Date: Mon, 2 May 2016 23:58:59 +0000 (UTC) From: Jason Unovitch <junovitch@FreeBSD.org> To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r414494 - head/security/vuxml Message-ID: <201605022358.u42Nwxq0094353@repo.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: junovitch Date: Mon May 2 23:58:59 2016 New Revision: 414494 URL: https://svnweb.freebsd.org/changeset/ports/414494 Log: Document denial of service advisories from Wireshark's recent release Security: https://vuxml.FreeBSD.org/freebsd/7e36c369-10c0-11e6-94fa-002590263bf5.html Modified: head/security/vuxml/vuln.xml Modified: head/security/vuxml/vuln.xml ============================================================================== --- head/security/vuxml/vuln.xml Mon May 2 23:48:02 2016 (r414493) +++ head/security/vuxml/vuln.xml Mon May 2 23:58:59 2016 (r414494) @@ -58,6 +58,59 @@ Notes: * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">; + <vuln vid="7e36c369-10c0-11e6-94fa-002590263bf5"> + <topic>wireshark -- multiple vulnerabilities</topic> + <affects> + <package> + <name>wireshark</name> + <name>wireshark-lite</name> + <name>wireshark-qt5</name> + <name>tshark</name> + <name>tshark-lite</name> + <range><lt>2.0.3</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>Wireshark development team reports:</p> + <blockquote cite="https://www.wireshark.org/docs/relnotes/wireshark-2.0.3.html">; + <p>The following vulnerabilities have been fixed:</p> + <ul> + <li><p>wnpa-sec-2016-19</p> + <p>The NCP dissector could crash. (Bug 11591)</p></li> + <li><p>wnpa-sec-2016-20</p> + <p>TShark could crash due to a packet reassembly bug. (Bug 11799) + </p></li> + <li><p>wnpa-sec-2016-21</p> + <p>The IEEE 802.11 dissector could crash. (Bug 11824, Bug 12187) + </p></li> + <li><p>wnpa-sec-2016-22</p> + <p>The PKTC dissector could crash. (Bug 12206)</p></li> + <li><p>wnpa-sec-2016-23</p> + <p>The PKTC dissector could crash. (Bug 12242)</p></li> + <li><p>wnpa-sec-2016-24</p> + <p>The IAX2 dissector could go into an infinite loop. (Bug + 12260)</p></li> + <li><p>wnpa-sec-2016-25</p> + <p>Wireshark and TShark could exhaust the stack. (Bug 12268)</p> + </li> + <li><p>wnpa-sec-2016-26</p> + <p>The GSM CBCH dissector could crash. (Bug 12278)</p></li> + <li><p>wnpa-sec-2016-27</p> + <p>MS-WSP dissector crash. (Bug 12341)</p></li> + </ul> + </blockquote> + </body> + </description> + <references> + <url>https://www.wireshark.org/docs/relnotes/wireshark-2.0.3.html</url>; + </references> + <dates> + <discovery>2016-04-22</discovery> + <entry>2016-05-02</entry> + </dates> + </vuln> + <vuln vid="78abc022-0fee-11e6-9a1c-0014a5a57822"> <topic>mercurial -- arbitrary code execution vulnerability</topic> <affects>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201605022358.u42Nwxq0094353>