CLSA-2026-1785518972
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1785518972.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1785518972
- Upstream
- Published
- 2026-07-31T17:29:46Z
- Modified
- 2026-10-26T09:43:59Z
- Summary
- wireshark: Fix of 5 CVEs
- Details
-
- backport the epan dissection-depth API (recursion checks) from upstream 3.6
- CVE-2026-5401: limit recursion depth in AFP Spotlight query dissection
- CVE-2026-5406: limit FC-SWILS zone-object recursion depth
- CVE-2026-5408: limit BitTorrent DHT bencoded list/dict recursion depth
- CVE-2026-6538: prevent overflow and stack exhaustion in the BEEP dissector
- CVE-2026-6527: guard cyclic open-type dissection in generated ASN.1 dissectors against unbounded recursion
- References
-
- https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1785518972.html
- https://nvd.nist.gov/vuln/detail/CVE-2026-5401
- https://nvd.nist.gov/vuln/detail/CVE-2026-5406
- https://nvd.nist.gov/vuln/detail/CVE-2026-5408
- https://nvd.nist.gov/vuln/detail/CVE-2026-6527
- https://nvd.nist.gov/vuln/detail/CVE-2026-6538
Affected packages
TuxCare:AlmaLinux:9.6 / wireshark
Package
- Name
- wireshark
- Purl
- pkg:rpm/tuxcare/wireshark?distro=almalinux-9.6
TuxCare:AlmaLinux:9.6 / wireshark-cli
Package
- Name
- wireshark-cli
- Purl
- pkg:rpm/tuxcare/wireshark-cli?distro=almalinux-9.6