openSUSE-SU-2026:20151-1

See a problem?

Import Source

https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20151-1.json

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2026:20151-1

Upstream

CVE (8)

Related

CVE (8)

Published

2026-02-02T12:56:02Z

Modified

2026-03-23T04:54:46Z

Summary

Security update for wireshark

Details

This update for wireshark fixes the following issues:

Update to Wireshark 4.4.13:

CVE-2025-11626: MONGO dissector infinite loop (bsc#1251933).
CVE-2025-13499: Kafka dissector crash (bsc#1254108).
CVE-2025-13945: HTTP3 dissector crash (bsc#1254471).
CVE-2025-13946: MEGACO dissector infinite loop (bsc#1254472).
CVE-2025-9817: SSH dissector crash (bsc#1249090).
CVE-2026-0959: IEEE 802.11 dissector crash (bsc#1256734).
CVE-2026-0961: BLF file parser crash (bsc#1256738).
CVE-2026-0962: SOME/IP-SD dissector crash (bsc#1256739).

Full changelog:

https://www.wireshark.org/docs/relnotes/wireshark-4.4.13.html

References

Affected packages

openSUSE:Leap 16.0 / wireshark

Package

Name: wireshark
Purl: pkg:rpm/opensuse/wireshark&distro=openSUSE%20Leap%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.4.13-160000.1.1

Ecosystem specific

{
    "binaries":  [
        {
            "libwireshark18":  "4.4.13-160000.1.1",
            "libwiretap15":  "4.4.13-160000.1.1",
            "libwsutil16":  "4.4.13-160000.1.1",
            "wireshark":  "4.4.13-160000.1.1",
            "wireshark-devel":  "4.4.13-160000.1.1",
            "wireshark-ui-qt":  "4.4.13-160000.1.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20151-1.json"