[USN-4133-1] Wireshark vulnerabilities

[Mike Salvatore]

==========================================================================
Ubuntu Security Notice USN-4133-1
September 16, 2019

Wireshark vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 19.04
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS

Summary:

Wireshark could be made to crash if it received specially crafted network
traffic or input files.

Software Description:
- wireshark: network traffic analyzer

Details:

It was discovered that Wireshark improperly handled certain input. A remote or
local attacker could cause Wireshark to crash by injecting malformed packets
onto the wire or convincing someone to read a malformed packet trace file.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
  libwireshark-data               2.6.10-1~ubuntu19.04.0
  libwireshark11                  2.6.10-1~ubuntu19.04.0
  libwiretap8                     2.6.10-1~ubuntu19.04.0
  libwscodecs2                    2.6.10-1~ubuntu19.04.0
  libwsutil9                      2.6.10-1~ubuntu19.04.0
  tshark                          2.6.10-1~ubuntu19.04.0
  wireshark                       2.6.10-1~ubuntu19.04.0
  wireshark-common                2.6.10-1~ubuntu19.04.0
  wireshark-gtk                   2.6.10-1~ubuntu19.04.0
  wireshark-qt                    2.6.10-1~ubuntu19.04.0

Ubuntu 18.04 LTS:
  libwireshark-data               2.6.10-1~ubuntu18.04.0
  libwireshark11                  2.6.10-1~ubuntu18.04.0
  libwiretap8                     2.6.10-1~ubuntu18.04.0
  libwscodecs2                    2.6.10-1~ubuntu18.04.0
  libwsutil9                      2.6.10-1~ubuntu18.04.0
  tshark                          2.6.10-1~ubuntu18.04.0
  wireshark                       2.6.10-1~ubuntu18.04.0
  wireshark-common                2.6.10-1~ubuntu18.04.0
  wireshark-gtk                   2.6.10-1~ubuntu18.04.0
  wireshark-qt                    2.6.10-1~ubuntu18.04.0

Ubuntu 16.04 LTS:
  libwireshark-data               2.6.10-1~ubuntu16.04.0
  libwireshark11                  2.6.10-1~ubuntu16.04.0
  libwiretap8                     2.6.10-1~ubuntu16.04.0
  libwscodecs2                    2.6.10-1~ubuntu16.04.0
  libwsutil9                      2.6.10-1~ubuntu16.04.0
  tshark                          2.6.10-1~ubuntu16.04.0
  wireshark                       2.6.10-1~ubuntu16.04.0
  wireshark-common                2.6.10-1~ubuntu16.04.0
  wireshark-gtk                   2.6.10-1~ubuntu16.04.0
  wireshark-qt                    2.6.10-1~ubuntu16.04.0

This update uses a new upstream release, which includes additional bug
fixes. In general, a standard system update will make all the necessary
changes.

References:
  https://usn.ubuntu.com/4133-1
  CVE-2019-12295, CVE-2019-13619

Package Information:
  https://launchpad.net/ubuntu/+source/wireshark/2.6.10-1~ubuntu19.04.0
  https://launchpad.net/ubuntu/+source/wireshark/2.6.10-1~ubuntu18.04.0
  https://launchpad.net/ubuntu/+source/wireshark/2.6.10-1~ubuntu16.04.0

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-security-announce/attachments/20190916/02843061/attachment.sig>