Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Stay Secure with the Latest Linux Advisories

Mageia Large Esm H800
Mageia

Mageia 10 9 libidn Critical Out-Of-Bounds Read CVE-2026-57053

Calendar White Jul 18, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE Tumbleweed oras Moderate Threat Update 2026-11297-1 CVE-2026-50163

Calendar White Jul 18, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Nginx New Moderate Update Advisory Released 2026-11295-1

Calendar White Jul 18, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE gomuks Moderate Security Issue Fix 2026-11290-1

Calendar White Jul 18, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Tumbleweed Blender Moderate Security Issue Advisory 2026-11288-1

Calendar White Jul 18, 2026
moderate
Debianlts Large Esm H900
Debian LTS

Debian LTS Linux Critical Privilege Escalation and DoS Update DLA-4688-1

Calendar White Jul 18, 2026
Important
Opensuse Large Esm H800
openSUSE

openSUSE 16.0 cyrus-imapd Moderate Threats Update 2026-21368-1

Calendar White Jul 18, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Leap 16.0 Lux Important Denial of Service Issues 2026-21367-1

Calendar White Jul 18, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE Leap 16.0 Grafana Important Request Limit XSS Fix 2026-21366-1

Calendar White Jul 18, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Is continuous patching actually viable?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/156-is-continuous-patching-actually-viable?task=poll.vote&format=json
156
radio
0
[{"id":503,"title":"Delayed updates invite catastrophic breaches.","votes":1,"type":"x","order":1,"pct":50,"resources":[]},{"id":504,"title":"Automated fixes break production environments.","votes":1,"type":"x","order":2,"pct":50,"resources":[]},{"id":505,"title":"Manual approvals cannot keep pace.","votes":0,"type":"x","order":3,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 54 articles for you...
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorymoderateupdate

Fedora 41: FEDORA-2025-08e73d463e moderate: Wireshark Recursion Issue

New version 4.4.4. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-08e73d463e 2025-03-01 01:22:54.667702+00:00 -------------------------------------------------------------------------------- Name : wireshark Product : Fedora 41 Version : 4.4.4 Release : 1.fc41 URL : http://www.wireshark.org/ Summary : Network traffic analyzer Description : Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless (WiFi or Bluetooth) networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful features including a rich display filter language and the ability to reassemble multiple protocol packets in order to, for example, view a complete TCP stream, save the contents of a file which was transferred over HTTP or CIFS, or play back an RTP audio stream. -------------------------------------------------------------------------------- Update Information: New version 4.4.4 -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 20 2025 Michal Ruprich - 1:4.4.4-1 - New version 4.4.4 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2346670 - wireshark-4.4.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2346670 [ 2 ] Bug #2346742 - CVE-2025-1492 wireshark: Uncontrolled Recursion in Wireshark [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2346742 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-08e73d463e' at the command line. For more information, refer to the dnf documentation availableat http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . Fedora 41 enhances wireshark with update 4.4.4, focusing on a recursion vulnerability. Explore the specifics of this update and its potential impact.. wireshark update,Fedora advisories,network analysis,security updates. . LinuxSecurity.com Team

Calendar%202 Mar 01, 2025 Fedora
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryupdatecritical

Fedora 40: 2024-105eb3026f Critical: Wireshark NTLMSSP Crash

New version 4.2.7, fix for CVE-2024-8250. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-105eb3026f 2024-09-11 01:24:10.952211 -------------------------------------------------------------------------------- Name : wireshark Product : Fedora 40 Version : 4.2.7 Release : 1.fc40 URL : http://www.wireshark.org/ Summary : Network traffic analyzer Description : Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless (WiFi or Bluetooth) networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful features including a rich display filter language and the ability to reassemble multiple protocol packets in order to, for example, view a complete TCP stream, save the contents of a file which was transferred over HTTP or CIFS, or play back an RTP audio stream. -------------------------------------------------------------------------------- Update Information: New version 4.2.7, fix for CVE-2024-8250 -------------------------------------------------------------------------------- ChangeLog: * Thu Aug 29 2024 Michal Ruprich - 1:4.2.7-1 - New version 4.2.7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2298524 - wireshark-4.4.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2298524 [ 2 ] Bug #2308432 - CVE-2024-8250 wireshark: NTLMSSP dissector crash [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2308432 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-105eb3026f' at the command line. For more information, refer to the dnf documentation availableat http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . The update for Wireshark version 4.2.7 in Fedora 40 addresses the CVE-2024-8250 security flaw successfully.. Wireshark Security Update,Fedora 40 Advisory,Network Security Fix. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Sep 11, 2024 •Critical Fedora
Banner 4 1028x280 1708121825 1771600306
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorybuffer overflowsoftware update

Fedora 38: FEDORA-2024-fdc7dfb959 Moderate: Wireshark Memory Leak

New version 4.0.12. Includes fixes for CVE-2023-5371, CVE-2023-6174, CVE-2023-6175, CVE-2024-0208.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-fdc7dfb959 2024-02-11 05:38:48.506237 -------------------------------------------------------------------------------- Name : wireshark Product : Fedora 38 Version : 4.0.12 Release : 1.fc38 URL : https://www.wireshark.org/ Summary : Network traffic analyzer Description : Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless (WiFi or Bluetooth) networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful features including a rich display filter language and the ability to reassemble multiple protocol packets in order to, for example, view a complete TCP stream, save the contents of a file which was transferred over HTTP or CIFS, or play back an RTP audio stream. -------------------------------------------------------------------------------- Update Information: New version 4.0.12. Includes fixes for CVE-2023-5371, CVE-2023-6174, CVE-2023-6175, CVE-2024-0208. -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 1 2024 Michal Ruprich - 1:4.0.12-1 - New version 4.0.12 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2250153 - CVE-2023-5371 wireshark: RTPS dissector memory leak [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2250153 [ 2 ] Bug #2250154 - CVE-2023-6174 wireshark: SSH dissector invalid read of memory blocks [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2250154 [ 3 ] Bug #2250155 - CVE-2023-6175 wireshark: NetScreen File Parsing Heap-based Buffer Overflow [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2250155 [ 4 ] Bug #2256660 - CVE-2024-0208 wireshark: GVCP dissector crash via packet injection or crafted capture file [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2256660 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-fdc7dfb959' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . Wireshark 4.0.12 introduces significant patches addressing several security flaws that impact network monitoring applications.. Wireshark Update, Fedora 38 Security, Network Traffic Analysis. . LinuxSecurity.com Team

Calendar%202 Feb 11, 2024 Fedora
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorycriticalsoftware update

SUSE: 2024:0011-1 Critical Wireshark Software Update Available Now

* bsc#1218504 * bsc#1218505 Cross-References: * CVE-2024-0208 . # Security update for wireshark Announcement ID: SUSE-SU-2024:0058-1 Rating: important References: * bsc#1218504 * bsc#1218505 Cross-References: * CVE-2024-0208 * CVE-2024-0209 CVSS scores: * CVE-2024-0208 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-0209 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP5 * openSUSE Leap 15.5 * SUSE CaaS Platform 4.0 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE LinuxEnterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for wireshark fixes the following issues: * Updated to Wireshark 3.6.20: * CVE-2024-0208: Fixed a crash in the GVCP dissector (bsc#1218504). * CVE-2024-0209: Fixed a crash in the IEEE 1609.2 dissector (bsc#1218505). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-58=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-58=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-58=1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2024-58=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-58=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2024-58=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-58=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-58=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-58=1 * SUSE Linux Enterprise Real Time 15 SP4 zypper in -t patch SUSE-SLE-Product-RT-15-SP4-2024-58=1 * SUSE Linux EnterpriseDesktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-58=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2024-58=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-58=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-58=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-58=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2024-58=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-58=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-58=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-58=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-58=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-58=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-58=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-58=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libwiretap12-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 *wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwireshark15-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libwiretap12-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (aarch64 x86_64) * libwiretap12-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwireshark15-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * libwiretap12-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 *wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwireshark15-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * libwiretap12-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwireshark15-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libwiretap12-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwireshark15-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libwiretap12-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 *libwsutil13-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwireshark15-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libwiretap12-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwireshark15-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * SUSE Linux Enterprise Real Time 15 SP4 (x86_64) * libwiretap12-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwireshark15-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libwiretap12-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 *wireshark-ui-qt-3.6.20-150000.3.109.1 * libwireshark15-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64) * libwiretap12-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwireshark15-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * libwiretap12-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwireshark15-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * libwiretap12-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwireshark15-3.6.20-150000.3.109.1 *wireshark-devel-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libwiretap12-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwireshark15-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * libwiretap12-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwireshark15-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * libwiretap12-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwireshark15-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3(ppc64le x86_64) * libwiretap12-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwireshark15-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libwiretap12-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwireshark15-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * SUSE Manager Proxy 4.3 (x86_64) * libwiretap12-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * libwiretap12-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 *libwireshark15-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * libwiretap12-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libwiretap12-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwireshark15-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 * SUSE CaaS Platform 4.0 (x86_64) * libwiretap12-3.6.20-150000.3.109.1 * libwsutil13-3.6.20-150000.3.109.1 * wireshark-debuginfo-3.6.20-150000.3.109.1 * wireshark-debugsource-3.6.20-150000.3.109.1 * wireshark-ui-qt-debuginfo-3.6.20-150000.3.109.1 * libwsutil13-debuginfo-3.6.20-150000.3.109.1 * libwiretap12-debuginfo-3.6.20-150000.3.109.1 * libwireshark15-debuginfo-3.6.20-150000.3.109.1 * wireshark-ui-qt-3.6.20-150000.3.109.1 * libwireshark15-3.6.20-150000.3.109.1 * wireshark-devel-3.6.20-150000.3.109.1 * wireshark-3.6.20-150000.3.109.1 ## References: * https://www.suse.com/security/cve/CVE-2024-0208.html * https://www.suse.com/security/cve/CVE-2024-0209.html * https://bugzilla.suse.com/show_bug.cgi?id=1218504 * https://bugzilla.suse.com/show_bug.cgi?id=1218505 . Critical Wireshark update for SUSE addresses serious crashes andvulnerabilities. Immediate action recommended for security.. Wireshark Security, SUSE Patch, Network Analysis Update, Critical Software Fix, Important Security Advisory. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jan 08, 2024 •Important SuSE
Banner 4 1028x280 1708121825 1771600306
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorymoderate severitycrash fix

openSUSE: 2023:4938-1 Moderate: Wireshark File Parser Crash

This update for wireshark fixes the following issues: Update to 3.6.19:. # Security update for wireshark Announcement ID: SUSE-SU-2023:4938-1 Rating: moderate References: * bsc#1217272 Cross-References: * CVE-2023-6175 CVSS scores: * CVE-2023-6175 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP4 * Desktop Applications Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for wireshark fixes the following issues: Update to 3.6.19: * CVE-2023-6175: NetScreen file parser crash (bsc#1217272). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4938=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4938=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4938=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4938=1 * Desktop Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-4938=1 *Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2023-4938=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * wireshark-debugsource-3.6.19-150000.3.106.1 * libwsutil13-debuginfo-3.6.19-150000.3.106.1 * libwsutil13-3.6.19-150000.3.106.1 * libwiretap12-3.6.19-150000.3.106.1 * libwiretap12-debuginfo-3.6.19-150000.3.106.1 * libwireshark15-3.6.19-150000.3.106.1 * wireshark-ui-qt-debuginfo-3.6.19-150000.3.106.1 * wireshark-3.6.19-150000.3.106.1 * wireshark-debuginfo-3.6.19-150000.3.106.1 * wireshark-devel-3.6.19-150000.3.106.1 * libwireshark15-debuginfo-3.6.19-150000.3.106.1 * wireshark-ui-qt-3.6.19-150000.3.106.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * wireshark-debugsource-3.6.19-150000.3.106.1 * libwsutil13-debuginfo-3.6.19-150000.3.106.1 * libwsutil13-3.6.19-150000.3.106.1 * libwiretap12-3.6.19-150000.3.106.1 * libwiretap12-debuginfo-3.6.19-150000.3.106.1 * libwireshark15-3.6.19-150000.3.106.1 * wireshark-ui-qt-debuginfo-3.6.19-150000.3.106.1 * wireshark-3.6.19-150000.3.106.1 * wireshark-debuginfo-3.6.19-150000.3.106.1 * wireshark-devel-3.6.19-150000.3.106.1 * libwireshark15-debuginfo-3.6.19-150000.3.106.1 * wireshark-ui-qt-3.6.19-150000.3.106.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * wireshark-debugsource-3.6.19-150000.3.106.1 * libwsutil13-debuginfo-3.6.19-150000.3.106.1 * libwsutil13-3.6.19-150000.3.106.1 * libwiretap12-3.6.19-150000.3.106.1 * libwiretap12-debuginfo-3.6.19-150000.3.106.1 * libwireshark15-3.6.19-150000.3.106.1 * wireshark-3.6.19-150000.3.106.1 * wireshark-debuginfo-3.6.19-150000.3.106.1 * libwireshark15-debuginfo-3.6.19-150000.3.106.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * wireshark-debugsource-3.6.19-150000.3.106.1 * libwsutil13-debuginfo-3.6.19-150000.3.106.1 * libwsutil13-3.6.19-150000.3.106.1 *libwiretap12-3.6.19-150000.3.106.1 * libwiretap12-debuginfo-3.6.19-150000.3.106.1 * libwireshark15-3.6.19-150000.3.106.1 * wireshark-3.6.19-150000.3.106.1 * wireshark-debuginfo-3.6.19-150000.3.106.1 * libwireshark15-debuginfo-3.6.19-150000.3.106.1 * Desktop Applications Module 15-SP4 (aarch64 ppc64le s390x x86_64) * wireshark-debugsource-3.6.19-150000.3.106.1 * wireshark-ui-qt-debuginfo-3.6.19-150000.3.106.1 * wireshark-debuginfo-3.6.19-150000.3.106.1 * wireshark-devel-3.6.19-150000.3.106.1 * wireshark-ui-qt-3.6.19-150000.3.106.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * wireshark-debugsource-3.6.19-150000.3.106.1 * wireshark-ui-qt-debuginfo-3.6.19-150000.3.106.1 * wireshark-debuginfo-3.6.19-150000.3.106.1 * wireshark-devel-3.6.19-150000.3.106.1 * wireshark-ui-qt-3.6.19-150000.3.106.1 ## References: * https://www.suse.com/security/cve/CVE-2023-6175.html * https://bugzilla.suse.com/show_bug.cgi?id=1217272 . A recent security bulletin for Wireshark outlines an update that resolves a crash vulnerability of moderate impact affecting multiple releases of openSUSE.. wireshark security update, openSUSE patch, network protocol analyzer, security mitigation strategies. . LinuxSecurity.com Team

Calendar%202 Dec 20, 2023 OpenSUSE
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorysoftware updateFedora

Fedora 39: FEDORA-2023-b57a9be8a8 Moderate: Wireshark DoS Issues Fixed

New version 4.0.8. Includes fixes for CVE-2023-2906, CVE-2023-4511, CVE-2023-4512, CVE-2023-4513.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-b57a9be8a8 2023-09-15 18:36:13.240058 -------------------------------------------------------------------------------- Name : wireshark Product : Fedora 39 Version : 4.0.8 Release : 2.fc39 URL : https://www.wireshark.org/ Summary : Network traffic analyzer Description : Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless (WiFi or Bluetooth) networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful features including a rich display filter language and the ability to reassemble multiple protocol packets in order to, for example, view a complete TCP stream, save the contents of a file which was transferred over HTTP or CIFS, or play back an RTP audio stream. -------------------------------------------------------------------------------- Update Information: New version 4.0.8. Includes fixes for CVE-2023-2906, CVE-2023-4511, CVE-2023-4512, CVE-2023-4513. -------------------------------------------------------------------------------- ChangeLog: * Thu Aug 31 2023 Michal Ruprich - 1:4.0.8-2 - Resolves: #2236246 - wireshark crash in managed interfaces * Tue Aug 29 2023 Michal Ruprich - 1:4.0.8-1 - New version 4.0.8 - Resolves: #2235577 - possible Denial of Service via crafted package -------------------------------------------------------------------------------- References: [ 1 ] Bug #2233996 - wireshark-4.1.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2233996 [ 2 ] Bug #2235577 - CVE-2023-2906 wireshark: possible Denial of Service via crafted package [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2235577 [ 3 ]Bug #2236004 - CVE-2023-4511 wireshark: DoS (infinite loop) via packet injection or crafted capture file [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2236004 [ 4 ] Bug #2236005 - CVE-2023-4512 wireshark: DoS (crash) via packet injection or crafted capture file [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2236005 [ 5 ] Bug #2236007 - CVE-2023-4513 wireshark: DoS (memory leak) via packet injection or crafted capture file [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2236007 [ 6 ] Bug #2236246 - Wireshark crashes when confirming which interfaces to hide within the "Managed Interfaces" window of the "Capture Options" section https://bugzilla.redhat.com/show_bug.cgi?id=2236246 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-b57a9be8a8' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . Recent update to Wireshark version 4.0.8 addresses significant vulnerabilities impacting network monitoring. Get the newest patches for improved safety.. Wireshark Update,FedoraSecurity,Network Analyzer,DDoS Prevention,Software Vulnerability Fixes. . LinuxSecurity.com Team

Calendar%202 Sep 15, 2023 Fedora
Banner 4 1028x280 1708121825 1771600306
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryFedoraDoS

Fedora 38: 2023-1ba4c8d1a3 Critical: OpenSSH Security Updates

New version 4.0.8. Includes fixes for CVE-2023-2906, CVE-2023-4511, CVE-2023-4512, CVE-2023-4513.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-920a3ab4ee 2023-09-09 00:39:21.833976 -------------------------------------------------------------------------------- Name : wireshark Product : Fedora 37 Version : 4.0.8 Release : 2.fc37 URL : https://www.wireshark.org/ Summary : Network traffic analyzer Description : Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless (WiFi or Bluetooth) networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful features including a rich display filter language and the ability to reassemble multiple protocol packets in order to, for example, view a complete TCP stream, save the contents of a file which was transferred over HTTP or CIFS, or play back an RTP audio stream. -------------------------------------------------------------------------------- Update Information: New version 4.0.8. Includes fixes for CVE-2023-2906, CVE-2023-4511, CVE-2023-4512, CVE-2023-4513. -------------------------------------------------------------------------------- ChangeLog: * Thu Aug 31 2023 Michal Ruprich - 1:4.0.8-2 - Resolves: #2236246 - wireshark crash in managed interfaces * Tue Aug 29 2023 Michal Ruprich - 1:4.0.8-1 - New version 4.0.8 - Resolves: #2235577 - possible Denial of Service via crafted package -------------------------------------------------------------------------------- References: [ 1 ] Bug #2233996 - wireshark-4.1.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2233996 [ 2 ] Bug #2235577 - CVE-2023-2906 wireshark: possible Denial of Service via crafted package [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2235577 [ 3 ]Bug #2236004 - CVE-2023-4511 wireshark: DoS (infinite loop) via packet injection or crafted capture file [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2236004 [ 4 ] Bug #2236005 - CVE-2023-4512 wireshark: DoS (crash) via packet injection or crafted capture file [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2236005 [ 5 ] Bug #2236007 - CVE-2023-4513 wireshark: DoS (memory leak) via packet injection or crafted capture file [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2236007 [ 6 ] Bug #2236246 - Wireshark crashes when confirming which interfaces to hide within the "Managed Interfaces" window of the "Capture Options" section https://bugzilla.redhat.com/show_bug.cgi?id=2236246 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-920a3ab4ee' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . Explore the latest Fedora 37's Wireshark version 4.0.8, improving safety and elevating network examination capabilities.. Wireshark Update,Fedora Security Advisory,Network TrafficAnalyzer,DoS Fix. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Sep 09, 2023 •Critical Fedora
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisoryupdatecritical

Debian 10 Buster: DLA-3443-1 Critical: Wireshark Crash Issues

Several vulnerabilities were fixed in the network traffic analyzer Wireshark. CVE-2023-2856 . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3443-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Adrian Bunk June 03, 2023 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : wireshark Version : 2.6.20-0+deb10u7 CVE ID : CVE-2023-2856 CVE-2023-2858 CVE-2023-2879 CVE-2023-2952 Several vulnerabilities were fixed in the network traffic analyzer Wireshark. CVE-2023-2856 VMS TCPIPtrace file parser crash CVE-2023-2858 NetScaler file parser crash CVE-2023-2879 GDSDB infinite loop CVE-2023-2952 XRA dissector infinite loop For Debian 10 buster, these problems have been fixed in version 2.6.20-0+deb10u7. We recommend that you upgrade your wireshark packages. For the detailed security status of wireshark please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/wireshark Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Essential patches for Wireshark in Debian LTS released to tackle several crash vulnerabilities. Updates advised for improved system reliability.. Wireshark Network Analyzer, Debian LTS Security, Traffic Analysis Updates, Threat Mitigation Techniques, Software Vulnerabilities Update. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jun 03, 2023 •Critical Debian LTS
Banner 4 1028x280 1708121825 1771600306
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Is continuous patching actually viable?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/156-is-continuous-patching-actually-viable?task=poll.vote&format=json
156
radio
0
[{"id":503,"title":"Delayed updates invite catastrophic breaches.","votes":1,"type":"x","order":1,"pct":50,"resources":[]},{"id":504,"title":"Automated fixes break production environments.","votes":1,"type":"x","order":2,"pct":50,"resources":[]},{"id":505,"title":"Manual approvals cannot keep pace.","votes":0,"type":"x","order":3,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics