Date: Tue, 1 Mar 2016 03:00:41 +0000 (UTC) From: Jason Unovitch <junovitch@FreeBSD.org> To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r409842 - head/security/vuxml Message-ID: <201603010300.u2130fvX097298@repo.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: junovitch Date: Tue Mar 1 03:00:41 2016 New Revision: 409842 URL: https://svnweb.freebsd.org/changeset/ports/409842 Log: Document wireshark multiple vulnerabilities Security: CVE-2016-2522 Security: CVE-2016-2523 Security: CVE-2016-2524 Security: CVE-2016-2525 Security: CVE-2016-2526 Security: CVE-2016-2527 Security: CVE-2016-2528 Security: CVE-2016-2529 Security: CVE-2016-2530 Security: CVE-2016-2531 Security: CVE-2016-2532 Security: https://vuxml.FreeBSD.org/freebsd/45117749-df55-11e5-b2bd-002590263bf5.html Security: https://vuxml.FreeBSD.org/freebsd/42c2c422-df55-11e5-b2bd-002590263bf5.html Modified: head/security/vuxml/vuln.xml Modified: head/security/vuxml/vuln.xml ============================================================================== --- head/security/vuxml/vuln.xml Tue Mar 1 02:53:06 2016 (r409841) +++ head/security/vuxml/vuln.xml Tue Mar 1 03:00:41 2016 (r409842) @@ -58,6 +58,164 @@ Notes: * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">; + <vuln vid="45117749-df55-11e5-b2bd-002590263bf5"> + <topic>wireshark -- multiple vulnerabilities</topic> + <affects> + <package> + <name>wireshark</name> + <name>wireshark-lite</name> + <name>wireshark-qt5</name> + <name>tshark</name> + <name>tshark-lite</name> + <range><lt>2.0.2</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>Wireshark development team reports:</p> + <blockquote cite="https://www.wireshark.org/docs/relnotes/wireshark-2.0.2.html">; + <p>The following vulnerabilities have been fixed:</p> + <ul> + <li><p>wnpa-sec-2016-02</p> + <p>ASN.1 BER dissector crash. (Bug 11828) CVE-2016-2522</p></li> + <li><p>wnpa-sec-2016-03</p> + <p>DNP dissector infinite loop. (Bug 11938) CVE-2016-2523</p></li> + <li><p>wnpa-sec-2016-04</p> + <p>X.509AF dissector crash. (Bug 12002) CVE-2016-2524</p></li> + <li><p>wnpa-sec-2016-05</p> + <p>HTTP/2 dissector crash. (Bug 12077) CVE-2016-2525</p></li> + <li><p>wnpa-sec-2016-06</p> + <p>HiQnet dissector crash. (Bug 11983) CVE-2016-2526</p></li> + <li><p>wnpa-sec-2016-07</p> + <p>3GPP TS 32.423 Trace file parser crash. (Bug 11982) + </p>CVE-2016-2527</li> + <li><p>wnpa-sec-2016-08</p> + <p>LBMC dissector crash. (Bug 11984) CVE-2016-2528</p></li> + <li><p>wnpa-sec-2016-09</p> + <p>iSeries file parser crash. (Bug 11985) CVE-2016-2529</p></li> + <li><p>wnpa-sec-2016-10</p> + <p>RSL dissector crash. (Bug 11829) CVE-2016-2530 + CVE-2016-2531</p></li> + <li><p>wnpa-sec-2016-11</p> + <p>LLRP dissector crash. (Bug 12048) CVE-2016-2532</p></li> + <li><p>wnpa-sec-2016-12</p> + <p>Ixia IxVeriWave file parser crash. (Bug 11795)</p></li> + <li><p>wnpa-sec-2016-13</p> + <p>IEEE 802.11 dissector crash. (Bug 11818)</p></li> + <li><p>wnpa-sec-2016-14</p> + <p>GSM A-bis OML dissector crash. (Bug 11825)</p></li> + <li><p>wnpa-sec-2016-15</p> + <p>ASN.1 BER dissector crash. (Bug 12106)</p></li> + <li><p>wnpa-sec-2016-16</p> + <p>SPICE dissector large loop. (Bug 12151)</p></li> + <li><p>wnpa-sec-2016-17</p> + <p>NFS dissector crash.</p></li> + <li><p>wnpa-sec-2016-18</p> + <p>ASN.1 BER dissector crash. (Bug 11822)</p></li> + </ul> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2016-2522</cvename> + <cvename>CVE-2016-2523</cvename> + <cvename>CVE-2016-2524</cvename> + <cvename>CVE-2016-2525</cvename> + <cvename>CVE-2016-2526</cvename> + <cvename>CVE-2016-2527</cvename> + <cvename>CVE-2016-2528</cvename> + <cvename>CVE-2016-2529</cvename> + <cvename>CVE-2016-2530</cvename> + <cvename>CVE-2016-2531</cvename> + <cvename>CVE-2016-2532</cvename> + <url>https://www.wireshark.org/docs/relnotes/wireshark-2.0.1.html</url>; + </references> + <dates> + <discovery>2016-02-26</discovery> + <entry>2016-03-01</entry> + </dates> + </vuln> + + <vuln vid="42c2c422-df55-11e5-b2bd-002590263bf5"> + <topic>wireshark -- multiple vulnerabilities</topic> + <affects> + <package> + <name>wireshark</name> + <name>wireshark-lite</name> + <name>wireshark-qt5</name> + <name>tshark</name> + <name>tshark-lite</name> + <range><lt>2.0.1</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>Wireshark development team reports:</p> + <blockquote cite="https://www.wireshark.org/docs/relnotes/wireshark-2.0.1.html">; + <p>The following vulnerabilities have been fixed:</p> + <ul> + <li><p>wnpa-sec-2015-31</p> + <p>NBAP dissector crashes. (Bug 11602, Bug 11835, Bug 11841)</p> + </li> + <li><p>wnpa-sec-2015-37</p> + <p>NLM dissector crash.</p></li> + <li><p>wnpa-sec-2015-39</p> + <p>BER dissector crash.</p></li> + <li><p>wnpa-sec-2015-40</p> + <p>Zlib decompression crash. (Bug 11548)</p></li> + <li><p>wnpa-sec-2015-41</p> + <p>SCTP dissector crash. (Bug 11767)</p></li> + <li><p>wnpa-sec-2015-42</p> + <p>802.11 decryption crash. (Bug 11790, Bug 11826)</p></li> + <li><p>wnpa-sec-2015-43</p> + <p>DIAMETER dissector crash. (Bug 11792)</p></li> + <li><p>wnpa-sec-2015-44</p> + <p>VeriWave file parser crashes. (Bug 11789, Bug 11791)</p></li> + <li><p>wnpa-sec-2015-45</p> + <p>RSVP dissector crash. (Bug 11793)</p></li> + <li><p>wnpa-sec-2015-46</p> + <p>ANSI A and GSM A dissector crashes. (Bug 11797)</p></li> + <li><p>wnpa-sec-2015-47</p> + <p>Ascend file parser crash. (Bug 11794)</p></li> + <li><p>wnpa-sec-2015-48</p> + <p>NBAP dissector crash. (Bug 11815)</p></li> + <li><p>wnpa-sec-2015-49</p> + <p>RSL dissector crash. (Bug 11829)</p></li> + <li><p>wnpa-sec-2015-50</p> + <p>ZigBee ZCL dissector crash. (Bug 11830)</p></li> + <li><p>wnpa-sec-2015-51</p> + <p>Sniffer file parser crash. (Bug 11827)</p></li> + <li><p>wnpa-sec-2015-52</p> + <p>NWP dissector crash. (Bug 11726)</p></li> + <li><p>wnpa-sec-2015-53</p> + <p>BT ATT dissector crash. (Bug 11817)</p></li> + <li><p>wnpa-sec-2015-54</p> + <p>MP2T file parser crash. (Bug 11820)</p></li> + <li><p>wnpa-sec-2015-55</p> + <p>MP2T file parser crash. (Bug 11821)</p></li> + <li><p>wnpa-sec-2015-56</p> + <p>S7COMM dissector crash. (Bug 11823)</p></li> + <li><p>wnpa-sec-2015-57</p> + <p>IPMI dissector crash. (Bug 11831)</p></li> + <li><p>wnpa-sec-2015-58</p> + <p>TDS dissector crash. (Bug 11846)</p></li> + <li><p>wnpa-sec-2015-59</p> + <p>PPI dissector crash. (Bug 11876)</p></li> + <li><p>wnpa-sec-2015-60</p> + <p>MS-WSP dissector crash. (Bug 11931)</p></li> + </ul> + </blockquote> + </body> + </description> + <references> + <url>https://www.wireshark.org/docs/relnotes/wireshark-2.0.1.html</url>; + </references> + <dates> + <discovery>2015-12-29</discovery> + <entry>2016-03-01</entry> + </dates> + </vuln> + <vuln vid="7bbc3016-de63-11e5-8fa8-14dae9d210b8"> <topic>tomcat -- multiple vulnerabilities</topic> <affects>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201603010300.u2130fvX097298>