wireshark: security bump to version 1.10.9
authorGustavo Zacarias <gustavo@zacarias.com.ar>
Fri, 8 Aug 2014 13:29:54 +0000 (10:29 -0300)
committerPeter Korsgaard <peter@korsgaard.com>
Fri, 8 Aug 2014 20:19:16 +0000 (22:19 +0200)
Fixes:
WNPA-SEC-2014-08 / CVE-2014-5161 / CVE-2014-5162
The Catapult DCT2000 and IrDA dissectors could underrun a buffer.

WNPA-SEC-2014-09 / CVE-2014-5163
The GSM Management dissector could crash.

WNPA-SEC-2014-10 / CVE-2014-5164
The RLC dissector could crash.

WNPA-SEC-2014-11 / CVE-2014-5165
The ASN.1 BER dissector could crash.

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
package/wireshark/wireshark.mk

index 4117d19cb7dc8ff5683030b651b59eb6d5e85d3d..da76e3719a4e94c497ffb712e2bfefc14043c11b 100644 (file)
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-WIRESHARK_VERSION = 1.10.8
+WIRESHARK_VERSION = 1.10.9
 WIRESHARK_SOURCE = wireshark-$(WIRESHARK_VERSION).tar.bz2
 WIRESHARK_SITE = http://www.wireshark.org/download/src/all-versions
 WIRESHARK_LICENSE = wireshark license