Branch sisyphus update bulletin.

Package wireshark updated to version 2.2.4-alt1.S1 for branch sisyphus in task 177607.

Published: 2017-01-26
Modified: 2024-11-21

CVE-2017-5596

In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the ASTERIX dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-asterix.c by changing a data type to avoid an integer overflow.

Severity: HIGH (7.5) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

Published: 2017-01-26
Modified: 2024-11-21

CVE-2017-5597

In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the DHCPv6 dissector could go into a large loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dhcpv6.c by changing a data type to avoid an integer overflow.

Severity: HIGH (7.5) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

Package gcc6 updated to version 6.3.1-alt2 for branch sisyphus in task 177523.

gnatmake: не проходит test configure в GtkAda.

Version: 2.1.0

Branch sisyphus update on 2017-02-04

ALT-BU-2017-2917-1

ALT-PU-2017-1132-1

Closed vulnerabilities

CVE-2017-5596

CVE-2017-5597

ALT-PU-2017-1134-1

Closed bugs

Bug #33003