Summary
[4.4.2-10.0.1]
- Fix post script to not fail during initial installation [Orabug: 37565359]
[1:4.4.2-10]
- Resolves: RHEL-173221 - CVE-2026-5656 Improper Limitation of a Pathname to a Restricted Directory
[1:4.4.2-9]
- Resolves: RHEL-173218 - CVE-2026-5405 Heap-based Buffer Overflow
[1:4.4.2-8]
- Resolves: RHEL-152922 - CVE-2026-3203 Buffer Over-read
[1:4.4.2-7]
- Resolves: RHEL-152913 - CVE-2026-3201 Improperly Controlled Sequential Memory Allocation
[1:4.4.2-6]
- Resolves: RHEL-136919 - NULL Pointer Dereference in Wireshark (CVE-2025-9817)
[1:4.4.2-5]
- Resolves: RHEL-130427 - Access of Uninitialized Pointer in Wireshark
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | wireshark | 1:4.4.2-10.0.1.el10_2 |
| Oracle Linux · 10 | wireshark-cli | 1:4.4.2-10.0.1.el10_2 |
| Oracle Linux · 10 | wireshark-devel | 1:4.4.2-10.0.1.el10_2 |
Vulnerabilities 2
-
High 7.8
Heap-based Buffer Overflow in Wireshark
RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution
-
High 7.0
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark
Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution