From b9c2c3caa893e81f8789945caed79815c293d1df Mon Sep 17 00:00:00 2001 From: Titouan Christophe Date: Wed, 30 Apr 2025 16:33:03 +0200 Subject: [PATCH] package/wireshark: security bump to v4.2.11 This fixes the following CVE: - CVE-2025-1492: The Bundle Protocol and CBOR dissectors could crash It may be possible to make Wireshark crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file. See https://www.wireshark.org/security/wnpa-sec-2025-01 Signed-off-by: Titouan Christophe Signed-off-by: Julien Olivain (cherry picked from commit 032b2688909a1621aa8ae1397ee0c785423b6455) Signed-off-by: Thomas Perale --- package/wireshark/wireshark.hash | 6 +++--- package/wireshark/wireshark.mk | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package/wireshark/wireshark.hash b/package/wireshark/wireshark.hash index 642bc5866d..8b3245551a 100644 --- a/package/wireshark/wireshark.hash +++ b/package/wireshark/wireshark.hash @@ -1,6 +1,6 @@ -# From https://www.wireshark.org/download/src/all-versions/SIGNATURES-4.2.9.txt -sha1 d1abbe110451dab9e57c9ee1fe0892e0d6a7d515 wireshark-4.2.9.tar.xz -sha256 62c2b6652d7f9a50668867bd57b21609c9a9b6950f26e7f30a24b2de0e72ded3 wireshark-4.2.9.tar.xz +# From https://www.wireshark.org/download/src/all-versions/SIGNATURES-4.2.11.txt +sha1 f4e908e73ab90982e7f712e0a9b5f4cce85ca058 wireshark-4.2.11.tar.xz +sha256 dd80f30e9853105dacb5357e5832d960437160bbb4b147e8f1a7ead168afaa18 wireshark-4.2.11.tar.xz # Locally calculated sha256 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 COPYING diff --git a/package/wireshark/wireshark.mk b/package/wireshark/wireshark.mk index bade68f258..72415448c4 100644 --- a/package/wireshark/wireshark.mk +++ b/package/wireshark/wireshark.mk @@ -4,7 +4,7 @@ # ################################################################################ -WIRESHARK_VERSION = 4.2.9 +WIRESHARK_VERSION = 4.2.11 WIRESHARK_SOURCE = wireshark-$(WIRESHARK_VERSION).tar.xz WIRESHARK_SITE = https://www.wireshark.org/download/src/all-versions WIRESHARK_LICENSE = wireshark license