ELSA-2017-0631

ELSA-2017-0631 - wireshark security and bug fix update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2017-03-27

Description

[1.8.10-25.0.1]
- Fix ocfs2 dissector (John Haxby) [orabug 21505640]
- Add oracle-ocfs2-network.patch to allow disassembly of OCFS2 interconnect

[1.8.10-25]
- rebuilt

[1.8.10-24]
- Related: #1245887
- segfault with CVE-2013-4075 capture
- valgrind error with CVE-2015-3812 capture

[1.8.10-23]
- Resolves: #1238166 - tshark -F option fails to create capture files in .pcap
format

[1.8.10-22]
- Resolves: #1240675 - No dissection of the TLS Certificate Verify message

[1.8.10-21]
- Resolves: #1222902 - Encrypt-then-MAC TLS extension unrecognised
- Patch also include master secret extension decoding in TLS

[1.8.10-20]
- Resolves: #1222895 - Problems decoding TLS Server Key Exchange messages

[1.8.10-19]
- Security patches
- Resolves: CVE-2013-4075

[1.8.10-18]
- Security patches
- Resolves: CVE-2015-3811
CVE-2015-3812
CVE-2015-3813

Related CVEs

CVE-2015-3811

CVE-2015-3812

CVE-2015-3813

CVE-2013-4075

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (i386)	wireshark-1.8.10-25.0.1.el6.src.rpm	5f4a0de9661bab76d1938f5b03824e47	-
	wireshark-1.8.10-25.0.1.el6.i686.rpm	ad341bdd85c8b259aa6503c64f4df243	-
	wireshark-devel-1.8.10-25.0.1.el6.i686.rpm	1f5957210b449cfa3416b02fc735596a	-
	wireshark-gnome-1.8.10-25.0.1.el6.i686.rpm	9f498e5c6da53c84959fb893f0e8df2d	-
Oracle Linux 6 (x86_64)	wireshark-1.8.10-25.0.1.el6.src.rpm	5f4a0de9661bab76d1938f5b03824e47	-
	wireshark-1.8.10-25.0.1.el6.i686.rpm	ad341bdd85c8b259aa6503c64f4df243	-
	wireshark-1.8.10-25.0.1.el6.x86_64.rpm	2bf2d4c12c97c6feb6f2b9df3ba05e16	-
	wireshark-devel-1.8.10-25.0.1.el6.i686.rpm	1f5957210b449cfa3416b02fc735596a	-
	wireshark-devel-1.8.10-25.0.1.el6.x86_64.rpm	663fd38c4ebb9b43a831b7e44c0d3a9c	-
	wireshark-gnome-1.8.10-25.0.1.el6.x86_64.rpm	39db6baabe2cb7ac5b28a1c4227c7162	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team