{"id":"CLSA-2026-1785518972","summary":"wireshark: Fix of 5 CVEs","details":"- backport the epan dissection-depth API (recursion checks) from upstream 3.6\n- CVE-2026-5401: limit recursion depth in AFP Spotlight query dissection\n- CVE-2026-5406: limit FC-SWILS zone-object recursion depth\n- CVE-2026-5408: limit BitTorrent DHT bencoded list/dict recursion depth\n- CVE-2026-6538: prevent overflow and stack exhaustion in the BEEP dissector\n- CVE-2026-6527: guard cyclic open-type dissection in generated ASN.1 dissectors against unbounded recursion","modified":"2026-10-26T09:43:59.735259577Z","published":"2026-07-31T17:29:46Z","upstream":["CVE-2026-5401","CVE-2026-5406","CVE-2026-5408","CVE-2026-6527","CVE-2026-6538"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1785518972.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5401"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5406"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5408"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6527"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6538"}],"affected":[{"package":{"name":"wireshark","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/wireshark?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.4.10-7.el9_6.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1785518972.json"}},{"package":{"name":"wireshark-cli","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/wireshark-cli?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.4.10-7.el9_6.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1785518972.json"}},{"package":{"name":"wireshark-devel","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/wireshark-devel?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.4.10-7.el9_6.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1785518972.json"}}],"schema_version":"1.9.0"}