Wireshark-users: Re: [Wireshark-users] wnpa-sec-2017-04 and 2.0.12

From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
Date: Tue, 18 Apr 2017 17:44:32 +0200
> On 17 Apr 2017, at 18:14, Joshua Brown <jmbrown@xxxxxxxxxxx> wrote:
> 
> Greetings,
> 
> The release notes for 2.0.12 ( https://www.wireshark.org/docs/relnotes/wireshark-2.0.12.html ) show that wnpa-sec-2017-04 is listed a fixed issue. However, that does not match with the content of the page for wnpa-sec-2017-04 ( https://www.wireshark.org/security/wnpa-sec-2017-04.html ), which indicates the issue was fixed in versions 2.2.5 and 2.0.11 .
> 
> Is this just a case of a simple typo on the 2.0.12 release notes page?
> 
> Thanks!
> 

Looking at the branches involved (see the comments in https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13347) it seems that the wnpa-sec-2017-04 advisory is a tad optimistic. I recon that the fix was indeed included in 2.0.12.

Thanks,
Jaap