Subject: [alpine-aports] [PATCH v3.5] main/wireshark: security upgrade to 2.2.4 - fixes #6823

From: Sergei Lukin <[email-masked]>
Date: Wed, 8 Feb 2017 07:34:49 +0000

CVE-2017-5596: ASTERIX infinite loop
CVE-2017-5597: DHCPv6 large loop
---
Release Notes about 2.2.4 says:
 New and Updated Features
  There are no new features in this release.
 New File Format Decoding Support
  There are no new file formats in this release.
 New Protocol Support
  There are no new protocols in this release.
 Updated Protocol Support
  6LoWPAN, DVB-CI, ENC, GSM MAP, IEEE 1722, IEEE 1722.1, ISAKMP, MS-WSP, PPP, QUIC, Radiotap, RPC, SMTP, TCP, UCD, and UDLD
 New and Updated Capture File Support
  There is no new or updated capture file support in this release.
  Daintree SNA, and DBS Etherwatch
 New and Updated Capture Interfaces support
  There are no new or updated capture interfaces supported in this release.
 Major API Changes
  There are no major API changes in this release.
https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html

 main/wireshark/APKBUILD | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/main/wireshark/APKBUILD b/main/wireshark/APKBUILD
index 1aca0524a9..5e686f62f7 100644
--- a/main/wireshark/APKBUILD
+++ b/main/wireshark/APKBUILD
@@ -1,8 +1,9 @@
+# Contributor: Sergei Lukin <[email-masked]>
 # Contributor: Łukasz Jendrysik <[email-masked]>
 # Contributor: Jeremy Thomerson <[email-masked]>
 # Maintainer: Natanael Copa <[email-masked]>
 pkgname=wireshark
-pkgver=2.2.3
+pkgver=2.2.4
 pkgrel=0
 pkgdesc="A network protocol analyzer - GTK version"
 url="http://www.wireshark.org"
@@ -20,6 +21,9 @@ source="http://www.wireshark.org/download/src/$pkgname-$pkgver.tar.bz2
 _builddir="$srcdir"/$pkgname-$pkgver
 
 # security fixes:
+#   2.2.4-r0:
+#   - CVE-2017-5596
+#   - CVE-2017-5597
 #   2.0.5-r0:
 #   - CVE-2016-6505
 #   - CVE-2016-6506
@@ -93,9 +97,9 @@ gtk() {
 	mv "$pkgdir"/usr/bin/wireshark-gtk "$subpkgdir"/usr/bin/
 }
 
-md5sums="68e201e06873c67cb7544d27991e79bf  wireshark-2.2.3.tar.bz2
+md5sums="6d0878ba931ea379f6e675d4cba6536b  wireshark-2.2.4.tar.bz2
 38a681230ccab441e64d1fc6f52858c4  fix-androiddump.patch"
-sha256sums="97bac89e88892054a5848a9f7e0c36aa399a2008900829b078e29cab0ddd593b  wireshark-2.2.3.tar.bz2
+sha256sums="42a7fb35eed5a32478153e24601a284bb50148b7ba919c3e8452652f4c2a3911  wireshark-2.2.4.tar.bz2
 21aaa55e6b4bb9144146e8e3284512d2c5ee5deee8921b66a513b819b57d8b01  fix-androiddump.patch"
-sha512sums="a067cc5e4683a70deb301b50d57e5543f265b4fd9eef6a55a9c31e078da0d03aa89322012b9b8b7689af1720e36fe3a17a20689d657c7dca5aa7aa7f51d0701c  wireshark-2.2.3.tar.bz2
+sha512sums="f3ff6979fdd1c7cf6abe386ec476fee12045ae6df3c8162568d521532045d5eb6ad689262c38b1766c75c9fc1068f480fcd64f0aa077b3a0ceea7c16dbdabc65  wireshark-2.2.4.tar.bz2
 d462e3289c1350a9f712a21d2d1973977e5dd7989f7beff4b71498551174458f572a23f267c83552f088466cb9d2721df2b2eb807514db6ad1e0877dbc87fc6d  fix-androiddump.patch"
-- 
2.11.1

---
Unsubscribe:  [email-masked]
Help:         [email-masked]
---