CLSA-2026-1786479348
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1786479348.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1786479348
- Upstream
CVE (26)
- CVE-2023-1993
- CVE-2023-1994
- CVE-2024-4853
- CVE-2024-4855
- CVE-2026-15164
- CVE-2026-15167
- CVE-2026-15172
- CVE-2026-15174
- CVE-2026-5401
- CVE-2026-5404
- CVE-2026-5406
- CVE-2026-5407
- CVE-2026-5408
- CVE-2026-6521
- CVE-2026-6522
- CVE-2026-6526
- CVE-2026-6527
- CVE-2026-6529
- CVE-2026-6530
- CVE-2026-6532
- CVE-2026-6534
- CVE-2026-6535
- CVE-2026-6538
- CVE-2026-6867
- CVE-2026-6869
- CVE-2026-6870
- Published
- 2026-08-11T20:16:23Z
- Modified
- 2026-10-26T09:43:28Z
- Summary
- wireshark: Fix of 26 CVEs
- Details
-
- Add wireshark-0019-epan-add-simple-recursion-checks.patch: backport the increment/decrement_dissection_depth() API, a prerequisite for the recursion-depth fixes below (3.4.10 has no such API)
- CVE-2023-1994: GQUIC dissector: fix a NULL pointer dereference
- CVE-2024-4853: editcap: do not memmove more than the allocated buffer holds
- CVE-2024-4855: editcap, libwiretap: do not use the array of initial decryption secrets after it has been freed
- CVE-2026-15164: ciscodump: do not try to write more than PACKET_MAX_SIZE
- CVE-2026-15167: DBS Etherwatch reader: keep buffer slack for an extra byte
- CVE-2023-1993: LISP dissector: do not read past the LCAF payload length
- CVE-2026-6867: SMB2 dissector: put bounds on total chained compression
- CVE-2026-15172: FMP/NOTIFY dissector: stop precomputing the HandleList length
- CVE-2026-15174: catapult-dct2000 dissector: cap the E-DCH no_ddi_entries count at MAX_EDCH_DDIS
- CVE-2026-5407: SMB2 dissector: check for offset overflow in two more places
- CVE-2026-6534: USB HID dissector: skip items with a report size of zero
- CVE-2026-6522: RPKI-RTR dissector: check for overflow in the unknown PDU type case
- CVE-2026-5404: K12 reader: fix a possible stack overflow when writing
- CVE-2026-6529: iLBC codec plugin: report the proper decoded length in the multiframe case
- CVE-2026-6530: DCP-ETSI dissector: reject a Reed-Solomon reassembly whose total size is not fcount * plen
- CVE-2026-6870: GSM RP dissector: stop using a global for reassembly state
- CVE-2026-6869: WebSocket dissector: put bounds on zlib decompression
- CVE-2026-6521: OpenFlow v5 dissector: bound the OXM, action and match walks so a crafted message cannot drive an infinite loop
- CVE-2026-6526: HTTP dissector: check the strstr() results before dereferencing them
- CVE-2026-6532: kismet dissector: fix a heap buffer overflow
- CVE-2026-5401: AFP Spotlight dissector: add recursion checks
- CVE-2026-5406: fcswils dissector: add recursion checks
- CVE-2026-5408: BT DHT dissector: add recursion checks
- CVE-2026-6538: BEEP dissector: prevent overflow and add recursion checks
- CVE-2026-6527: asn2wrs and the generated ASN.1 dissectors: treat open types as potentially cyclic and add recursion checks
- CVE-2026-6535: epan: fix potential overflows in zlib decompression
- References
-
- https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1786479348.html
- https://nvd.nist.gov/vuln/detail/CVE-2023-1993
- https://nvd.nist.gov/vuln/detail/CVE-2023-1994
- https://nvd.nist.gov/vuln/detail/CVE-2024-4853
- https://nvd.nist.gov/vuln/detail/CVE-2024-4855
- https://nvd.nist.gov/vuln/detail/CVE-2026-15164
- https://nvd.nist.gov/vuln/detail/CVE-2026-15167
- https://nvd.nist.gov/vuln/detail/CVE-2026-15172
- https://nvd.nist.gov/vuln/detail/CVE-2026-15174
- https://nvd.nist.gov/vuln/detail/CVE-2026-5401
- https://nvd.nist.gov/vuln/detail/CVE-2026-5404
- https://nvd.nist.gov/vuln/detail/CVE-2026-5406
- https://nvd.nist.gov/vuln/detail/CVE-2026-5407
- https://nvd.nist.gov/vuln/detail/CVE-2026-5408
- https://nvd.nist.gov/vuln/detail/CVE-2026-6521
- https://nvd.nist.gov/vuln/detail/CVE-2026-6522
- https://nvd.nist.gov/vuln/detail/CVE-2026-6526
- https://nvd.nist.gov/vuln/detail/CVE-2026-6527
- https://nvd.nist.gov/vuln/detail/CVE-2026-6529
- https://nvd.nist.gov/vuln/detail/CVE-2026-6530
- https://nvd.nist.gov/vuln/detail/CVE-2026-6532
- https://nvd.nist.gov/vuln/detail/CVE-2026-6534
- https://nvd.nist.gov/vuln/detail/CVE-2026-6535
- https://nvd.nist.gov/vuln/detail/CVE-2026-6538
- https://nvd.nist.gov/vuln/detail/CVE-2026-6867
- https://nvd.nist.gov/vuln/detail/CVE-2026-6869
- https://nvd.nist.gov/vuln/detail/CVE-2026-6870
Affected packages
TuxCare:AlmaLinux:9.2 / wireshark
Package
- Name
- wireshark
- Purl
- pkg:rpm/tuxcare/wireshark?distro=almalinux-9.2
TuxCare:AlmaLinux:9.2 / wireshark-cli
Package
- Name
- wireshark-cli
- Purl
- pkg:rpm/tuxcare/wireshark-cli?distro=almalinux-9.2