MGASA-2019-0297 - Updated libpcap and tcpdump packages fix security vulnerabilities

Publication date: 16 Oct 2019
URL: https://advisories.mageia.org/MGASA-2019-0297.html
Type: security
Affected Mageia releases: 7
CVE: CVE-2017-16808,
     CVE-2018-10103,
     CVE-2018-10105,
     CVE-2018-14461,
     CVE-2018-14462,
     CVE-2018-14463,
     CVE-2018-14464,
     CVE-2018-14465,
     CVE-2018-14466,
     CVE-2018-14467,
     CVE-2018-14468,
     CVE-2018-14469,
     CVE-2018-14470,
     CVE-2018-14879,
     CVE-2018-14880,
     CVE-2018-14881,
     CVE-2018-14882,
     CVE-2018-16227,
     CVE-2018-16228,
     CVE-2018-16229,
     CVE-2018-16230,
     CVE-2018-16300,
     CVE-2018-16301,
     CVE-2018-16451,
     CVE-2018-16452,
     CVE-2019-15161,
     CVE-2019-15162,
     CVE-2019-15163,
     CVE-2019-15164,
     CVE-2019-15165,
     CVE-2019-15166,
     CVE-2019-15167

Updated libpcap and tcpdump packages fix security vulnerabilities:

The libpcap packages have been updated to versions 1.9.1 and tcpdump
to 4.9.3, respectively, fixing several buffer overread and overflow
issues.

References:
- https://bugs.mageia.org/show_bug.cgi?id=25565
- https://git.tcpdump.org/libpcap/blob/HEAD:/CHANGES
- https://git.tcpdump.org/tcpdump/blob/HEAD:/CHANGES
- https://www.tcpdump.org/public-cve-list.txt
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16808
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10103
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10105
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14461
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14462
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14463
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14464
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14465
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14466
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14467
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14468
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14469
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14470
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14879
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14880
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14881
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14882
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16227
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16228
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16229
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16230
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16300
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16301
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16451
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16452
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15161
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15162
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15163
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15164
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15165
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15166
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15167

SRPMS:
- 7/core/libpcap-1.9.1-1.mga7
- 7/core/tcpdump-4.9.3-1.mga7

Mageia 2019-0297: libpcap and tcpdump security update

Updated libpcap and tcpdump packages fix security vulnerabilities: The libpcap packages have been updated to versions 1.9.1 and tcpdump to 4.9.3, respectively, fixing several buff...

Summary

Updated libpcap and tcpdump packages fix security vulnerabilities:
The libpcap packages have been updated to versions 1.9.1 and tcpdump to 4.9.3, respectively, fixing several buffer overread and overflow issues.

References

- https://bugs.mageia.org/show_bug.cgi?id=25565

- https://git.tcpdump.org/libpcap/blob/HEAD:/CHANGES

- https://git.tcpdump.org/tcpdump/blob/HEAD:/CHANGES

- https://www.tcpdump.org/public-cve-list.txt

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16808

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10103

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10105

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14461

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14462

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14463

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14464

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14465

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14466

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14467

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14468

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14469

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14470

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14879

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14880

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14881

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14882

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16227

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16228

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16229

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16230

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16300

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16301

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16451

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16452

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15161

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15162

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15163

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15164

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15165

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15166

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15167

Resolution

MGASA-2019-0297 - Updated libpcap and tcpdump packages fix security vulnerabilities

SRPMS

- 7/core/libpcap-1.9.1-1.mga7

- 7/core/tcpdump-4.9.3-1.mga7

Severity
Publication date: 16 Oct 2019
URL: https://advisories.mageia.org/MGASA-2019-0297.html
Type: security
CVE: CVE-2017-16808, CVE-2018-10103, CVE-2018-10105, CVE-2018-14461, CVE-2018-14462, CVE-2018-14463, CVE-2018-14464, CVE-2018-14465, CVE-2018-14466, CVE-2018-14467, CVE-2018-14468, CVE-2018-14469, CVE-2018-14470, CVE-2018-14879, CVE-2018-14880, CVE-2018-14881, CVE-2018-14882, CVE-2018-16227, CVE-2018-16228, CVE-2018-16229, CVE-2018-16230, CVE-2018-16300, CVE-2018-16301, CVE-2018-16451, CVE-2018-16452, CVE-2019-15161, CVE-2019-15162, CVE-2019-15163, CVE-2019-15164, CVE-2019-15165, CVE-2019-15166, CVE-2019-15167

Related News

The End of the Road for Linux 6.11: A Call to Upgrade to Kernel 6.12
3 - 5 min read
The Linux kernel community recently issued an EOL announcement regarding the 6.11 kernel series, urging sysadmins to upgrade quickly to 6.12 . This
A Linux Admin
3 - 6 min read
As 2025 approaches, we Linux admins are facing new and often unseen cloud-native security obstacles. While skilled at mitigating known risks,
Leveraging Insights from the Linux Foundation
3 - 5 min read
The Linux Foundation's recent Census III report provides critical insights for Linux administrators, information security professionals, and anyone
Chrome 131 Released: Emergency Security Update Fixes Over a Dozen Significant Vulns
3 - 6 min read
Google recently unveiled a critical security update to their popular web browser, Google Chrome, addressing over a dozen significant security
From Wayland Fixes to Security Boosts: Examining Qt 6.8.1
3 - 6 min read
The recent Qt 6.8.1 release brings significant updates and improvements, strengthening its reputation as a secure and reliable application
Exploring Arch Linux 2024.12.01: Security Implications & Notable Enhancements for Linux Admins
3 - 6 min read
The Arch Linux 2024.12.01 ISO release marks an impressive milestone, offering cutting-edge updates that enhance functionality, streamline
Deck the Halls with Enhanced Security: Linux Kernel 6.13
3 - 5 min read
As Linux admins and infosec professionals prepare for the holiday season, there's much cause for celebration this year! Linus Torvalds recently made
Lessons from Bootkitty: Securing Linux Systems Against UEFI Intrusions
3 - 5 min read
New Linux security threats mark critical junctures that challenge existing policies and test security protocols to their limit. One such milestone

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved