[Git][security-tracker-team/security-tracker][master] dla: add wireshark

Sylvain Beucler beuc at debian.org
Tue Apr 9 14:41:46 BST 2019



Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f1a57a40 by Sylvain Beucler at 2019-04-09T13:41:16Z
dla: add wireshark

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -279,6 +279,7 @@ CVE-2019-10903 (In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCE
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2019-18.html
 CVE-2019-10902 (In Wireshark 3.0.0, the TSDNS dissector could crash. This was addresse ...)
 	- wireshark <unfixed>
+	[jessie] - wireshark <not-affected> (vulnerable code is not present)
 	NOTE: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15619
 	NOTE: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=95571f17d5e2de39735e62e5251583f930c06d51
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2019-16.html
@@ -289,6 +290,7 @@ CVE-2019-10901 (In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the LDS
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2019-17.html
 CVE-2019-10900 (In Wireshark 3.0.0, the Rbm dissector could go into an infinite loop.  ...)
 	- wireshark <undetermined>
+	[jessie] - wireshark <not-affected> (vulnerable code is not present)
 	NOTE: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15612
 	NOTE: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=26eee01f57f0a86fb375892c7937eac24ede4610
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2019-13.html
@@ -300,18 +302,21 @@ CVE-2019-10899 (In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the SRV
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2019-10.html
 CVE-2019-10898 (In Wireshark 3.0.0, the GSUP dissector could go into an infinite loop. ...)
 	- wireshark <undetermined>
+	[jessie] - wireshark <not-affected> (vulnerable code is not present)
 	NOTE: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15585
 	NOTE: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f80b7d1b279fb6c13f640019a1bbc42b18bf7469
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2019-12.html
 	TODO: check, possibly only 3.0.0
 CVE-2019-10897 (In Wireshark 3.0.0, the IEEE 802.11 dissector could go into an infinit ...)
 	- wireshark <undetermined>
+	[jessie] - wireshark <not-affected> (vulnerable code is not present)
 	NOTE: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15553
 	NOTE: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=00d5e9e9fb377f52ab7696f25c1dbc011ef0244d
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2019-11.html
 	TODO: check, possibly only 3.0.0
 CVE-2019-10896 (In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF disse ...)
 	- wireshark <unfixed>
+	[jessie] - wireshark <not-affected> (vulnerable code is not present)
 	NOTE: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15617
 	NOTE: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=441b6d9071d6341e58dfe10719375489c5b8e3f0
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2019-15.html


=====================================
data/dla-needed.txt
=====================================
@@ -113,6 +113,8 @@ systemd
 --
 wget (Thorsten Alteholz)
 --
+wireshark
+--
 wordpress
   NOTE: 20190401: remaining one issue (CVE-2019-8943). Waiting for upstream patch (abhijith)
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f1a57a4041fce1187f2b168146114f6703287146

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f1a57a4041fce1187f2b168146114f6703287146
You're receiving this email because of your account on salsa.debian.org.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190409/b6bf2d4f/attachment.html>


More information about the debian-security-tracker-commits mailing list