Уведомление безопасности SUSE-SU-2017:2555-1

Критичная (7.8)

(AV:N/AC:L/Au:N/C:N/I:N/A:C)

SUSE

libwireshark8 (any) libwireshark8-debuginfo (any) libwiretap6 (any) libwiretap6-debuginfo (any) libwscodecs1 (any) libwscodecs1-debuginfo (any) libwsutil7 (any) libwsutil7-debuginfo (any) wireshark (any) wireshark-debuginfo (any) wireshark-debugsource (any) wireshark-devel (any) wireshark-gtk (any) wireshark-gtk-debuginfo (any)

Уведомление безопасности об уязвимостях SUSE Linux Enterprise Software Development Kit 12-SP3, SUSE Linux Enterprise Software Development Kit 12-SP2, SUSE Linux Enterprise Desktop 12-SP2, SUSE Linux Enterprise Desktop 12-SP3, SUSE Linux Enterprise Server 12-SP2, SUSE Linux Enterprise Server 12-SP3, SUSE Linux Enterprise Server for Raspberry Pi 12-SP2

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
SUSE Linux Enterprise Software Development Kit 12-SP3:
aarch64, ppc64le, s390x, x86_64:
wireshark-debuginfo - 2.2.9-48.9.2
wireshark-devel - 2.2.9-48.9.2
wireshark-debugsource - 2.2.9-48.9.2
SUSE Linux Enterprise Software Development Kit 12-SP2:
aarch64, ppc64le, s390x, x86_64:
wireshark-debuginfo - 2.2.9-48.9.2
wireshark-devel - 2.2.9-48.9.2
wireshark-debugsource - 2.2.9-48.9.2
SUSE Linux Enterprise Desktop 12-SP2:
x86_64:
libwireshark8-debuginfo - 2.2.9-48.9.2
wireshark - 2.2.9-48.9.2
libwireshark8 - 2.2.9-48.9.2
libwsutil7 - 2.2.9-48.9.2
libwiretap6 - 2.2.9-48.9.2
libwscodecs1 - 2.2.9-48.9.2
wireshark-gtk - 2.2.9-48.9.2
wireshark-gtk-debuginfo - 2.2.9-48.9.2
wireshark-debuginfo - 2.2.9-48.9.2
wireshark-debugsource - 2.2.9-48.9.2
libwiretap6-debuginfo - 2.2.9-48.9.2
libwscodecs1-debuginfo - 2.2.9-48.9.2
libwsutil7-debuginfo - 2.2.9-48.9.2
SUSE Linux Enterprise Desktop 12-SP3:
x86_64:
libwireshark8-debuginfo - 2.2.9-48.9.2
wireshark - 2.2.9-48.9.2
libwireshark8 - 2.2.9-48.9.2
libwsutil7 - 2.2.9-48.9.2
libwiretap6 - 2.2.9-48.9.2
libwscodecs1 - 2.2.9-48.9.2
wireshark-gtk - 2.2.9-48.9.2
wireshark-gtk-debuginfo - 2.2.9-48.9.2
wireshark-debuginfo - 2.2.9-48.9.2
wireshark-debugsource - 2.2.9-48.9.2
libwiretap6-debuginfo - 2.2.9-48.9.2
libwscodecs1-debuginfo - 2.2.9-48.9.2
libwsutil7-debuginfo - 2.2.9-48.9.2
SUSE Linux Enterprise Server 12-SP2:
aarch64, ppc64le, s390x, x86_64:
libwireshark8-debuginfo - 2.2.9-48.9.2
wireshark - 2.2.9-48.9.2
libwireshark8 - 2.2.9-48.9.2
libwsutil7 - 2.2.9-48.9.2
libwiretap6 - 2.2.9-48.9.2
libwscodecs1 - 2.2.9-48.9.2
wireshark-gtk - 2.2.9-48.9.2
wireshark-gtk-debuginfo - 2.2.9-48.9.2
wireshark-debuginfo - 2.2.9-48.9.2
wireshark-debugsource - 2.2.9-48.9.2
libwiretap6-debuginfo - 2.2.9-48.9.2
libwscodecs1-debuginfo - 2.2.9-48.9.2
libwsutil7-debuginfo - 2.2.9-48.9.2
SUSE Linux Enterprise Server 12-SP3:
aarch64, ppc64le, s390x, x86_64:
libwireshark8-debuginfo - 2.2.9-48.9.2
wireshark - 2.2.9-48.9.2
libwireshark8 - 2.2.9-48.9.2
libwsutil7 - 2.2.9-48.9.2
libwiretap6 - 2.2.9-48.9.2
libwscodecs1 - 2.2.9-48.9.2
wireshark-gtk - 2.2.9-48.9.2
wireshark-gtk-debuginfo - 2.2.9-48.9.2
wireshark-debuginfo - 2.2.9-48.9.2
wireshark-debugsource - 2.2.9-48.9.2
libwiretap6-debuginfo - 2.2.9-48.9.2
libwscodecs1-debuginfo - 2.2.9-48.9.2
libwsutil7-debuginfo - 2.2.9-48.9.2
SUSE Linux Enterprise Server for Raspberry Pi 12-SP2:
aarch64:
libwireshark8-debuginfo - 2.2.9-48.9.2
wireshark - 2.2.9-48.9.2
libwireshark8 - 2.2.9-48.9.2
libwsutil7 - 2.2.9-48.9.2
libwiretap6 - 2.2.9-48.9.2
libwscodecs1 - 2.2.9-48.9.2
wireshark-gtk - 2.2.9-48.9.2
wireshark-gtk-debuginfo - 2.2.9-48.9.2
wireshark-debuginfo - 2.2.9-48.9.2
wireshark-debugsource - 2.2.9-48.9.2
libwiretap6-debuginfo - 2.2.9-48.9.2
libwscodecs1-debuginfo - 2.2.9-48.9.2
libwsutil7-debuginfo - 2.2.9-48.9.2

http://lists.suse.com/pipermail/sle-security-updates/2017-September/003258.html
https://bugzilla.suse.com/1044417
https://bugzilla.suse.com/1045341
https://bugzilla.suse.com/1056248
https://bugzilla.suse.com/1056249
https://bugzilla.suse.com/1056251

Источник: CVE
Наименование: CVE-2017-9766
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9766

Источник: CVE
Наименование: CVE-2017-13767
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13767

Источник: CVE
Наименование: CVE-2017-13766
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13766

Источник: CVE
Наименование: CVE-2017-9617
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9617

Источник: CVE
Наименование: CVE-2017-13765
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13765