SUSE-SU-2024:1347-1

Опубликовано: 19 апр. 2024

Источник: suse-cvrf

Описание

Security update for wireshark

This update for wireshark fixes the following issues:

Security fixes:

CVE-2024-24476: Fixed a denial of service in ws_manuf_lookup_str() (bsc#1220181)

Other fixes:

Wireshark 3.6.22:
Further features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-3.6.22.html

Список пакетов

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

libwireshark15-3.6.22-150000.3.112.1

libwiretap12-3.6.22-150000.3.112.1

libwsutil13-3.6.22-150000.3.112.1

wireshark-3.6.22-150000.3.112.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

libwireshark15-3.6.22-150000.3.112.1

libwiretap12-3.6.22-150000.3.112.1

libwsutil13-3.6.22-150000.3.112.1

wireshark-3.6.22-150000.3.112.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

libwireshark15-3.6.22-150000.3.112.1

libwiretap12-3.6.22-150000.3.112.1

libwsutil13-3.6.22-150000.3.112.1

wireshark-3.6.22-150000.3.112.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

libwireshark15-3.6.22-150000.3.112.1

libwiretap12-3.6.22-150000.3.112.1

libwsutil13-3.6.22-150000.3.112.1

wireshark-3.6.22-150000.3.112.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

libwireshark15-3.6.22-150000.3.112.1

libwiretap12-3.6.22-150000.3.112.1

libwsutil13-3.6.22-150000.3.112.1

wireshark-3.6.22-150000.3.112.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

libwireshark15-3.6.22-150000.3.112.1

libwiretap12-3.6.22-150000.3.112.1

libwsutil13-3.6.22-150000.3.112.1

wireshark-3.6.22-150000.3.112.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

libwireshark15-3.6.22-150000.3.112.1

libwiretap12-3.6.22-150000.3.112.1

libwsutil13-3.6.22-150000.3.112.1

wireshark-3.6.22-150000.3.112.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

libwireshark15-3.6.22-150000.3.112.1

libwiretap12-3.6.22-150000.3.112.1

libwsutil13-3.6.22-150000.3.112.1

wireshark-3.6.22-150000.3.112.1

Image SLES15-SP5-SAP-Azure-LI-BYOS

libwireshark15-3.6.22-150000.3.112.1

libwiretap12-3.6.22-150000.3.112.1

libwsutil13-3.6.22-150000.3.112.1

wireshark-3.6.22-150000.3.112.1

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

libwireshark15-3.6.22-150000.3.112.1

libwiretap12-3.6.22-150000.3.112.1

libwsutil13-3.6.22-150000.3.112.1

wireshark-3.6.22-150000.3.112.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS

libwireshark15-3.6.22-150000.3.112.1

libwiretap12-3.6.22-150000.3.112.1

libwsutil13-3.6.22-150000.3.112.1

wireshark-3.6.22-150000.3.112.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

libwireshark15-3.6.22-150000.3.112.1

libwiretap12-3.6.22-150000.3.112.1

libwsutil13-3.6.22-150000.3.112.1

wireshark-3.6.22-150000.3.112.1

SUSE Enterprise Storage 7.1

libwireshark15-3.6.22-150000.3.112.1

libwiretap12-3.6.22-150000.3.112.1

libwsutil13-3.6.22-150000.3.112.1

wireshark-3.6.22-150000.3.112.1

wireshark-devel-3.6.22-150000.3.112.1

wireshark-ui-qt-3.6.22-150000.3.112.1

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

libwireshark15-3.6.22-150000.3.112.1

libwiretap12-3.6.22-150000.3.112.1

libwsutil13-3.6.22-150000.3.112.1

wireshark-3.6.22-150000.3.112.1

wireshark-devel-3.6.22-150000.3.112.1

wireshark-ui-qt-3.6.22-150000.3.112.1

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

libwireshark15-3.6.22-150000.3.112.1

libwiretap12-3.6.22-150000.3.112.1

libwsutil13-3.6.22-150000.3.112.1

wireshark-3.6.22-150000.3.112.1

wireshark-devel-3.6.22-150000.3.112.1

wireshark-ui-qt-3.6.22-150000.3.112.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

libwireshark15-3.6.22-150000.3.112.1

libwiretap12-3.6.22-150000.3.112.1

libwsutil13-3.6.22-150000.3.112.1

wireshark-3.6.22-150000.3.112.1

wireshark-devel-3.6.22-150000.3.112.1

wireshark-ui-qt-3.6.22-150000.3.112.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

libwireshark15-3.6.22-150000.3.112.1

libwiretap12-3.6.22-150000.3.112.1

libwsutil13-3.6.22-150000.3.112.1

wireshark-3.6.22-150000.3.112.1

wireshark-devel-3.6.22-150000.3.112.1

wireshark-ui-qt-3.6.22-150000.3.112.1

SUSE Linux Enterprise Module for Basesystem 15 SP5

libwireshark15-3.6.22-150000.3.112.1

libwiretap12-3.6.22-150000.3.112.1

libwsutil13-3.6.22-150000.3.112.1

wireshark-3.6.22-150000.3.112.1

SUSE Linux Enterprise Module for Desktop Applications 15 SP5

wireshark-devel-3.6.22-150000.3.112.1

wireshark-ui-qt-3.6.22-150000.3.112.1

SUSE Linux Enterprise Server 15 SP2-LTSS

libwireshark15-3.6.22-150000.3.112.1

libwiretap12-3.6.22-150000.3.112.1

libwsutil13-3.6.22-150000.3.112.1

wireshark-3.6.22-150000.3.112.1

wireshark-devel-3.6.22-150000.3.112.1

wireshark-ui-qt-3.6.22-150000.3.112.1

SUSE Linux Enterprise Server 15 SP3-LTSS

libwireshark15-3.6.22-150000.3.112.1

libwiretap12-3.6.22-150000.3.112.1

libwsutil13-3.6.22-150000.3.112.1

wireshark-3.6.22-150000.3.112.1

wireshark-devel-3.6.22-150000.3.112.1

wireshark-ui-qt-3.6.22-150000.3.112.1

SUSE Linux Enterprise Server 15 SP4-LTSS

libwireshark15-3.6.22-150000.3.112.1

libwiretap12-3.6.22-150000.3.112.1

libwsutil13-3.6.22-150000.3.112.1

wireshark-3.6.22-150000.3.112.1

wireshark-devel-3.6.22-150000.3.112.1

wireshark-ui-qt-3.6.22-150000.3.112.1

SUSE Linux Enterprise Server for SAP Applications 15 SP2

libwireshark15-3.6.22-150000.3.112.1

libwiretap12-3.6.22-150000.3.112.1

libwsutil13-3.6.22-150000.3.112.1

wireshark-3.6.22-150000.3.112.1

wireshark-devel-3.6.22-150000.3.112.1

wireshark-ui-qt-3.6.22-150000.3.112.1

SUSE Linux Enterprise Server for SAP Applications 15 SP3

libwireshark15-3.6.22-150000.3.112.1

libwiretap12-3.6.22-150000.3.112.1

libwsutil13-3.6.22-150000.3.112.1

wireshark-3.6.22-150000.3.112.1

wireshark-devel-3.6.22-150000.3.112.1

wireshark-ui-qt-3.6.22-150000.3.112.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

libwireshark15-3.6.22-150000.3.112.1

libwiretap12-3.6.22-150000.3.112.1

libwsutil13-3.6.22-150000.3.112.1

wireshark-3.6.22-150000.3.112.1

wireshark-devel-3.6.22-150000.3.112.1

wireshark-ui-qt-3.6.22-150000.3.112.1

SUSE Manager Proxy 4.3

libwireshark15-3.6.22-150000.3.112.1

libwiretap12-3.6.22-150000.3.112.1

libwsutil13-3.6.22-150000.3.112.1

wireshark-3.6.22-150000.3.112.1

SUSE Manager Server 4.3

libwireshark15-3.6.22-150000.3.112.1

libwiretap12-3.6.22-150000.3.112.1

libwsutil13-3.6.22-150000.3.112.1

wireshark-3.6.22-150000.3.112.1

openSUSE Leap 15.5

libwireshark15-3.6.22-150000.3.112.1

libwiretap12-3.6.22-150000.3.112.1

libwsutil13-3.6.22-150000.3.112.1

wireshark-3.6.22-150000.3.112.1

wireshark-devel-3.6.22-150000.3.112.1

wireshark-ui-qt-3.6.22-150000.3.112.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20241347-1/
Link for SUSE-SU-2024:1347-1
https://lists.suse.com/pipermail/sle-security-updates/2024-April/018383.html
E-Mail link for SUSE-SU-2024:1347-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1220181
SUSE Bug 1220181
https://www.suse.com/security/cve/CVE-2024-24476/
SUSE CVE CVE-2024-24476 page

Описание

** DISPUTED ** A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.

Затронутые продукты

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libwireshark15-3.6.22-150000.3.112.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libwiretap12-3.6.22-150000.3.112.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libwsutil13-3.6.22-150000.3.112.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:wireshark-3.6.22-150000.3.112.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-24476.html
CVE-2024-24476
https://bugzilla.suse.com/1220181
SUSE Bug 1220181

SUSE-SU-2024:1347-1

Описание

Список пакетов

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP4-SAP-Azure-LI-BYOS

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

Image SLES15-SP4-SAP-Azure-VLI-BYOS

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP5-SAP-Azure-LI-BYOS

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

Image SLES15-SP5-SAP-Azure-VLI-BYOS

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

SUSE Enterprise Storage 7.1

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

SUSE Linux Enterprise Module for Basesystem 15 SP5

SUSE Linux Enterprise Module for Desktop Applications 15 SP5

SUSE Linux Enterprise Server 15 SP2-LTSS

SUSE Linux Enterprise Server 15 SP3-LTSS

SUSE Linux Enterprise Server 15 SP4-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP2

SUSE Linux Enterprise Server for SAP Applications 15 SP3

SUSE Linux Enterprise Server for SAP Applications 15 SP4

SUSE Manager Proxy 4.3

SUSE Manager Server 4.3

openSUSE Leap 15.5

Ссылки

Уязвимость: CVE-2024-24476

Описание

Затронутые продукты

Ссылки