From 2648aa30c1fc61f66ab2b6f0bcfe5840a83b183b Mon Sep 17 00:00:00 2001 From: Titouan Christophe Date: Wed, 3 Sep 2025 13:00:47 +0200 Subject: [PATCH] package/wireshark: security bump to v4.2.13 See the release notes: - https://www.wireshark.org/docs/relnotes/wireshark-4.2.12.html - https://www.wireshark.org/docs/relnotes/wireshark-4.2.13.html This fixes the following vulnerability: - CVE-2025-5601: Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file https://www.cve.org/CVERecord?id=CVE-2025-5601 Also update hash for COPYING because of Wireshark commit 614add27f29269e681e4d32138bea4951985fe0a that changes the FSF address Signed-off-by: Titouan Christophe Signed-off-by: Peter Korsgaard (cherry picked from commit 891ec88b6da102035a5951d41df624decb3458ff) Signed-off-by: Thomas Perale --- package/wireshark/wireshark.hash | 8 ++++---- package/wireshark/wireshark.mk | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package/wireshark/wireshark.hash b/package/wireshark/wireshark.hash index 8b3245551a..f1f2f58442 100644 --- a/package/wireshark/wireshark.hash +++ b/package/wireshark/wireshark.hash @@ -1,7 +1,7 @@ -# From https://www.wireshark.org/download/src/all-versions/SIGNATURES-4.2.11.txt -sha1 f4e908e73ab90982e7f712e0a9b5f4cce85ca058 wireshark-4.2.11.tar.xz -sha256 dd80f30e9853105dacb5357e5832d960437160bbb4b147e8f1a7ead168afaa18 wireshark-4.2.11.tar.xz +# From https://www.wireshark.org/download/src/all-versions/SIGNATURES-4.2.13.txt +sha1 e5a08396a98d5dfba4078c66677aacd50d47ec90 wireshark-4.2.13.tar.xz +sha256 2454aa650276264d23aca28e1b62eb5d4bd12b64aa261d38c06b33f97b8fa3dd wireshark-4.2.13.tar.xz # Locally calculated -sha256 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 COPYING +sha256 edaef632cbb643e4e7a221717a6c441a4c1a7c918e6e4d56debc3d8739b233f6 COPYING sha256 fce67c1558e448fac784ce9a30cb47956488bc3ef6ec16316c38b0668b3cad2e README.md diff --git a/package/wireshark/wireshark.mk b/package/wireshark/wireshark.mk index 72415448c4..bd81224ae7 100644 --- a/package/wireshark/wireshark.mk +++ b/package/wireshark/wireshark.mk @@ -4,7 +4,7 @@ # ################################################################################ -WIRESHARK_VERSION = 4.2.11 +WIRESHARK_VERSION = 4.2.13 WIRESHARK_SOURCE = wireshark-$(WIRESHARK_VERSION).tar.xz WIRESHARK_SITE = https://www.wireshark.org/download/src/all-versions WIRESHARK_LICENSE = wireshark license