SUSE-SU-2024:0058-1: Security update for wireshark
This update for wireshark fixes the following issues: Updated to Wireshark 3.6.20:
CVE-2024-0208: Fixed a crash in the GVCP dissector (bsc#1218504).
CVE-2024-0209: Fixed a crash in the IEEE 1609.2 dissector (bsc#1218505).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/wiresharkto a version that resolves this vulnerability.Fixed in 3.6.20-150000.3.109.1 - Upgrade
Upgrade
suse/libwsutil13-debuginfoto a version that resolves this vulnerability.Fixed in 3.6.20-150000.3.109.1 - Upgrade
Upgrade
suse/libwiretap12to a version that resolves this vulnerability.Fixed in 3.6.20-150000.3.109.1 - Upgrade
Upgrade
suse/wireshark-ui-qt-debuginfoto a version that resolves this vulnerability.Fixed in 3.6.20-150000.3.109.1 - Upgrade
Upgrade
suse/wireshark-debuginfoto a version that resolves this vulnerability.Fixed in 3.6.20-150000.3.109.1 - Upgrade
Upgrade
suse/wireshark-develto a version that resolves this vulnerability.Fixed in 3.6.20-150000.3.109.1 - Upgrade
Upgrade
suse/libwireshark15to a version that resolves this vulnerability.Fixed in 3.6.20-150000.3.109.1 - Upgrade
Upgrade
suse/wireshark-ui-qtto a version that resolves this vulnerability.Fixed in 3.6.20-150000.3.109.1 - Upgrade
Upgrade
suse/libwiretap12-debuginfoto a version that resolves this vulnerability.Fixed in 3.6.20-150000.3.109.1 - Upgrade
Upgrade
suse/libwsutil13to a version that resolves this vulnerability.Fixed in 3.6.20-150000.3.109.1 - Upgrade
Upgrade
suse/wireshark-debugsourceto a version that resolves this vulnerability.Fixed in 3.6.20-150000.3.109.1 - Upgrade
Upgrade
suse/libwireshark15-debuginfoto a version that resolves this vulnerability.Fixed in 3.6.20-150000.3.109.1 - Upgrade
Upgrade
wiresharkto a version that resolves this vulnerability.Fixed in 3.6.20