Gentoo Archives: gentoo-commits

From: "Sergey Popov (pinkbyte)" <pinkbyte@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] gentoo commit in xml/htdocs/security/en/glsa: glsa-201308-05.xml
Date: Wed, 28 Aug 2013 11:00:24
Message-Id: 20130828110012.587082004C@flycatcher.gentoo.org
1 pinkbyte 13/08/28 11:00:12
2
3 Added: glsa-201308-05.xml
4 Log:
5 GLSA 201308-05
6
7 Revision Changes Path
8 1.1 xml/htdocs/security/en/glsa/glsa-201308-05.xml
9
10 file : http://sources.gentoo.org/viewvc.cgi/gentoo/xml/htdocs/security/en/glsa/glsa-201308-05.xml?rev=1.1&view=markup
11 plain: http://sources.gentoo.org/viewvc.cgi/gentoo/xml/htdocs/security/en/glsa/glsa-201308-05.xml?rev=1.1&content-type=text/plain
12
13 Index: glsa-201308-05.xml
14 ===================================================================
15 <?xml version="1.0" encoding="UTF-8"?>
16 <?xml-stylesheet href="/xsl/glsa.xsl" type="text/xsl"?>
17 <?xml-stylesheet href="/xsl/guide.xsl" type="text/xsl"?>
18 <!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd">
19 <glsa id="201308-05">
20 <title>Wireshark: Multiple vulnerabilities</title>
21 <synopsis>Multiple vulnerabilities have been found in Wireshark, allowing
22 remote attackers to execute arbitrary code or cause Denial of Service.
23 </synopsis>
24 <product type="ebuild">wireshark</product>
25 <announced>August 28, 2013</announced>
26 <revised>August 28, 2013: 1</revised>
27 <bug>398549</bug>
28 <bug>427964</bug>
29 <bug>431572</bug>
30 <bug>433990</bug>
31 <bug>470262</bug>
32 <bug>472762</bug>
33 <bug>478694</bug>
34 <access>remote</access>
35 <affected>
36 <package name="net-analyzer/wireshark" auto="yes" arch="*">
37 <unaffected range="ge">1.10.1</unaffected>
38 <unaffected range="rge">1.8.9</unaffected>
39 <vulnerable range="lt">1.10.1</vulnerable>
40 </package>
41 </affected>
42 <background>
43 <p>Wireshark is a versatile network protocol analyzer.</p>
44 </background>
45 <description>
46 <p>Multiple vulnerabilities have been discovered in Wireshark. Please
47 review the CVE identifiers referenced below for details.
48 </p>
49 </description>
50 <impact type="high">
51 <p>A remote attacker could possibly execute arbitrary code with the
52 privileges of the process or cause a Denial of Service condition.
53 </p>
54 </impact>
55 <workaround>
56 <p>There is no known workaround at this time.</p>
57 </workaround>
58 <resolution>
59 <p>All Wireshark 1.10 users should upgrade to the latest version:</p>
60
61 <code>
62 # emerge --sync
63 # emerge --ask --oneshot --verbose "&gt;=net-analyzer/wireshark-1.10.1"
64 </code>
65
66 <p>All Wireshark 1.8 users should upgrade to the latest version:</p>
67
68 <code>
69 # emerge --sync
70 # emerge --ask --oneshot --verbose "&gt;=net-analyzer/wireshark-1.8.9"
71 </code>
72 </resolution>
73 <references>
74 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0041">CVE-2012-0041</uri>
75 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0042">CVE-2012-0042</uri>
76 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0043">CVE-2012-0043</uri>
77 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0066">CVE-2012-0066</uri>
78 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0067">CVE-2012-0067</uri>
79 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0068">CVE-2012-0068</uri>
80 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3548">CVE-2012-3548</uri>
81 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4048">CVE-2012-4048</uri>
82 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4049">CVE-2012-4049</uri>
83 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4285">CVE-2012-4285</uri>
84 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4286">CVE-2012-4286</uri>
85 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4287">CVE-2012-4287</uri>
86 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4288">CVE-2012-4288</uri>
87 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4289">CVE-2012-4289</uri>
88 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4290">CVE-2012-4290</uri>
89 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4291">CVE-2012-4291</uri>
90 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4292">CVE-2012-4292</uri>
91 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4293">CVE-2012-4293</uri>
92 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4294">CVE-2012-4294</uri>
93 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4295">CVE-2012-4295</uri>
94 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4296">CVE-2012-4296</uri>
95 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4297">CVE-2012-4297</uri>
96 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4298">CVE-2012-4298</uri>
97 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3540">CVE-2013-3540</uri>
98 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3541">CVE-2013-3541</uri>
99 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3542">CVE-2013-3542</uri>
100 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3555">CVE-2013-3555</uri>
101 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3556">CVE-2013-3556</uri>
102 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3557">CVE-2013-3557</uri>
103 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3558">CVE-2013-3558</uri>
104 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-3559">CVE-2013-3559</uri>
105 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4074">CVE-2013-4074</uri>
106 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4075">CVE-2013-4075</uri>
107 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4076">CVE-2013-4076</uri>
108 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4077">CVE-2013-4077</uri>
109 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4078">CVE-2013-4078</uri>
110 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4079">CVE-2013-4079</uri>
111 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4080">CVE-2013-4080</uri>
112 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4081">CVE-2013-4081</uri>
113 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4082">CVE-2013-4082</uri>
114 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4083">CVE-2013-4083</uri>
115 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4920">CVE-2013-4920</uri>
116 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4921">CVE-2013-4921</uri>
117 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4922">CVE-2013-4922</uri>
118 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4923">CVE-2013-4923</uri>
119 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4924">CVE-2013-4924</uri>
120 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4925">CVE-2013-4925</uri>
121 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4926">CVE-2013-4926</uri>
122 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4927">CVE-2013-4927</uri>
123 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4928">CVE-2013-4928</uri>
124 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4929">CVE-2013-4929</uri>
125 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4930">CVE-2013-4930</uri>
126 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4931">CVE-2013-4931</uri>
127 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4932">CVE-2013-4932</uri>
128 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4933">CVE-2013-4933</uri>
129 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4934">CVE-2013-4934</uri>
130 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4935">CVE-2013-4935</uri>
131 <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4936">CVE-2013-4936</uri>
132 </references>
133 <metadata tag="requester" timestamp="Thu, 10 May 2012 22:02:05 +0000">
134 underling
135 </metadata>
136 <metadata tag="submitter" timestamp="Wed, 28 Aug 2013 10:57:29 +0000">ackle</metadata>
137 </glsa>