Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2016.0674
wireshark security update
14 March 2016
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: wireshark
Publisher: Debian
Operating System: Debian GNU/Linux 7
Debian GNU/Linux 8
Impact/Access: Denial of Service -- Remote with User Interaction
Resolution: Patch/Upgrade
CVE Names: CVE-2016-2532 CVE-2016-2531 CVE-2016-2530
CVE-2016-2523 CVE-2015-8731
Reference: ASB-2016.0016
ESB-2016.0008.2
Original Bulletin:
http://www.debian.org/security/2016/dsa-3516
- --------------------------BEGIN INCLUDED TEXT--------------------
- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
- - -------------------------------------------------------------------------
Debian Security Advisory DSA-3516-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
March 13, 2016 https://www.debian.org/security/faq
- - -------------------------------------------------------------------------
Package : wireshark
CVE ID : CVE-2015-8731 CVE-2016-2523 CVE-2016-2530 CVE-2016-2531
CVE-2016-2532
Multiple vulnerabilities were discovered in the dissectors/parsers for
DNP, RSL, LLRP, GSM A-bis OML, ASN 1 BER which could result in denial
of service.
For the oldstable distribution (wheezy), these problems have been fixed
in version 1.8.2-5wheezy18.
For the stable distribution (jessie), these problems have been fixed in
version 1.12.1+g01b65bf-4+deb8u5.
For the testing distribution (stretch), these problems have been fixed
in version 2.0.2+ga16e22e-1.
For the unstable distribution (sid), these problems have been fixed in
version 2.0.2+ga16e22e-1.
We recommend that you upgrade your wireshark packages.
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v2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=gZ+n
- -----END PGP SIGNATURE-----
- --------------------------END INCLUDED TEXT--------------------
You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
http://www.auscert.org.au/render.html?cid=1980
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967
iQIVAwUBVuXzWn6ZAP0PgtI9AQLxbxAApKDxVCFJw50G/f0hPpUnuhCiT71PgyPv
fonOn6Z2wok3XZq2GTOW4uktWIUwqsZR/FwOcQrDeiHD+3ZVxDYqBbnymyTEcflq
3fpCK3f4cJ9V4qBGFuSrkqvO+gQ7W/kZUulO4Cv4QBAxKRkpTo9wC/wOGiZxb2ar
tJZuvG6Ow8v3LhoAG5hUyODr4b28S+ShaF6b7pVy9cXm9+EilL0NMM7AbwYbML2l
fwJrR1ZCHLrVZNbb0KrDZ5EOKMcbFbqth0aYikk4qjLig2cVFs6STvgzMzPocFmm
oEqGLUYjmEMldqLRWKVyNaUVSGoRXydilL0C7hb+k/JYxcHDhIV8trdth7Pc9mo2
OX+FPRqg+KmWR+1x4tGrggnQL6CEZk5eCuY2wIgK3p8IgB6K+xB3BBO2dgeC4ki7
H8UAxBcyCy8GQz42vI5VonQt3ZK/2K8cfkIMXtRuCNLQ/xQJt1fWiudNym3tnQqZ
rqMRcxTKzMmYN1SEWr87y3s1bz5+pxyzGejL7tGa7buLLsUFLC34KXtT4HrSOn8l
utlJL4U/DEnj2yb3N5jEYIgC4ROHVR8ALcNjHedBtIUfwi23Sf88kj1aWDUZ50NH
tbStdPvWXm4UMbnqnb6gaDNdjfcpw1LY4ytQI8GVk4XqApGZ9m+jsvHPHUfynTuk
WhY1LNSFHHk=
=xQva
-----END PGP SIGNATURE-----