浏览代码

package/wireshark: security bump to v4.2.11

This fixes the following CVE:

- CVE-2025-1492: The Bundle Protocol and CBOR dissectors could crash

    It may be possible to make Wireshark crash by injecting a malformed
    packet onto the wire or by convincing someone to read a malformed
    packet trace file.

See https://www.wireshark.org/security/wnpa-sec-2025-01

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
Titouan Christophe 3 月之前
父节点
当前提交
032b268890
共有 2 个文件被更改,包括 4 次插入4 次删除
  1. 3 3
      package/wireshark/wireshark.hash
  2. 1 1
      package/wireshark/wireshark.mk

+ 3 - 3
package/wireshark/wireshark.hash

@@ -1,6 +1,6 @@
-# From https://www.wireshark.org/download/src/all-versions/SIGNATURES-4.2.9.txt
-sha1  d1abbe110451dab9e57c9ee1fe0892e0d6a7d515  wireshark-4.2.9.tar.xz
-sha256  62c2b6652d7f9a50668867bd57b21609c9a9b6950f26e7f30a24b2de0e72ded3  wireshark-4.2.9.tar.xz
+# From https://www.wireshark.org/download/src/all-versions/SIGNATURES-4.2.11.txt
+sha1  f4e908e73ab90982e7f712e0a9b5f4cce85ca058  wireshark-4.2.11.tar.xz
+sha256  dd80f30e9853105dacb5357e5832d960437160bbb4b147e8f1a7ead168afaa18  wireshark-4.2.11.tar.xz
 
 # Locally calculated
 sha256  8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643  COPYING

+ 1 - 1
package/wireshark/wireshark.mk

@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-WIRESHARK_VERSION = 4.2.9
+WIRESHARK_VERSION = 4.2.11
 WIRESHARK_SOURCE = wireshark-$(WIRESHARK_VERSION).tar.xz
 WIRESHARK_SITE = https://www.wireshark.org/download/src/all-versions
 WIRESHARK_LICENSE = wireshark license