Hello community, here is the log from the commit of package wireshark for openSUSE:Factory checked in at 2012-11-30 12:28:15 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/wireshark (Old) and /work/SRC/openSUSE:Factory/.wireshark.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "wireshark", Maintainer is "BJZhang@suse.com" Changes: -------- --- /work/SRC/openSUSE:Factory/wireshark/wireshark.changes 2012-11-14 17:03:30.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.wireshark.new/wireshark.changes 2012-11-30 12:32:03.000000000 +0100 @@ -1,0 +2,32 @@ +Thu Nov 29 20:15:03 UTC 2012 - andreas.stieger@gmx.de + +- update to 1.8.4 [bnc#792005] + + vulnerabilities fixed: + * Wireshark could leak potentially sensitive host name + resolution information when working with multiple pcap-ng + files. + wnpa-sec-2012-30 CVE-2012-5592 + * The USB dissector could go into an infinite loop. + wnpa-sec-2012-31 CVE-2012-5593 + * The sFlow dissector could go into an infinite loop. + wnpa-sec-2012-32 CVE-2012-5594 + * The SCTP dissector could go into an infinite loop. + wnpa-sec-2012-33 CVE-2012-5595 + * The EIGRP dissector could go into an infinite loop. + wnpa-sec-2012-34 CVE-2012-5596 + * The ISAKMP dissector could crash. + wnpa-sec-2012-35 CVE-2012-5597 + * The iSCSI dissector could go into an infinite loop. + wnpa-sec-2012-36 CVE-2012-5598 + * The WTP dissector could go into an infinite loop. + wnpa-sec-2012-37 CVE-2012-5599 + * The RTCP dissector could go into an infinite loop. + wnpa-sec-2012-38 CVE-2012-5600 + * The 3GPP2 A11 dissector could go into an infinite loop. + wnpa-sec-2012-39 CVE-2012-5601 + * The ICMPv6 dissector could go into an infinite loop. + wnpa-sec-2012-40 CVE-2012-5602 + + Further bug fixes and updated protocol support as listed in: + http://www.wireshark.org/docs/relnotes/wireshark-1.8.4.html + +------------------------------------------------------------------- Old: ---- wireshark-1.8.3.tar.bz2 New: ---- wireshark-1.8.4.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ wireshark.spec ++++++ --- /var/tmp/diff_new_pack.ieIjEy/_old 2012-11-30 12:32:04.000000000 +0100 +++ /var/tmp/diff_new_pack.ieIjEy/_new 2012-11-30 12:32:04.000000000 +0100 @@ -20,7 +20,7 @@ %define use_caps 0 Name: wireshark -Version: 1.8.3 +Version: 1.8.4 Release: 0 Summary: A Network Traffic Analyser License: GPL-2.0+ and GPL-3.0+ ++++++ wireshark-1.8.3.tar.bz2 -> wireshark-1.8.4.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/wireshark/wireshark-1.8.3.tar.bz2 /work/SRC/openSUSE:Factory/.wireshark.new/wireshark-1.8.4.tar.bz2 differ: char 11, line 1 -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org