shield Security update for wireshark

SUSE-SLE-SDK-12-SP2-2018-134

This update for wireshark to version 2.2.12 fixes the following issues: - CVE-2018-5334: IxVeriWave file could crash (bsc#1075737) - CVE-2018-5335: WCP dissector could crash (bsc#1075738) - CVE-2018-5336: Multiple dissector crashes (bsc#1075739) - CVE-2017-17935: Incorrect handling of "\n" in file_read_line function could have lead to denial of service (bsc#1074171) This release no longer enables the Linux kernel BPF JIT compiler via the net.core.bpf_jit_enable sysctl, as this would make systems more vulnerable to Spectre variant 1 CVE-2017-5753 - (bsc#1075748) Further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-2.2.12.html

• Release Date
  Jan 24 2018
• References
  Bugzilla: 1075738, 1075739, 1074171, 1075748, 1075737
  CVEs: CVE-2018-5336, CVE-2017-17935, CVE-2018-5334, CVE-2018-5335
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.2 aarch64

• Packages
  wireshark
  A Network Traffic Analyser

  2.2.12-48.18.1

  lock src

  wireshark-devel
  A Network Traffic Analyser

  2.2.12-48.18.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 ppc64le

• Packages
  wireshark
  A Network Traffic Analyser

  2.2.12-48.18.1

  lock src

  wireshark-devel
  A Network Traffic Analyser

  2.2.12-48.18.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 s390x

• Packages
  wireshark
  A Network Traffic Analyser

  2.2.12-48.18.1

  lock src

  wireshark-devel
  A Network Traffic Analyser

  2.2.12-48.18.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 x86_64

• Packages
  wireshark
  A Network Traffic Analyser

  2.2.12-48.18.1

  lock src

  wireshark-devel
  A Network Traffic Analyser

  2.2.12-48.18.1

  lock rpm