Debian alert DSA-3719-1 (wireshark)

From: Sebastien Delafond <seb@debian.org> To: debian-security-announce@lists.debian.org Subject: [SECURITY] [DSA 3719-1] wireshark security update Date: Mon, 21 Nov 2016 08:59:41 +0000 Message-ID: <E1c8kRx-00064O-PC@seger.debian.org>

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3719-1 security@debian.org https://www.debian.org/security/ Sebastien Delafond November 21, 2016 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : wireshark CVE ID : CVE-2016-9373 CVE-2016-9374 CVE-2016-9375 CVE-2016-9376 It was discovered that wireshark, a network protocol analyzer, contained several vulnerabilities in the dissectors for DCERPC, AllJoyn, DTN, and OpenFlow, that could lead to various crashes, denial-of-service, or execution of arbitrary code. For the stable distribution (jessie), these problems have been fixed in version 1.12.1+g01b65bf-4+deb8u10. For the unstable distribution (sid), these problems have been fixed in version 2.2.2+g9c5aae3-1. We recommend that you upgrade your wireshark packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQEcBAEBCgAGBQJYMrOJAAoJEBC+iYPz1Z1k1iQH+wVRmcLdFAQ9oPuvb7y8ekxt GJfhKtE1chHaTCbLALb7tr52Z7QWzzmZFjpVPOv3XyE1QaSPiPoB26K47T2hwIYE rM2cY6yE2+wkwUA18JnU11kQeJZMT64zcRKNiE0oIvQX8rC9/+wqozQbCcemqorY yxJ8tddHOsPUUmJDs+Pd6ZzKemZCIaj8MiNOj0yL/uz4qPqnQFH1U22u/VIgf8KP fAO/Mi1HT2nHLwTX+AEbPyooVJOuecNkDTYUgxB+hYq3mxBkw05xXaiB4T3Y1ZlE P6rQM3RxYwucB+xRCoQpudSSgAi3hkgASoIUl4vA9fj+SOB4k+cGKPS+mRbEILw= =vgpW -----END PGP SIGNATURE-----