File _patchinfo of Package patchinfo.7214
<patchinfo incident="7214"> <issue id="1056251" tracker="bnc">VUL-1: wireshark: IrCOMM dissector buffer overrun</issue> <issue id="1056249" tracker="bnc">VUL-1: wireshark: Profinet I/O buffer overrun</issue> <issue id="1056248" tracker="bnc">VUL-1: wireshark: MSDP dissector infinite loop</issue> <issue id="2017-13766" tracker="cve" /> <issue id="2017-13767" tracker="cve" /> <issue id="2017-13765" tracker="cve" /> <category>security</category> <rating>moderate</rating> <packager>AndreasStieger</packager> <description>This update for wireshark to version 2.2.9 fixes the following issues: Minor vulnerabilities that could be used to trigger dissector crashes, infinite loops, or cause excessive use of memory resources by making Wireshark read specially crafted packages from the network or a capture file: * CVE-2017-13767: MSDP dissector infinite loop (boo#1056248) * CVE-2017-13766: Profinet I/O buffer overrun (boo#1056249) * CVE-2017-13765: IrCOMM dissector buffer overrun (boo#1056251) * Further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-2.2.9.html </description> <summary>Security update for wireshark</summary> </patchinfo>