Register | Log in

wireshark

network traffic analyzer - meta-package

Choose email to subscribe with

general

source: wireshark (main)
version: 3.0.7-1
maintainer: Balint Reczey (DMD)
arch: all any
std-ver: 3.9.8
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 1.12.1+g01b65bf-4+deb8u14
o-o-sec: 1.12.1+g01b65bf-4+deb8u19
oldstable: 2.6.7-1~deb9u1
old-sec: 2.6.7-1~deb9u1
stable: 2.6.8-1.1
testing: 3.0.7-1
unstable: 3.0.7-1

versioned links

1.12.1+g01b65bf-4+deb8u14: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.12.1+g01b65bf-4+deb8u19: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.2.6+g32dac6a-2+deb9u3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.6.7-1~deb9u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.6.8-1.1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.0.7-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libwireshark-data
libwireshark-dev
libwireshark12
libwiretap-dev
libwiretap9
libwscodecs2
libwsutil-dev
libwsutil10
tshark (7 bugs: 0, 3, 4, 0)
wireshark (22 bugs: 0, 7, 15, 0)
wireshark-common (1 bugs: 0, 1, 0, 0)
wireshark-dev (1 bugs: 0, 1, 0, 0)
wireshark-doc
wireshark-gtk
wireshark-qt (1 bugs: 0, 1, 0, 0)

action needed

Standards version of the package is outdated. high

The package is severely out of date with respect to the Debian Policy. The package should be updated to follow the last version of Debian Policy (Standards-Version 4.4.1 instead of 3.9.8).

Created: 2017-06-27 Last update: 2019-12-08 05:57

Depends on packages which need a new maintainer normal

The packages that wireshark depends on which need a new maintainer are:

docbook-xml (#802368)
- Build-Depends: docbook-xml
docbook-xsl (#802370)
- Build-Depends: docbook-xsl
snmp-mibs-downloader (#878723)
- Suggests: snmp-mibs-downloader

Created: 2019-11-22 Last update: 2019-12-10 15:40

3 ignored security issues in buster low

There are 3 open security issues in buster.

3 issues skipped by the security teams:

CVE-2019-19553: In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash. This was addressed in epan/dissectors/asn1/cms/packet-cms-template.c by ensuring that an object identifier is set to NULL after a ContentInfo dissection.
CVE-2019-16319: In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop. This was addressed in plugins/epan/gryphon/packet-gryphon.c by checking for a message length of zero.
CVE-2019-13619: In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash. This was addressed in epan/asn1.c by properly restricting buffer increments.

Please fix them.

Created: 2019-07-18 Last update: 2019-12-10 12:30

19 ignored security issues in jessie low

There are 19 open security issues in jessie.

19 issues skipped by the security teams:

CVE-2017-9352: In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the Bazaar dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by ensuring that backwards parsing cannot occur.
CVE-2017-9350: In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the openSAFETY dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet-opensafety.c by checking for a negative length.
CVE-2017-9351: In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DHCP dissector could read past the end of a buffer. This was addressed in epan/dissectors/packet-bootp.c by extracting the Vendor Class Identifier more carefully.
CVE-2017-7702: In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wbxml.c by adding length validation.
CVE-2019-19553: In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash. This was addressed in epan/dissectors/asn1/cms/packet-cms-template.c by ensuring that an object identifier is set to NULL after a ContentInfo dissection.
CVE-2019-16319: In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop. This was addressed in plugins/epan/gryphon/packet-gryphon.c by checking for a message length of zero.
CVE-2018-12086: Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.
CVE-2017-13767: In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the MSDP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-msdp.c by adding length validation.
CVE-2018-7337: In Wireshark 2.4.0 to 2.4.4, the DOCSIS protocol dissector could crash. This was addressed in plugins/docsis/packet-docsis.c by removing the recursive algorithm that had been used for concatenated PDUs.
CVE-2017-9616: In Wireshark 2.2.7, overly deep mp4 chunks may cause stack exhaustion (uncontrolled recursion) in the dissect_mp4_box function in epan/dissectors/file-mp4.c.
CVE-2018-9267: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-lapd.c has a memory leak.
CVE-2018-9265: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-tn3270.c has a memory leak.
CVE-2017-9617: In Wireshark 2.2.7, deeply nested DAAP data may cause stack exhaustion (uncontrolled recursion) in the dissect_daap_one_tag function in epan/dissectors/packet-daap.c in the DAAP dissector.
CVE-2017-9345: In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DNS dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-dns.c by trying to detect self-referencing pointers.
CVE-2017-9346: In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the SoulSeek dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-slsk.c by making loop bounds more explicit.
CVE-2017-9343: In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the MSNIP dissector misuses a NULL pointer. This was addressed in epan/dissectors/packet-msnip.c by validating an IPv4 address.
CVE-2019-12295: In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion.
CVE-2018-9271: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-multipart.c has a memory leak.
CVE-2018-9272: In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-h223.c has a memory leak.

Please fix them.

Created: 2017-04-13 Last update: 2019-12-10 12:30

11 ignored security issues in stretch low

There are 11 open security issues in stretch.

11 issues skipped by the security teams:

CVE-2019-19553: In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash. This was addressed in epan/dissectors/asn1/cms/packet-cms-template.c by ensuring that an object identifier is set to NULL after a ContentInfo dissection.
CVE-2019-10901: In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by handling file digests properly.
CVE-2019-10902: In Wireshark 3.0.0, the TSDNS dissector could crash. This was addressed in epan/dissectors/packet-tsdns.c by splitting strings safely.
CVE-2019-10903: In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash. This was addressed in epan/dissectors/packet-dcerpc-spoolss.c by adding a boundary check.
CVE-2019-16319: In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop. This was addressed in plugins/epan/gryphon/packet-gryphon.c by checking for a message length of zero.
CVE-2019-13619: In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash. This was addressed in epan/asn1.c by properly restricting buffer increments.
CVE-2019-12295: In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion.
CVE-2019-10899: In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the SRVLOC dissector could crash. This was addressed in epan/dissectors/packet-srvloc.c by preventing a heap-based buffer under-read.
CVE-2019-10896: In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash. This was addressed in epan/dissectors/packet-dof.c by properly handling generated IID and OID bytes.
CVE-2019-10894: In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This was addressed in epan/dissectors/packet-gssapi.c by ensuring that a valid dissector is called.
CVE-2019-10895: In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash. This was addressed in wiretap/netscaler.c by improving data validation.

Please fix them.

Created: 2019-04-09 Last update: 2019-12-10 12:30

Build log checks report 2 warnings low

Build log checks report 2 warnings

Created: 2018-06-28 Last update: 2019-09-13 11:31

news

[2019-12-10] wireshark 3.0.7-1 MIGRATED to testing (Debian testing watch)
[2019-12-07] Accepted wireshark 3.0.7-1 (source) into unstable (Balint Reczey)
[2019-09-29] wireshark 3.0.5-1 MIGRATED to testing (Debian testing watch)
[2019-09-27] Accepted wireshark 3.0.5-1 (source) into unstable (Balint Reczey)
[2019-09-27] wireshark 3.0.4-1 MIGRATED to testing (Debian testing watch)
[2019-09-12] Accepted wireshark 3.0.4-1 (source) into unstable (Balint Reczey)
[2019-08-21] wireshark 3.0.3-1 MIGRATED to testing (Debian testing watch)
[2019-08-19] Accepted wireshark 3.0.3-1 (source) into unstable (Balint Reczey)
[2019-07-20] wireshark 2.6.10-1 MIGRATED to testing (Debian testing watch)
[2019-07-19] Accepted wireshark 3.0.2-1~exp0 (source all i386) into experimental, experimental (Balint Reczey)
[2019-07-17] Accepted wireshark 2.6.10-1 (source) into unstable (Balint Reczey)
[2019-07-09] wireshark 2.6.9-1 MIGRATED to testing (Debian testing watch)
[2019-05-31] Accepted wireshark 2.6.9-1 (source) into unstable (Balint Reczey)
[2019-05-30] wireshark 2.6.8-1.1 MIGRATED to testing (Debian testing watch)
[2019-05-27] Accepted wireshark 2.6.8-1.1 (source) into unstable (Dr. Tobias Quathamer)
[2019-05-24] Accepted wireshark 1.12.1+g01b65bf-4+deb8u19 (source amd64 all) into oldstable (Hugo Lefeuvre)
[2019-04-21] wireshark 2.6.8-1 MIGRATED to testing (Debian testing watch)
[2019-04-11] Accepted wireshark 2.6.8-1 (source) into unstable (Balint Reczey)
[2019-03-29] Accepted wireshark 2.6.7-1~deb9u1 (source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso)
[2019-03-25] Accepted wireshark 1.12.1+g01b65bf-4+deb8u18 (source amd64 all) into oldstable (Thorsten Alteholz)
[2019-03-24] Accepted wireshark 2.6.7-1~deb9u1 (source) into stable->embargoed, stable (Salvatore Bonaccorso)
[2019-03-21] wireshark 2.6.7-1 MIGRATED to testing (Debian testing watch)
[2019-03-02] Accepted wireshark 2.6.7-1 (source) into unstable (Balint Reczey)
[2019-01-28] Accepted wireshark 1.12.1+g01b65bf-4+deb8u17 (source amd64 all) into oldstable (Thorsten Alteholz)
[2019-01-15] Accepted wireshark 1.12.1+g01b65bf-4+deb8u16 (source amd64 all) into oldstable (Thorsten Alteholz)
[2019-01-12] wireshark 2.6.6-1 MIGRATED to testing (Debian testing watch)
[2019-01-09] Accepted wireshark 2.6.6-1 (source) into unstable (Balint Reczey)
[2018-12-28] Accepted wireshark 2.6.5-1~deb9u1 (source all amd64) into proposed-updates->stable-new, proposed-updates (Balint Reczey)
[2018-12-27] Accepted wireshark 2.6.5-1~deb9u1 (source all amd64) into stable->embargoed, stable (Balint Reczey)
[2018-12-02] wireshark 2.6.5-1 MIGRATED to testing (Debian testing watch)

1
2

bugs [bug history graph]

all: 32
RC: 0
I&N: 13
M&W: 19
F&P: 0
patch: 0

links

homepage
buildd: logs, checks, clang, reproducibility, cross
popcon
browse source code
edit tags
security tracker
screenshots
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 3.0.7-1
22 bugs

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing