Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 596190 (CVE-2016-7957, CVE-2016-7958) - <net-analyzer/wireshark-2.2.1 - two vulnerabilities
Summary: <net-analyzer/wireshark-2.2.1 - two vulnerabilities
Alias: CVE-2016-7957, CVE-2016-7958
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Security
Whiteboard: B3 [noglsa]
Depends on:
Reported: 2016-10-05 05:07 UTC by Jeroen Roovers (RETIRED)
Modified: 2017-01-04 08:25 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Note You need to log in before you can comment on or make changes to this bug.
Description Jeroen Roovers (RETIRED) gentoo-dev 2016-10-05 05:07:05 UTC
Bug Fixes

   The following vulnerabilities have been fixed:
     * [1]wnpa-sec-2016-56
       The Bluetooth L2CAP dissector could crash. ([2]Bug 12825)
     * [3]wnpa-sec-2016-57
       The NCP dissector could crash. ([4]Bug 12945)

See also [1]: These dissector crashes do not appear to affect the 2.0.x branch.
Comment 1 Jeroen Roovers (RETIRED) gentoo-dev 2016-10-05 05:07:50 UTC

Comment 2 Jeroen Roovers (RETIRED) gentoo-dev 2016-10-05 06:30:17 UTC
2.2.1 is in the tree.
Comment 3 Jeroen Roovers (RETIRED) gentoo-dev 2016-10-05 11:06:02 UTC
Arch teams, please test and mark stable:
Targeted stable KEYWORDS : alpha amd64 arm hppa ia64 ppc ppc64 sparc x86
Comment 4 Jeroen Roovers (RETIRED) gentoo-dev 2016-10-05 16:31:13 UTC
Stable for PPC64.
Comment 5 Jeroen Roovers (RETIRED) gentoo-dev 2016-10-05 16:44:45 UTC
Stable for HPPA.
Comment 6 Agostino Sarubbo gentoo-dev 2016-10-07 08:59:36 UTC
amd64 stable
Comment 7 Agostino Sarubbo gentoo-dev 2016-10-07 09:01:36 UTC
x86 stable
Comment 8 Tobias Klausmann (RETIRED) gentoo-dev 2016-10-11 14:18:35 UTC
Stable on alpha
Comment 9 Markus Meier gentoo-dev 2016-10-18 20:03:24 UTC
arm stable
Comment 10 Jeroen Roovers (RETIRED) gentoo-dev 2016-11-14 20:00:58 UTC
Comment 11 Michael Palimaka (kensington) gentoo-dev 2016-12-18 17:30:56 UTC
An automated check of this bug failed - the following atom is unknown:


Please verify the atom list.
Comment 12 Michael Palimaka (kensington) gentoo-dev 2016-12-18 17:35:26 UTC
2.2.1 is gone from the tree, 2.2.2 is being stabilised in bug #600086
Comment 13 Aaron Bauman (RETIRED) gentoo-dev 2017-01-04 08:25:50 UTC
package no longer in tree and superseded per previous comments.