Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 932563 (CVE-2024-4853, CVE-2024-4854, CVE-2024-4855)

Summary: <net-analyzer/wireshark-{4.0.15,4.2.5}: multiple vulnerabilities
Product: Gentoo Security Reporter: Holger Hoffstätte <holger>
Component: VulnerabilitiesAssignee: Sam James <sam>
Status: UNCONFIRMED ---    
Severity: normal CC: holger, security
Priority: Normal Keywords: PullRequest
Version: unspecified   
Hardware: All   
OS: Linux   
URL: https://www.wireshark.org/news/20240515.html
See Also: https://github.com/gentoo/gentoo/pull/36790
Whiteboard: B3 [stable]
Package list:
Runtime testing required: ---
Bug Depends on: 933294, 933295    
Bug Blocks:    

Description Holger Hoffstätte 2024-05-23 13:52:54 UTC
Latest updates fix 3 CVEs.


Reproducible: Always
Comment 1 Larry the Git Cow gentoo-dev 2024-05-28 01:59:05 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=8f5f3d732811d25e94e1104fa05bb1388649a7bd

commit 8f5f3d732811d25e94e1104fa05bb1388649a7bd
Author:     Holger Hoffstätte <holger@applied-asynchrony.com>
AuthorDate: 2024-05-23 13:45:52 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2024-05-28 01:53:23 +0000

    net-analyzer/wireshark: add 4.0.15, 4.2.5
    
    Bug: https://bugs.gentoo.org/932563
    Signed-off-by: Holger Hoffstätte <holger@applied-asynchrony.com>
    Closes: https://github.com/gentoo/gentoo/pull/36790
    Signed-off-by: Sam James <sam@gentoo.org>

 net-analyzer/wireshark/Manifest                |   4 +
 net-analyzer/wireshark/wireshark-4.0.15.ebuild | 344 ++++++++++++++++++++++++
 net-analyzer/wireshark/wireshark-4.2.5.ebuild  | 348 +++++++++++++++++++++++++
 3 files changed, 696 insertions(+)