Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 596190 (CVE-2016-7957, CVE-2016-7958) - <net-analyzer/wireshark-2.2.1 - two vulnerabilities
Summary: <net-analyzer/wireshark-2.2.1 - two vulnerabilities
Status: RESOLVED FIXED
Alias: CVE-2016-7957, CVE-2016-7958
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Security
URL: https://www.wireshark.org/lists/wires...
Whiteboard: B3 [noglsa]
Keywords:
Depends on:
Blocks:
 
Reported: 2016-10-05 05:07 UTC by Jeroen Roovers (RETIRED)
Modified: 2017-01-04 08:25 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Jeroen Roovers (RETIRED) gentoo-dev 2016-10-05 05:07:05 UTC 
Bug Fixes

   The following vulnerabilities have been fixed:
     * [1]wnpa-sec-2016-56
       The Bluetooth L2CAP dissector could crash. ([2]Bug 12825)
     * [3]wnpa-sec-2016-57
       The NCP dissector could crash. ([4]Bug 12945)

See also [1]: These dissector crashes do not appear to affect the 2.0.x branch.
Comment 1 Jeroen Roovers (RETIRED) gentoo-dev 2016-10-05 05:07:50 UTC 
Cont.

[1] https://www.wireshark.org/lists/wireshark-announce/201610/msg00001.html
Comment 2 Jeroen Roovers (RETIRED) gentoo-dev 2016-10-05 06:30:17 UTC 
2.2.1 is in the tree.
Comment 3 Jeroen Roovers (RETIRED) gentoo-dev 2016-10-05 11:06:02 UTC 
Arch teams, please test and mark stable:
=net-analyzer/wireshark-2.2.1
Targeted stable KEYWORDS : alpha amd64 arm hppa ia64 ppc ppc64 sparc x86
Comment 4 Jeroen Roovers (RETIRED) gentoo-dev 2016-10-05 16:31:13 UTC 
Stable for PPC64.
Comment 5 Jeroen Roovers (RETIRED) gentoo-dev 2016-10-05 16:44:45 UTC 
Stable for HPPA.
Comment 6 Agostino Sarubbo gentoo-dev 2016-10-07 08:59:36 UTC 
amd64 stable
Comment 7 Agostino Sarubbo gentoo-dev 2016-10-07 09:01:36 UTC 
x86 stable
Comment 8 Tobias Klausmann (RETIRED) gentoo-dev 2016-10-11 14:18:35 UTC 
Stable on alpha
Comment 9 Markus Meier gentoo-dev 2016-10-18 20:03:24 UTC 
arm stable
Comment 10 Jeroen Roovers (RETIRED) gentoo-dev 2016-11-14 20:00:58 UTC 
.
Comment 11 Michael Palimaka (kensington) gentoo-dev 2016-12-18 17:30:56 UTC 
An automated check of this bug failed - the following atom is unknown:

net-analyzer/wireshark-2.2.1

Please verify the atom list.
Comment 12 Michael Palimaka (kensington) gentoo-dev 2016-12-18 17:35:26 UTC 
2.2.1 is gone from the tree, 2.2.2 is being stabilised in bug #600086
Comment 13 Aaron Bauman (RETIRED) gentoo-dev 2017-01-04 08:25:50 UTC 
package no longer in tree and superseded per previous comments.