Bug 21314 - wireshark new release 2.2.8 fixes security issues
Summary: wireshark new release 2.2.8 fixes security issues
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 6
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: has_procedure MGA6-32-OK advisory
Keywords: validated_update
Depends on:
Blocks: 21315
  Show dependency treegraph
 
Reported: 2017-07-22 01:29 CEST by David Walser
Modified: 2017-07-28 20:13 CEST (History)
3 users (show)

See Also:
Source RPM: wireshark-2.2.7-1.mga6.src.rpm
CVE:
Status comment:


Attachments

Description David Walser 2017-07-22 01:29:19 CEST
Upstream has released new versions on July 18:
https://www.wireshark.org/news/20170718.html

Updated package uploaded for Mageia 6.

Advisory:
========================

Updated wireshark packages fix security vulnerabilities:

The wireshark package has been updated to version 2.2.8, which fixes several
security issues where a malformed packet trace could cause it to crash or go
into an infinite loop, and fixes several other bugs as well.  See the release
notes for details.

References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11406
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11407
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11408
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11410
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11411
https://www.wireshark.org/security/wnpa-sec-2017-13.html
https://www.wireshark.org/security/wnpa-sec-2017-28.html
https://www.wireshark.org/security/wnpa-sec-2017-34.html
https://www.wireshark.org/security/wnpa-sec-2017-35.html
https://www.wireshark.org/security/wnpa-sec-2017-36.html
https://www.wireshark.org/docs/relnotes/wireshark-2.2.8.html
https://www.wireshark.org/news/20170718.html
========================

Updated packages in core/updates_testing:
========================
wireshark-2.2.8-1.mga6
libwireshark8-2.2.8-1.mga6
libwiretap6-2.2.8-1.mga6
libwscodecs1-2.2.8-1.mga6
libwsutil7-2.2.8-1.mga6
libwireshark-devel-2.2.8-1.mga6
wireshark-tools-2.2.8-1.mga6
tshark-2.2.8-1.mga6
rawshark-2.2.8-1.mga6
dumpcap-2.2.8-1.mga6

from wireshark-2.2.8-1.mga6.src.rpm
Comment 1 David Walser 2017-07-22 01:29:46 CEST
Testing procedure:
https://wiki.mageia.org/en/QA_procedure:Wireshark

Whiteboard: (none) => has_procedure

David Walser 2017-07-22 01:30:01 CEST

Blocks: (none) => 21315

Comment 2 Herman Viaene 2017-07-26 14:06:55 CEST
MGA6-32 on Asus A6000VM MATE
No installation issues.
Following QA procedure (more or less-: at CLI:
$ wireshark -n
Gtk-Message: Failed to load module "canberra-gtk-module"
In wireshark, click in network interface, click "Start capture" and capture 168 logs. Save results as wiresharktest.pcapng.

$ tshark -n
Capturing on 'wlp0s29f7u4'
    1 0.000000000  192.168.2.6 → 192.168.2.1  DNS 73 Standard query 0x608f A www.google.be
    2 0.000037295  192.168.2.6 → 192.168.2.1  DNS 73 Standard query 0x1b17 AAAA www.google.be
    3 0.000274894  192.168.2.6 → 192.168.2.1  DNS 75 Standard query 0xb867 A ssl.gstatic.com
    4 0.000288793  192.168.2.6 → 192.168.2.1  DNS 75 Standard query 0xb9ba AAAA ssl.gstatic.com
    5 0.000464652  192.168.2.6 → 192.168.2.1  DNS 75 Standard query 0xac6b A www.gstatic.com
    6 0.000477224  192.168.2.6 → 192.168.2.1  DNS 75 Standard query 0xc4c1 AAAA www.gstatic.com
    7 0.019008021  192.168.2.1 → 192.168.2.6  DNS 246 Standard query response 0xb9ba AAAA ssl.gstatic.com AAAA 2a00:1450:400e:803::2003 NS ns4.google.com NS ns3.google.com NS ns1.google.com NS ns2.google.com A 216.239.32.10 A 216.239.34.10 A 216.239.36.10 A 216.239.38.10
and a lot more

$ editcap -r wiresharktest.pcapng wiresharktest50 1-50
no feedback, wiresharktest.pcapng is 35.3 kb, wiresharktest50 is 8.3 kb

$ mergecap -v -w wiresharkmerged wiresharktest.pcapng wiresharktest50
mergecap: wiresharktest.pcapng is type Wireshark/... - pcapng.
mergecap: wiresharktest50 is type Wireshark/... - pcapng.
mergecap: selected frame_type Ethernet (ether)
mergecap: ready to merge records
Record: 1
Record: 2
Record: 3
to 218 which is correct 168 + 50

$ capinfos wiresharktest50
File name:           wiresharktest50
File type:           Wireshark/... - pcapng
File encapsulation:  Ethernet
File timestamp precision:  nanoseconds (9)
Packet size limit:   file hdr: (not set)
Number of packets:   50
and some more

All seems OK

CC: (none) => herman.viaene
Whiteboard: has_procedure => has_procedure MGA6-32-OK

Comment 3 Lewis Smith 2017-07-28 11:11:25 CEST
Advisoried from ,Comment 0.
Validating under temporary policy accepting 1 OK: for which thanks Herman.

Keywords: (none) => validated_update
Whiteboard: has_procedure MGA6-32-OK => has_procedure MGA6-32-OK advisory
CC: (none) => lewyssmith, sysadmin-bugs

Comment 4 Mageia Robot 2017-07-28 20:13:22 CEST
An update for this issue has been pushed to the Mageia Updates repository.

http://advisories.mageia.org/MGASA-2017-0226.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.