CLSA-2026-1785491682
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1785491682.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1785491682
- Upstream
- Published
- 2026-07-31T09:55:15Z
- Modified
- 2026-10-26T09:43:11Z
- Summary
- wireshark: Fix of 28 CVEs
- Details
-
- CVE-2026-15172: do not precompute the FMP/NOTIFY handle list length to avoid an integer overflow
- CVE-2026-15174: cap E-DCH DDI entries at MAX_EDCH_DDIS in the Catapult DCT2000 dissector
- CVE-2026-5407: check for offset overflow in SMB2 EA info and notify data dissection
- CVE-2026-6534: skip USB HID items with a report size of zero to prevent an infinite loop
- CVE-2026-6533: sanity check the LZ77 uncompression size
- CVE-2026-6522: check for offset overflow on unknown RPKI-RTR PDU types to prevent an infinite loop
- CVE-2026-5404: fix a stack buffer overflow when writing K12 source descriptor records
- CVE-2026-6529: report the proper iLBC decoded length for multi-frame payloads
- CVE-2026-6530: require equal-size fragments for DCP ETSI Reed-Solomon reassembly
- CVE-2026-6870: stop using a global tree pointer in the GSM RP dissector
- CVE-2026-6869: bound WebSocket permessage-deflate decompression buffer growth
- CVE-2026-6521: prevent infinite loops in OpenFlow v5 action and table description dissection
- CVE-2026-6526: check the strstr() result when resolving HTTP Location targets to avoid a crash
- CVE-2026-6532: fix a heap buffer overflow in the Kismet dissector
- CVE-2026-15163: advance dissection offsets in the MIH, MPEG DSM-CC, eDonkey and MEGACO dissectors to prevent infinite loops
- References
-
- https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1785491682.html
- https://nvd.nist.gov/vuln/detail/CVE-2023-1992
- https://nvd.nist.gov/vuln/detail/CVE-2023-1993
- https://nvd.nist.gov/vuln/detail/CVE-2023-1994
- https://nvd.nist.gov/vuln/detail/CVE-2024-4853
- https://nvd.nist.gov/vuln/detail/CVE-2024-4855
- https://nvd.nist.gov/vuln/detail/CVE-2025-11626
- https://nvd.nist.gov/vuln/detail/CVE-2026-15163
- https://nvd.nist.gov/vuln/detail/CVE-2026-15164
- https://nvd.nist.gov/vuln/detail/CVE-2026-15167
- https://nvd.nist.gov/vuln/detail/CVE-2026-15169
- https://nvd.nist.gov/vuln/detail/CVE-2026-15172
- https://nvd.nist.gov/vuln/detail/CVE-2026-15174
- https://nvd.nist.gov/vuln/detail/CVE-2026-5404
- https://nvd.nist.gov/vuln/detail/CVE-2026-5407
- https://nvd.nist.gov/vuln/detail/CVE-2026-5653
- https://nvd.nist.gov/vuln/detail/CVE-2026-6520
- https://nvd.nist.gov/vuln/detail/CVE-2026-6521
- https://nvd.nist.gov/vuln/detail/CVE-2026-6522
- https://nvd.nist.gov/vuln/detail/CVE-2026-6526
- https://nvd.nist.gov/vuln/detail/CVE-2026-6529
- https://nvd.nist.gov/vuln/detail/CVE-2026-6530
- https://nvd.nist.gov/vuln/detail/CVE-2026-6532
- https://nvd.nist.gov/vuln/detail/CVE-2026-6533
- https://nvd.nist.gov/vuln/detail/CVE-2026-6534
- https://nvd.nist.gov/vuln/detail/CVE-2026-6867
- https://nvd.nist.gov/vuln/detail/CVE-2026-6869
- https://nvd.nist.gov/vuln/detail/CVE-2026-6870
- https://nvd.nist.gov/vuln/detail/CVE-2026-7378
Affected packages
TuxCare:AlmaLinux:9.6 / wireshark
Package
- Name
- wireshark
- Purl
- pkg:rpm/tuxcare/wireshark?distro=almalinux-9.6
TuxCare:AlmaLinux:9.6 / wireshark-cli
Package
- Name
- wireshark-cli
- Purl
- pkg:rpm/tuxcare/wireshark-cli?distro=almalinux-9.6