crash. + wnpa-sec-2013-19 CVE-2013-2484 + * The FCSP dissector could go into an infinite loop. + wnpa-sec-2013-20 CVE-2013-2485 + * The RELOAD dissector could go into an infinite loop. + wnpa-sec-2013-21 CVE-2013-2486 CVE-2013-2487 + * The DTLS dissector could crash. + wnpa-sec-2013-22 CVE-2013-2488 + + Further bug fixes and updated protocol support as listed in: + http://www.wireshark.org/docs/relnotes/wireshark-1.8.6.html + +------------------------------------------------------------------- +Thu Jan 31 06:10:28 UTC 2013 - andreas.stieger@gmx.de + +- update to 1.8.5 [bnc#801131] + + vulnerabilities fixed: + * Infinite and large loops in the Bluetooth HCI, CSN.1, DCP-ETSI + DOCSIS CM-STAUS, IEEE 802.3 Slow Protocols, MPLS, R3, RTPS, + SDP, and SIP dissectors + wnpa-sec-2013-01 CVE-2013-1572 CVE-2013-1573 CVE-2013-1574 + CVE-2013-1575 CVE-2013-1576 CVE-2013-1577 CVE-2013-1578 + CVE-2013-1579 CVE-2013-1580 CVE-2013-1581 + * The CLNP dissector could crash + wnpa-sec-2013-02 CVE-2013-1582 + * The DTN dissector could crash + wnpa-sec-2013-03 CVE-2013-1583 CVE-2013-1584 + * The MS-MMC dissector (and possibly others) could crash + wnpa-sec-2013-04 CVE-2013-1585 + * The DTLS dissector could crash + wnpa-sec-2013-05 CVE-2013-1586 + * The ROHC dissector could crash + wnpa-sec-2013-06 CVE-2013-1587 + * The DCP-ETSI dissector could corrupt memory + wnpa-sec-2013-07 CVE-2013-1588 + * The Wireshark dissection engine could crash + wnpa-sec-2013-08 CVE-2013-1589 + * The NTLMSSP dissector could overflow a buffer + wnpa-sec-2013-09 CVE-2013-1590 + + Further bug fixes and updated protocol support as listed in: + http://www.wireshark.org/docs/relnotes/wireshark-1.8.5.html + +------------------------------------------------------------------- +Thu Nov 29 20:33:12 UTC 2012 - andreas.stieger@gmx.de + +- update to 1.8.4 [bnc#792005] + + vulnerabilities fixed: + * Wireshark could leak potentially sensitive host name + resolution information when working with multiple pcap-ng + files. + wnpa-sec-2012-30 CVE-2012-5592 + * The USB dissector could go into an infinite loop. + wnpa-sec-2012-31 CVE-2012-5593 + * The sFlow dissector could go into an infinite loop. + wnpa-sec-2012-32 CVE-2012-5594 + * The SCTP dissector could go into an infinite loop. + wnpa-sec-2012-33 CVE-2012-5595 + * The EIGRP dissector could go into an infinite loop. + wnpa-sec-2012-34 CVE-2012-5596 + * The ISAKMP dissector could crash. + wnpa-sec-2012-35 CVE-2012-5597 + * The iSCSI dissector could go into an infinite loop. + wnpa-sec-2012-36 CVE-2012-5598 + * The WTP dissector could go into an infinite loop. + wnpa-sec-2012-37 CVE-2012-5599 + * The RTCP dissector could go into an infinite loop. + wnpa-sec-2012-38 CVE-2012-5600 + * The 3GPP2 A11 dissector could go into an infinite loop. + wnpa-sec-2012-39 CVE-2012-5601 + * The ICMPv6 dissector could go into an infinite loop. + wnpa-sec-2012-40 CVE-2012-5602 + + Further bug fixes and updated protocol support as listed in: + http://www.wireshark.org/docs/relnotes/wireshark-1.8.4.html + +------------------------------------------------------------------- +Tue Oct 2 21:57:09 UTC 2012 - andreas.stieger@gmx.de + +- wireshark was updated to the current recommended 1.8.3 version + after the 1.4 series was announced as having reached end-of-life. + (bnc#781594, bnc#783275) + This release contains the latest security fixes, corrections for + bugs, added and updated protocol dissectors, updated and new + supported capture file formats and new features. + Features added in 1.6 series: + https://www.wireshark.org/docs/relnotes/wireshark-1.6.0.html + Features added in 1.8 series: + https://www.wireshark.org/docs/relnotes/wireshark-1.8.0.html + Release notes for this release: + https://www.wireshark.org/docs/relnotes/wireshark-1.8.3.html + All intermediate releases: + https://www.wireshark.org/docs/relnotes/ +- adjusted patches: + * wireshark-1.2.0-disable-warning-dialog.patch + * wireshark-1.2.0-geoip.patch + * wireshark-1.2.4-enable_lua.patch +- dropped patches: + * wireshark-corosync-packet-dissector.patch + * wireshark-nfsv4-opts.patch (fixed upstream) +- License update to GPL-2.0+ and GPL-3.0+ +- expanded include.filelist for -devel package + +------------------------------------------------------------------- +Wed Aug 15 21:49:33 UTC 2012 - andreas.stieger@gmx.de + +- update to upstream 1.4.15 (bnc#776083) + + vulnerabilities fixed: + * The DCP ETSI dissector could trigger a zero division. + (wnpa-sec-2012-13 CVE-2012-4285) + * The XTP dissector could go into an infinite loop. + (wnpa-sec-2012-15 CVE-2012-4288) + * The AFP dissector could go into a large loop. + (wnpa-sec-2012-17 CVE-2012-4289) + * The RTPS2 dissector could overflow a buffer. + (wnpa-sec-2012-18 CVE-2012-4296) + * The CIP dissector could exhaust system memory. + (wnpa-sec-2012-20 CVE-2012-4291) + * The STUN dissector could crash. + (wnpa-sec-2012-21 CVE-2012-4292) + * The EtherCAT Mailbox dissector could abort. + (wnpa-sec-2012-22 CVE-2012-4293) + * The CTDB dissector could go into a large loop. + (wnpa-sec-2012-23 CVE-2012-4290) + + Further bug fixes and updated protocol support as listed in: + http://www.wireshark.org/docs/relnotes/wireshark-1.4.15.html +- update wireshark-nfsv4-opts.patch for moved lines + +------------------------------------------------------------------- +Tue Jul 24 19:56:59 UTC 2012 - andreas.stieger@gmx.de + +- update to upstream 1.4.14 (bnc#772738) + - security fixes: + - The PPP dissector could crash. + CVE-2012-4048 wnpa-sec-2012-11 + It may have been possible to make Wireshark crash by + injecting a malformed packet onto the wire or by convincing + someone to read a malformed packet trace file. + - The NFS dissector could use excessive amounts of CPU. + CVE-2012-4049 wnpa-sec-2012-12 + It may have been possible to make Wireshark consume excessive + CPU resources by injecting a malformed packet onto the wire or + by convincing someone to read a malformed packet trace file. + - bug fixes: + - Cannot run tshark under tcp using decode-as format for syslog. + - Problem with Floating point (double-precision). + - Netscreen - can't parse packet-header. + - Wireshark fails to link because of missing @GLIB_LIBS@ + reference in Makefile.am. +- adjust wireshark-nfsv4-opts.patch for moved source lines + ++++ 1860 more lines (skipped) ++++ between /dev/null ++++ and /work/SRC/openSUSE:12.1:Update/.wireshark.1689.new/wireshark.changes New: ---- include.filelist wireshark-1.2.0-disable-warning-dialog.patch wireshark-1.2.0-geoip.patch wireshark-1.2.4-enable_lua.patch wireshark-1.8.7.tar.bz2 wireshark.changes wireshark.spec ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ wireshark.spec ++++++ # # spec file for package wireshark # # Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed # upon. The license for this file, and modifications and additions to the # file, is the same license as for the pristine package itself (unless the # license for the pristine package is not an Open Source License, in which # case the license is the MIT License). An "Open Source License" is a # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. # Please submit bugfixes or comments via http://bugs.opensuse.org/ # # disable caps for now %define use_caps 0 Name: wireshark Version: 1.8.7 Release: 0 Summary: A Network Traffic Analyser License: GPL-2.0+ and GPL-3.0+ Group: Productivity/Networking/Diagnostic Url: http://www.wireshark.org/ Source: http://www.wireshark.org/download/src/%{name}-%{version}.tar.bz2 Source1: include.filelist # PATCH-FIX-OPENSUSE wireshark-1.6.3-disable-warning-dialog.patch bnc#349782 prusnak@suse.cz -- don't show warning when running as root Patch1: %{name}-1.2.0-disable-warning-dialog.patch # PATCH-FEATURE-OPENSUSE wireshark-1.2.0-geoip.patch prusnak@suse.cz -- search in /var/lib/GeoIP if user hasn't set any GeoIP folders Patch2: %{name}-1.2.0-geoip.patch # PATCH-FIX-OPENSUSE wireshark-1.2.4-enable_lua.patch bnc#650434 Patch4: %{name}-1.2.4-enable_lua.patch BuildRequires: bison BuildRequires: cairo-devel BuildRequires: flex BuildRequires: gtk2-devel BuildRequires: krb5-devel BuildRequires: libcap-devel BuildRequires: libcares-devel BuildRequires: libgcrypt-devel BuildRequires: libgnutls-devel BuildRequires: libpcap-devel BuildRequires: libsmi-devel BuildRequires: lua-devel BuildRequires: net-snmp-devel BuildRequires: openssl-devel BuildRequires: pcre-devel BuildRequires: portaudio-devel BuildRequires: python BuildRequires: tcpd-devel BuildRequires: xdg-utils BuildRequires: zlib-devel Requires: xdg-utils Provides: ethereal = %{version} Obsoletes: ethereal < %{version} BuildRoot: %{_tmppath}/%{name}-%{version}-build %if 0%{?suse_version} BuildRequires: libGeoIP-devel BuildRequires: update-desktop-files Recommends: GeoIP %endif %description Wireshark is a free network protocol analyzer for Unix and Windows. It allows you to examine data from a live network or from a capture file on disk. You can interactively browse the capture data, viewing summary and detail information for each packet. Wireshark has several powerful features, including a rich display filter language and the ability to view the reconstructed stream of a TCP session. %package devel Summary: A Network Traffic Analyser Group: Development/Libraries/C and C++ Requires: %{name} = %{version} Requires: glib2-devel Requires: glibc-devel Provides: ethereal-devel = %{version} Obsoletes: ethereal-devel < %{version} %description devel Wireshark is a free network protocol analyzer for Unix and Windows. It allows you to examine data from a live network or from a capture file on disk. You can interactively browse the capture data, viewing summary and detail information for each packet. Wireshark has several powerful features, including a rich display filter language and the ability to view the reconstructed stream of a TCP session. %prep %setup -q %patch2 %patch4 sed -i 's/^Icon=wireshark.png$/Icon=wireshark/' wireshark.desktop # run as root on 11.3 and older - bnc#349782 %if ! %{use_caps} %patch1 sed -i 's!^Exec=wireshark!Exec=/usr/bin/xdg-su -c /usr/bin/wireshark!' wireshark.desktop %endif %build %configure --without-zlib make %{?_smp_mflags} %install make DESTDIR=%{buildroot} install find %{buildroot} -name "*.la" -delete -print ln -fs wireshark %{buildroot}%{_bindir}/ethereal ln -fs tshark %{buildroot}%{_bindir}/tethereal install -d -m 0755 %{buildroot}%{_sysconfdir} install -d -m 0755 %{buildroot}%{_mandir}/man1/ # install -m 0644 *.1 %%{buildroot}%%{_mandir}/man1/ install -d -m 0755 %{buildroot}%{_includedir}/wireshark for i in `cat %{SOURCE1}`; do install -D -m 644 $i %{buildroot}%{_includedir}/wireshark/$i done install -D -m 0644 image/wsicon48.png %{buildroot}%{_datadir}/pixmaps/wireshark.png install -D -m 0644 wireshark.desktop %{buildroot}%{_datadir}/applications/wireshark.desktop %if 0%{?suse_version} %suse_update_desktop_file %{name} %endif %clean rm -rf %{buildroot} %if %{use_caps} %pre getent group wireshark >/dev/null || groupadd wireshark %endif %post -p /sbin/ldconfig %postun -p /sbin/ldconfig %files %defattr(-,root,root) %doc AUTHORS COPYING NEWS README README.linux README.vmware %doc %{_mandir}/man1/[^i]* %doc %{_mandir}/man4/* %{_datadir}/applications/wireshark.desktop %{_datadir}/pixmaps/wireshark.png %{_bindir}/ethereal %{_bindir}/tethereal %{_bindir}/wireshark %{_bindir}/editcap %{_bindir}/tshark %{_bindir}/mergecap %{_bindir}/text2pcap %{_bindir}/dftest %{_bindir}/capinfos %{_bindir}/randpkt %if %{use_caps} %attr(0750,root,wireshark) %caps(cap_net_raw,cap_net_admin=eip) %{_bindir}/dumpcap %else %{_bindir}/dumpcap %endif %{_bindir}/rawshark %{_libdir}/lib*.so.* %{_libdir}/wireshark/ %{_datadir}/wireshark/ %files devel %defattr(-,root,root) %doc doc/README.* %dir %{_includedir}/wireshark %dir %{_includedir}/wireshark/epan %dir %{_includedir}/wireshark/epan/dfilter %dir %{_includedir}/wireshark/epan/dissectors %dir %{_includedir}/wireshark/wiretap %dir %{_includedir}/wireshark/wsutil %{_includedir}/wireshark/* %{_libdir}/*.so %changelog ++++++ include.filelist ++++++ ++++ 612 lines (skipped) ++++++ wireshark-1.2.0-disable-warning-dialog.patch ++++++ Index: ui/gtk/main.c =================================================================== --- ui/gtk/main.c.orig 2012-08-10 01:35:00.000000000 +0100 +++ ui/gtk/main.c 2012-08-15 20:28:59.000000000 +0100 @@ -1399,11 +1399,13 @@ main_colorize_changed(gboolean packet_li static GtkWidget *close_dlg = NULL; +/* static void priv_warning_dialog_cb(gpointer dialog, gint btn _U_, gpointer data _U_) { recent.privs_warn_if_elevated = !simple_dialog_check_get(dialog); } +*/ #ifdef _WIN32 static void @@ -2081,9 +2083,10 @@ check_and_warn_user_startup(gchar *cf_na #endif { gchar *cur_user, *cur_group; - gpointer priv_warning_dialog; +// gpointer priv_warning_dialog; /* Tell the user not to run as root. */ +/* if (running_with_special_privs() && recent.privs_warn_if_elevated) { cur_user = get_cur_username(); cur_group = get_cur_groupname(); @@ -2098,6 +2101,7 @@ check_and_warn_user_startup(gchar *cf_na simple_dialog_check_set(priv_warning_dialog, "Don't show this message again."); simple_dialog_set_cb(priv_warning_dialog, priv_warning_dialog_cb, NULL); } +*/ #ifdef _WIN32 /* Warn the user if npf.sys isn't loaded. */ ++++++ wireshark-1.2.0-geoip.patch ++++++ Index: epan/geoip_db.c =================================================================== --- epan/geoip_db.c.orig 2012-06-05 17:33:40.000000000 +0100 +++ epan/geoip_db.c 2012-06-21 21:55:14.000000000 +0100 @@ -177,6 +177,9 @@ geoip_db_init(void) { geoip_dat_scan_dir(geoip_db_paths[i].path); } } + if (num_geoip_db_paths < 1) { + geoip_dat_scan_dir("/var/lib/GeoIP"); + } /* add fake databases for latitude and longitude (using "City" in reality) */ { ++++++ wireshark-1.2.4-enable_lua.patch ++++++ Index: epan/wslua/template-init.lua =================================================================== --- epan/wslua/template-init.lua +++ epan/wslua/template-init.lua @@ -42,7 +42,7 @@ if running_superuser then local disabled_lib = {} setmetatable(disabled_lib,{ __index = function() error("this package has been disabled") end } ); - dofile = function() error("dofile has been disabled") end +-- dofile = function() error("dofile has been disabled") end loadfile = function() error("loadfile has been disabled") end loadlib = function() error("loadlib has been disabled") end require = function() error("require has been disabled") end -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org