wireshark (2.6.10-1~ubuntu16.04.0) xenial-security; urgency=medium

  * Rebuild for Xenial to fix multiple security issues
  * Make wireshark depend on both wireshark-gtk and wireshark-qt

 -- Balint Reczey <rbalint@ubuntu.com>  Thu, 05 Sep 2019 21:42:54 +0200

wireshark (2.6.10-1) unstable; urgency=medium

  * New upstream version 2.6.10
     - security fixes:
       - ASN.1 BER and related dissectors crash (CVE-2019-13619)
     - fix QIcon crash on exit on Ubuntu 16.04 with Qt 5.5.1 (LP: #1803808)
  * debian/gitlab-ci.yml: User minimal reference configuration

 -- Balint Reczey <rbalint@ubuntu.com>  Wed, 17 Jul 2019 23:23:05 +0200

wireshark (2.6.9-1) unstable; urgency=medium

  * Acknowledge NMU
  * New upstream version 2.6.9
  * Drop obsolete CVE-2019-12295.patch
  * Refresh patches

 -- Balint Reczey <rbalint@ubuntu.com>  Thu, 30 May 2019 22:13:15 +0200

wireshark (2.6.8-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * CVE-2019-12295
    In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14,
    the dissection engine could crash. This was addressed in
    epan/packet.c by restricting the number of layers and
    consequently limiting recursion. (Closes: #929446)

 -- Dr. Tobias Quathamer <toddy@debian.org>  Mon, 27 May 2019 16:08:44 +0200

wireshark (2.6.8-1) unstable; urgency=medium

  * New upstream version 2.6.8
    - security fixes (Closes: #926718):
      - NetScaler file parser crash. (CVE-2019-10895)
      - SRVLOC dissector crash. (CVE-2019-10899)
      - GSS-API dissector crash. (CVE-2019-10894)
      - DOF dissector crash. (CVE-2019-10896)
      - LDSS dissector crash. (CVE-2019-10901)
      - DCERPC SPOOLSS dissector crash. (CVE-2019-10903)

 -- Balint Reczey <rbalint@ubuntu.com>  Wed, 10 Apr 2019 15:58:16 +0200

wireshark (2.6.7-1) unstable; urgency=medium

  [ Balint Reczey ]
  * Drop unapplied backport-to-old-gnutls.patch
  * Ship captype and randpkt in wireshark-common (Closes: #919027)
  * Override a few Lintian issues
  * New upstream version 2.6.7
    - security fixes (Closes: #923611):
      - ASN.1 BER and related dissectors crash. (CVE-2019-9209)
      - TCAP dissector crash. (CVE-2019-9208)
      - RPCAP dissector crash. (CVE-2019-9214)

  [ Joe Hansen ]
  * Danish debconf translate translation update (Closes: #923064)

 -- Balint Reczey <rbalint@ubuntu.com>  Thu, 28 Feb 2019 12:29:35 +0100

wireshark (2.6.6-1) unstable; urgency=medium

  [ Jean-Philippe MENGUAL ]
  * French debconf translation update (Closes: #915161)

  [ Balint Reczey ]
  * New upstream version 2.6.6
    - security fixes:
      - The P_MUL dissector could crash. (CVE-2019-5717)
      - The RTSE dissector and other dissectors could crash. (CVE-2019-5718)
      - The ISAKMP dissector could crash. (CVE-2019-5719)
      - The 6LoWPAN dissector could crash. (CVE-2019-5716)
  * Mention GPLv3+ code snippet in tools/pidl/idl.yp (Closes: #918089)

 -- Balint Reczey <rbalint@ubuntu.com>  Wed, 09 Jan 2019 14:58:36 +0700

wireshark (2.6.5-1) unstable; urgency=medium

  * Add debian/gitlab-ci.yml
  * New upstream version 2.6.5
    - release notes:
      https://www.wireshark.org/docs/relnotes/wireshark-2.6.5.html
    - security fixes:
      - The Wireshark dissection engine could crash. (CVE-2018-19625)
      - The DCOM dissector could crash. (CVE-2018-19626)
      - The LBMPDM dissector could crash. (CVE-2018-19623)
      - The MMSE dissector could go into an infinite loop. (CVE-2018-19622)
      - The IxVeriWave file parser could crash. (CVE-2018-19627)
      - The PVFS dissector could crash. (CVE-2018-19624)
      - The ZigBee ZCL dissector could crash. (CVE-2018-19628)
  * Update symbols

 -- Balint Reczey <rbalint@ubuntu.com>  Thu, 29 Nov 2018 14:41:14 +0100

wireshark (2.6.4-2) unstable; urgency=medium

  [ nyov ]
  * Build and install mmdbresolve to make GeoIP-lookup work.
    (adds dependency on libmaxminddb) (Closes: #911567)

  [ Gregor Jasny ]
  * debian: libwireshark-dev must depend on libwiretap-dev
    because wireshark/epan/packet_info.h (libwireshark-dev)
    depends on wireshark/wiretap/wtap.h (libwiretap-dev)
    (LP: #1801666)

  [ Balint Reczey ]
  * Ship man page for mmdbresolve
  * debian/tests/gui: Redirect stderr to stdout because Lua prints to stderr
    making the test fail

 -- Balint Reczey <rbalint@ubuntu.com>  Thu, 08 Nov 2018 22:51:48 +0100

wireshark (2.6.4-1) unstable; urgency=medium

  [ Ondřej Nový ]
  * d/control: Removing redundant Priority field in binary package
  * d/changelog: Remove trailing whitespaces

  [ Balint Reczey ]
  * Install at-spi2-core in gui autopkgtest to avoid error messages
  * debian/test/gui: Ignore stderr from wireshark-gtk since upstream deprecated
    it and also start bigger virtual screen
  * New upstream version 2.6.4
    - release notes:
      https://www.wireshark.org/docs/relnotes/wireshark-2.6.4.html
    - security fixes:
      - MS-WSP dissector crash (CVE-2018-18227)
      - Steam IHS Discovery dissector memory leak (CVE-2018-18226)
      - CoAP dissector crash (CVE-2018-18225)
      - OpcUA dissector crash (CVE-2018-12086)

 -- Balint Reczey <rbalint@ubuntu.com>  Sat, 13 Oct 2018 19:47:47 +0200

# For older changelog entries, run 'apt-get changelog libwsutil9'
