{"id":"CLSA-2026-1786479348","summary":"wireshark: Fix of 26 CVEs","details":"- Add wireshark-0019-epan-add-simple-recursion-checks.patch: backport the\n  increment/decrement_dissection_depth() API, a prerequisite for the\n  recursion-depth fixes below (3.4.10 has no such API)\n- CVE-2023-1994: GQUIC dissector: fix a NULL pointer dereference\n- CVE-2024-4853: editcap: do not memmove more than the allocated buffer holds\n- CVE-2024-4855: editcap, libwiretap: do not use the array of initial decryption\n  secrets after it has been freed\n- CVE-2026-15164: ciscodump: do not try to write more than PACKET_MAX_SIZE\n- CVE-2026-15167: DBS Etherwatch reader: keep buffer slack for an extra byte\n- CVE-2023-1993: LISP dissector: do not read past the LCAF payload length\n- CVE-2026-6867: SMB2 dissector: put bounds on total chained compression\n- CVE-2026-15172: FMP/NOTIFY dissector: stop precomputing the HandleList length\n- CVE-2026-15174: catapult-dct2000 dissector: cap the E-DCH no_ddi_entries\n  count at MAX_EDCH_DDIS\n- CVE-2026-5407: SMB2 dissector: check for offset overflow in two more places\n- CVE-2026-6534: USB HID dissector: skip items with a report size of zero\n- CVE-2026-6522: RPKI-RTR dissector: check for overflow in the unknown PDU\n  type case\n- CVE-2026-5404: K12 reader: fix a possible stack overflow when writing\n- CVE-2026-6529: iLBC codec plugin: report the proper decoded length in the\n  multiframe case\n- CVE-2026-6530: DCP-ETSI dissector: reject a Reed-Solomon reassembly whose\n  total size is not fcount * plen\n- CVE-2026-6870: GSM RP dissector: stop using a global for reassembly state\n- CVE-2026-6869: WebSocket dissector: put bounds on zlib decompression\n- CVE-2026-6521: OpenFlow v5 dissector: bound the OXM, action and match walks\n  so a crafted message cannot drive an infinite loop\n- CVE-2026-6526: HTTP dissector: check the strstr() results before\n  dereferencing them\n- CVE-2026-6532: kismet dissector: fix a heap buffer overflow\n- CVE-2026-5401: AFP Spotlight dissector: add recursion checks\n- CVE-2026-5406: fcswils dissector: add recursion checks\n- CVE-2026-5408: BT DHT dissector: add recursion checks\n- CVE-2026-6538: BEEP dissector: prevent overflow and add recursion checks\n- CVE-2026-6527: asn2wrs and the generated ASN.1 dissectors: treat open types\n  as potentially cyclic and add recursion checks\n- CVE-2026-6535: epan: fix potential overflows in zlib decompression","modified":"2026-10-26T09:43:28.414107852Z","published":"2026-08-11T20:16:23Z","upstream":["CVE-2023-1993","CVE-2023-1994","CVE-2024-4853","CVE-2024-4855","CVE-2026-15164","CVE-2026-15167","CVE-2026-15172","CVE-2026-15174","CVE-2026-5401","CVE-2026-5404","CVE-2026-5406","CVE-2026-5407","CVE-2026-5408","CVE-2026-6521","CVE-2026-6522","CVE-2026-6526","CVE-2026-6527","CVE-2026-6529","CVE-2026-6530","CVE-2026-6532","CVE-2026-6534","CVE-2026-6535","CVE-2026-6538","CVE-2026-6867","CVE-2026-6869","CVE-2026-6870"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1786479348.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1993"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1994"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4853"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4855"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15164"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15167"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15172"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15174"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5401"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5404"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5406"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5407"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5408"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6521"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6522"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6526"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6527"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6529"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6530"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6532"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6534"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6535"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6538"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6867"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6869"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6870"}],"affected":[{"package":{"name":"wireshark","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/wireshark?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.4.10-4.el9_2.tuxcare.els13"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1786479348.json"}},{"package":{"name":"wireshark-cli","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/wireshark-cli?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.4.10-4.el9_2.tuxcare.els13"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1786479348.json"}},{"package":{"name":"wireshark-devel","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/wireshark-devel?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.4.10-4.el9_2.tuxcare.els13"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1786479348.json"}}],"schema_version":"1.9.0"}