File _patchinfo of Package patchinfo.6831

<patchinfo incident="6831">
  <issue id="1042330" tracker="bnc">VUL-0: TRACKERBUG: wireshark: 2.2.7 security update</issue>
  <issue id="1042309" tracker="bnc">VUL-1: CVE-2017-9343: wireshark: MSNIP dissector crash (wnpa-sec-2017-30)</issue>
  <issue id="1042308" tracker="bnc">VUL-1: CVE-2017-9347: wireshark: ROS dissector crash (wnpa-sec-2017-31)</issue>
  <issue id="1042299" tracker="bnc">VUL-1: CVE-2017-9350: wireshark: openSAFETY dissector memory exhaustion (wnpa-sec-2017-28)</issue>
  <issue id="1042298" tracker="bnc">VUL-1: CVE-2017-9344: wireshark: BT L2CAP dissector divide by zero (wnpa-sec-2017-29)</issue>
  <issue id="1042303" tracker="bnc">VUL-1: CVE-2017-9348: wireshark: DOF dissector read overflow (wnpa-sec-2017-23)</issue>
  <issue id="1042302" tracker="bnc">VUL-1: CVE-2017-9351: wireshark: DHCP dissector read overflow (wnpa-sec-2017-24)</issue>
  <issue id="1042301" tracker="bnc">VUL-0: CVE-2017-9346: wireshark: SoulSeek dissector infinite loop (wnpa-sec-2017-25)</issue>
  <issue id="1042300" tracker="bnc">VUL-1: CVE-2017-9345: wireshark: DNS dissector infinite loop (wnpa-sec-2017-26)</issue>
  <issue id="1042307" tracker="bnc">VUL-1: CVE-2017-9354: wireshark: RGMP dissector crash (wnpa-sec-2017-32)</issue>
  <issue id="1042306" tracker="bnc">VUL-1: CVE-2017-9353: wireshark: IPv6 dissector crash (wnpa-sec-2017-33)</issue>
  <issue id="1042305" tracker="bnc">VUL-1: CVE-2017-9349: wireshark: DICOM dissector infinite loop (wnpa-sec-2017-27)</issue>
  <issue id="1042304" tracker="bnc">VUL-1: CVE-2017-9352: wireshark: Bazaar dissector infinite loop (wnpa-sec-2017-22)</issue>
  <issue id="2017-9347" tracker="cve" />
  <issue id="2017-9348" tracker="cve" />
  <issue id="2017-9349" tracker="cve" />
  <issue id="2017-9343" tracker="cve" />
  <issue id="2017-9351" tracker="cve" />
  <issue id="2017-9350" tracker="cve" />
  <issue id="2017-9353" tracker="cve" />
  <issue id="2017-9352" tracker="cve" />
  <issue id="2017-9346" tracker="cve" />
  <issue id="2017-9354" tracker="cve" />
  <issue id="2017-9344" tracker="cve" />
  <issue id="2017-9345" tracker="cve" />
  <category>security</category>
  <rating>low</rating>
  <packager>AndreasStieger</packager>
  <description>This update for wireshark fixes minor vulnerabilities that could be used to trigger dissector crashes, infinite loops,
or cause excessive use of CPU resources by making Wireshark read specially crafted packages from the network or a capture file:

- CVE-2017-9352: Bazaar dissector infinite loop (boo#1042304)
- CVE-2017-9348: DOF dissector read overflow (boo#1042303)
- CVE-2017-9351: DHCP dissector read overflow (boo#1042302)
- CVE-2017-9346: SoulSeek dissector infinite loop (boo#1042301)
- CVE-2017-9345: DNS dissector infinite loop (boo#1042300)
- CVE-2017-9349: DICOM dissector infinite loop (boo#1042305)
- CVE-2017-9350: openSAFETY dissector memory exhaustion (boo#1042299)
- CVE-2017-9344: BT L2CAP dissector divide by zero (boo#1042298)
- CVE-2017-9343: MSNIP dissector crash (boo#1042309)
- CVE-2017-9347: ROS dissector crash (boo#1042308)
- CVE-2017-9354: RGMP dissector crash (boo#1042307)
- CVE-2017-9353: IPv6 dissector crash (boo#1042306)
</description>
  <summary>Security update for wireshark</summary>
</patchinfo>