{"id":"CLSA-2026-1785491682","summary":"wireshark: Fix of 28 CVEs","details":"- CVE-2026-15172: do not precompute the FMP/NOTIFY handle list length to avoid an integer overflow\n- CVE-2026-15174: cap E-DCH DDI entries at MAX_EDCH_DDIS in the Catapult DCT2000 dissector\n- CVE-2026-5407: check for offset overflow in SMB2 EA info and notify data dissection\n- CVE-2026-6534: skip USB HID items with a report size of zero to prevent an infinite loop\n- CVE-2026-6533: sanity check the LZ77 uncompression size\n- CVE-2026-6522: check for offset overflow on unknown RPKI-RTR PDU types to prevent an infinite loop\n- CVE-2026-5404: fix a stack buffer overflow when writing K12 source descriptor records\n- CVE-2026-6529: report the proper iLBC decoded length for multi-frame payloads\n- CVE-2026-6530: require equal-size fragments for DCP ETSI Reed-Solomon reassembly\n- CVE-2026-6870: stop using a global tree pointer in the GSM RP dissector\n- CVE-2026-6869: bound WebSocket permessage-deflate decompression buffer growth\n- CVE-2026-6521: prevent infinite loops in OpenFlow v5 action and table description dissection\n- CVE-2026-6526: check the strstr() result when resolving HTTP Location targets to avoid a crash\n- CVE-2026-6532: fix a heap buffer overflow in the Kismet dissector\n- CVE-2026-15163: advance dissection offsets in the MIH, MPEG DSM-CC, eDonkey and MEGACO dissectors to prevent infinite loops","modified":"2026-10-26T09:43:11.763554498Z","published":"2026-07-31T09:55:15Z","upstream":["CVE-2026-15163","CVE-2026-15172","CVE-2026-15174","CVE-2026-5404","CVE-2026-5407","CVE-2026-6521","CVE-2026-6522","CVE-2026-6526","CVE-2026-6529","CVE-2026-6530","CVE-2026-6532","CVE-2026-6533","CVE-2026-6534","CVE-2026-6869","CVE-2026-6870"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1785491682.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1992"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1993"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1994"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4853"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4855"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11626"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15163"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15164"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15167"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15169"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15172"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15174"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5404"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5407"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5653"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6520"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6521"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6522"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6526"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6529"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6530"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6532"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6533"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6534"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6867"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6869"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6870"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7378"}],"affected":[{"package":{"name":"wireshark","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/wireshark?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.4.10-7.el9_6.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1785491682.json"}},{"package":{"name":"wireshark-cli","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/wireshark-cli?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.4.10-7.el9_6.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1785491682.json"}},{"package":{"name":"wireshark-devel","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/wireshark-devel?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.4.10-7.el9_6.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1785491682.json"}}],"schema_version":"1.9.0"}