Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package wireshark for openSUSE:Factory checked in at 2023-10-08 12:16:12 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/wireshark (Old) and /work/SRC/openSUSE:Factory/.wireshark.new.28202 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "wireshark" Sun Oct 8 12:16:12 2023 rev:210 rq:1115917 version:4.0.10 Changes: -------- --- /work/SRC/openSUSE:Factory/wireshark/wireshark.changes 2023-08-31 13:44:38.081900118 +0200 +++ /work/SRC/openSUSE:Factory/.wireshark.new.28202/wireshark.changes 2023-10-08 12:16:15.661719161 +0200 @@ -1,0 +2,10 @@ +Thu Oct 5 16:51:21 UTC 2023 - Andreas Stieger <andreas.stie...@gmx.de> + +- Wireshark 4.0.10: + * CVE-2023-5371: RTPS dissector memory leak (wnpa-sec-2023-27, boo#1215959) + * Fix a number of bugs in protocol parsers, including: + * RTP/RFC 4571: Wrong desegmentation/reassembly in RTP over TCP packets + * Incorrect bit values and namings in BSS Configuration Report TLV + * Wireshark 4.0.9 contained a bug affecting other platforms + +------------------------------------------------------------------- Old: ---- wireshark-4.0.8.tar.xz wireshark-4.0.8.tar.xz.hash New: ---- wireshark-4.0.10.tar.xz wireshark-4.0.10.tar.xz.hash ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ wireshark.spec ++++++ --- /var/tmp/diff_new_pack.IfPPyo/_old 2023-10-08 12:16:17.593788627 +0200 +++ /var/tmp/diff_new_pack.IfPPyo/_new 2023-10-08 12:16:17.593788627 +0200 @@ -28,7 +28,7 @@ %bcond_with lz4 %endif Name: wireshark -Version: 4.0.8 +Version: 4.0.10 Release: 0 Summary: A Network Traffic Analyser License: GPL-2.0-or-later AND GPL-3.0-or-later ++++++ wireshark-4.0.8.tar.xz -> wireshark-4.0.10.tar.xz ++++++ /work/SRC/openSUSE:Factory/wireshark/wireshark-4.0.8.tar.xz /work/SRC/openSUSE:Factory/.wireshark.new.28202/wireshark-4.0.10.tar.xz differ: char 15, line 1 ++++++ wireshark-4.0.8.tar.xz.hash -> wireshark-4.0.10.tar.xz.hash ++++++ --- /work/SRC/openSUSE:Factory/wireshark/wireshark-4.0.8.tar.xz.hash 2023-08-30 10:18:56.620851139 +0200 +++ /work/SRC/openSUSE:Factory/.wireshark.new.28202/wireshark-4.0.10.tar.xz.hash 2023-10-08 12:16:15.653718874 +0200 @@ -1,29 +1,29 @@ -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 -wireshark-4.0.8.tar.xz: 43123664 bytes -SHA256(wireshark-4.0.8.tar.xz)=16663585c0ffefd5593a6628d4a20cc8241b9703b11283cfe71ead2b750888c8 -SHA1(wireshark-4.0.8.tar.xz)=8ca1cc4471d0cb835cd5216833c393fa23bc154f - -Wireshark-win64-4.0.8.exe: 79164216 bytes -SHA256(Wireshark-win64-4.0.8.exe)=8243e019d2bd73c81de53c67ddb23d877ecec2fc1699c9aa074ccaa2d7d9b267 -SHA1(Wireshark-win64-4.0.8.exe)=1b8a7462eeaebf78f5a50897aa769566596325bf - -Wireshark-win64-4.0.8.msi: 53239808 bytes -SHA256(Wireshark-win64-4.0.8.msi)=74d4ed6c9ab093fcebdfb034f4a0480c11774bfac72b7b3271cdadc3098278a0 -SHA1(Wireshark-win64-4.0.8.msi)=ad3d422dad9cb0b4140abc311ce152c151151fdd - -WiresharkPortable64_4.0.8.paf.exe: 45811360 bytes -SHA256(WiresharkPortable64_4.0.8.paf.exe)=5b328b24f12760b99fe36936154e442177668f52300685fe68fdd1ec6871d647 -SHA1(WiresharkPortable64_4.0.8.paf.exe)=a6e8c3b40744454bd4461fcfc43c4eddcdcaa044 - -Wireshark 4.0.8 Arm 64.dmg: 64637754 bytes -SHA256(Wireshark 4.0.8 Arm 64.dmg)=cbf50f162411b4870b07f1460ada76d357dafbd20e5243a97b055ddb39d9fcac -SHA1(Wireshark 4.0.8 Arm 64.dmg)=f4ee4e70f43879fc83237b1b13a5665bc143c6e9 - -Wireshark 4.0.8 Intel 64.dmg: 68136239 bytes -SHA256(Wireshark 4.0.8 Intel 64.dmg)=a751eb215c0337982675b889bf48e742a57859eaaf3a0f7d64ddc27e6a459595 -SHA1(Wireshark 4.0.8 Intel 64.dmg)=8eed4c8a9ed54116d7c717fb3e7a0c4241b2641e +wireshark-4.0.10.tar.xz: 43124192 bytes +SHA256(wireshark-4.0.10.tar.xz)=b2e3ff03fa2be9058a9ffbedd12b0a670433bd16c8cc6c432ab48dabc2df1898 +SHA1(wireshark-4.0.10.tar.xz)=830ba7ff602da90323bbc5ec15941c0878d9ee4a + +Wireshark-win64-4.0.10.exe: 79141976 bytes +SHA256(Wireshark-win64-4.0.10.exe)=085d9aa4f6614730f132fb5c28ec5fa445dea79687e4c648d586de569ffcc5e2 +SHA1(Wireshark-win64-4.0.10.exe)=1e5ea0f5fa1a8835bcfc9587efa4bf58c495d13f + +Wireshark-win64-4.0.10.msi: 53219328 bytes +SHA256(Wireshark-win64-4.0.10.msi)=965e532c05c4be1423e72bcb6c3350aca3f64b42543807c1193705ab7a1e59af +SHA1(Wireshark-win64-4.0.10.msi)=b6e13884d0a6ab5f41e92a127d85261fc71b28c4 + +WiresharkPortable64_4.0.10.paf.exe: 45802800 bytes +SHA256(WiresharkPortable64_4.0.10.paf.exe)=40e4da853067905cee3447d64b3399d8101b90265bcc213081b750e33f78bb8f +SHA1(WiresharkPortable64_4.0.10.paf.exe)=15a0ba51e056029699484a13adb4c52bd30703a9 + +Wireshark 4.0.10 Arm 64.dmg: 63446426 bytes +SHA256(Wireshark 4.0.10 Arm 64.dmg)=178201c6b010e8ee7058a640b2592a8759a8ffa323f5a04434273a3501530a94 +SHA1(Wireshark 4.0.10 Arm 64.dmg)=0ec52abbd32c97a0f1ee21b590f6dc919960c7b2 + +Wireshark 4.0.10 Intel 64.dmg: 66986608 bytes +SHA256(Wireshark 4.0.10 Intel 64.dmg)=f0ae6cfc2ecf1e7f5b1475c91bb2c5f7ac63174405a667056bb29b8c17f1180b +SHA1(Wireshark 4.0.10 Intel 64.dmg)=926abb7a6bdb0f58b6b4b6aaba19353207d90ce6 You can validate these hashes using the following commands (among others): @@ -33,17 +33,17 @@ Other: openssl sha256 wireshark-x.y.z.tar.xz -----BEGIN PGP SIGNATURE----- -iQIzBAEBCgAdFiEEWlrbp9vqbD+HIk8ZgiRKeOb+ruoFAmTmZc0ACgkQgiRKeOb+ -ruoApxAAgkri7lWT3qNyZpAJnfeizaljVU21IttyurJQvSA/kkf6j88IJ9DqPuMK -HCVH2CYbV7TSwM1UabuKPO1jWW1cEidT0oZZWXz9tVirzKxR+7/5vSrjrp44hx61 -RAigYhvRmdd1ak3vwDHJg1WqDTGLXOGL+nQfdJ/D8Kt0ee8XS6ydM1lu4dXtbPql -jQhTeHWBDqhe/FqE/N6hOiQ7IedhskQo7EpdGqtMRJuY2caHAwgDg4yX1ZIzl78m -JSLQ+RKHSKPGWt686XpPQDT+o8W7rCWHhpzFRIZe0GFb+KgHrX9Vdlw0Rt/yhep9 -rrpSycf6pepFLtBhqOEERj4DIW0+7u0xye9mN6rEjbxN990+EhJoncx2yl77DTNG -4gOteuhRWBg733bafxZlXXXM3R4d52dz9Ia3AWYTT6kf3gZwz4QPGe1Q5s8ZP/ba -4ZIMIvx+FNDGIqTCAJpCH8hhCmUsxYJc4aTEwG/UUGctONqEIw8e8OUIkN6wSEy/ -DmN6USzFkwqLmn5CdWauvqd1pHrz/7zlZMLQ8iJvcB6gYtb983qdSJpb2hLB7aVm -xN/3zMEj3oXClfiQTrtErEYomCl/pLzGbEfamPJss/A3gM5r4FlYRALwEkI21w+N -xv5RyT2b9InEzAGWE0KS6oCRRbCzoIWpcCW/zL05jxc2bwO+oS0= -=iORt +iQIzBAEBCgAdFiEEWlrbp9vqbD+HIk8ZgiRKeOb+ruoFAmUd9soACgkQgiRKeOb+ +rur8Jw//SUdb3TX9NUkmLI4eN/QjQiuxX+pyGGSwlLR6bAGhVRqaIHmGAMxocnWy +11yvxp1dcv3lOjkyg9l9xMRLZCI8EVVSXlkvTu9Us4OYIgCYQNqBheicuehy62pf +PrQtcZ227FEoJJPjPMyiJiNGf8WSqe4tcUBA9evorThVmhf7rWUYS2qI3Pb8gQhu +ZL1ZmcBJgzjisyUXnfRZ5mVQE74CiC/4QGYjpYU71vRCHINaXJ79QbQSzHJ7L473 +bXNmyhy/UGfsfzpcfxxCVs2k4ibXV19mY8NTFDbJuSknOXuHyuVs9+9PnbO+dqsk +KUYNAZrkOonJwD6ipZibCFV5FascdSpZjV+WCSdlc/g9/qnQ1dMZDvp57ConXDtX +SIcMm3Ll5O7NdvUgK8V8KM/3fQmdGjjipbnHGUoUs+yHpSXNA1meiTz2n+2SaUIZ +9+qR4OUJs1c92WNlcNgjZ6B34AVil253fSw9b8cqpNWtOUSdwQl56seFgsam/cDd +udIUcHH0+Bohb9tupU6LLXe3YjDS6sypKRS0SSbchOMszrtiYHcmr2Nc+rPaSOgA +8CQlGxtgyllbjhnlPnQWjCoCy/Rc9gpEAoKYWZ88W+KYt2sQw8HVpxDsvb4q6BIx +B2Y4G9Fps9ocMKqzMXZy1MANaxzUK4LRB8ig9YsAwmckp8mBB9U= +=Fb2i -----END PGP SIGNATURE-----