File _patchinfo of Package patchinfo
<patchinfo>
<issue id="867485" tracker="bnc">VUL-0: Wireshark 1.10.6 and 1.8.13 maintenance releases fix several vulnerabilities</issue>
<issue id="CVE-2014-2281" tracker="cve" />
<issue id="CVE-2014-2282" tracker="cve" />
<issue id="CVE-2014-2283" tracker="cve" />
<issue id="CVE-2014-2299" tracker="cve" />
<category>security</category>
<rating>moderate</rating>
<packager>AndreasStieger</packager>
<description>
Wireshark was updated to version 1.8.13 on openSUSE 12.3
and 1.10.6 on openSUSE 13.1 to fix security issues and bugs.
Wireshark update to 1.8.13 [bnc#867485]
+ vulnerabilities fixed:
* The NFS dissector could crash
wnpa-sec-2014-01 CVE-2014-2281
* The RLC dissector could crash
wnpa-sec-2014-03 CVE-2014-2283
* The MPEG file parser could overflow a buffer
wnpa-sec-2014-04 CVE-2014-2299
+ Further bug fixes and updated protocol support as listed in:
https://www.wireshark.org/docs/relnotes/wireshark-1.8.13.html
Wireshark update to 1.10.6 [bnc#867485]
+ vulnerabilities fixed:
* The NFS dissector could crash
wnpa-sec-2014-01 CVE-2014-2281
* The M3UA dissector could crash
wnpa-sec-2014-02 CVE-2014-2282
* The RLC dissector could crash
wnpa-sec-2014-03 CVE-2014-2283
* The MPEG file parser could overflow a buffer
wnpa-sec-2014-04 CVE-2014-2299
+ Further bug fixes and updated protocol support as listed in:
https://www.wireshark.org/docs/relnotes/wireshark-1.10.6.html
</description>
<summary>wireshark: security update to 1.8.13/1.10.6</summary>
</patchinfo>