[CLSA-2026:1785518972] wireshark: Fix of 5 CVEs
Type:
security
Severity:
Moderate
Release date:
2026-07-31 17:29:46 UTC
Description:
- backport the epan dissection-depth API (recursion checks) from upstream 3.6 - CVE-2026-5401: limit recursion depth in AFP Spotlight query dissection - CVE-2026-5406: limit FC-SWILS zone-object recursion depth - CVE-2026-5408: limit BitTorrent DHT bencoded list/dict recursion depth - CVE-2026-6538: prevent overflow and stack exhaustion in the BEEP dissector - CVE-2026-6527: guard cyclic open-type dissection in generated ASN.1 dissectors against unbounded recursion
Updated packages:
  • wireshark-3.4.10-7.el9_6.tuxcare.els8.x86_64.rpm
    sha:956c04037ebbaea81a192ec76d297424c4a1abe5a44d820569fc3ad10ef42ee5
  • wireshark-cli-3.4.10-7.el9_6.tuxcare.els8.i686.rpm
    sha:02c286bbb4988103f9a70273e532ccb3d940e5eb43e9f61d46571572775aa0f4
  • wireshark-cli-3.4.10-7.el9_6.tuxcare.els8.x86_64.rpm
    sha:2ab09869fc053bd78870674b472f6e64338a0e337af6c06ad4adf1c21ee792bc
  • wireshark-devel-3.4.10-7.el9_6.tuxcare.els8.i686.rpm
    sha:d684ebe26216ca37632aad121ad4515bc5d2f4df33f83a99c76ee600297e1567
  • wireshark-devel-3.4.10-7.el9_6.tuxcare.els8.x86_64.rpm
    sha:8ef6bcacad0d804f94e5de583a8559ace773046daf6c14bc43654a8d0fe5ac3d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.