Summary
[4.4.2-10.0.1.el10_2.8]
- Fix post script to not fail during initial installation [Orabug: 37565359]
[1:4.4.2-10.8]
- Fix Heap-based Buffer Overflow in Wireshark (CVE-2026-95389)
- Resolves: RHEL-272823
[1:4.4.2-10.7]
- Fix DoS via heap-based buffer overflow in SPDY dissector (CVE-2026-95387)
- Resolves: RHEL-272323
[1:4.4.2-10.6]
- Fix DoS via X.509IF protocol dissector crash (CVE-2026-76928)
- Resolves: RHEL-248365
[1:4.4.2-10.5]
- Fix DoS vulnerability in H.245 protocol dissector (CVE-2026-76927)
- Resolves: RHEL-257643
[1:4.4.2-10.4]
- Fix DoS vulnerability in ESS protocol dissector (CVE-2026-76919)
- Resolves: RHEL-257617
[1:4.4.2-10.3]
- Fix DoS via C12.22 protocol dissector crash (CVE-2026-76886)
- Resolves: RHEL-247382
[1:4.4.2-10.2]
- Fix DoS via RRC protocol dissector out-of-bounds write (CVE-2026-76880)
- Resolves: RHEL-245610
[1:4.4.2-10.1]
- Fix DoS via C12.22 protocol dissector crash (CVE-2026-76879)
- Resolves: RHEL-248209
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | wireshark | 1:4.4.2-10.0.1.el10_2.8 |
| Oracle Linux · 10 | wireshark-cli | 1:4.4.2-10.0.1.el10_2.8 |
| Oracle Linux · 10 | wireshark-devel | 1:4.4.2-10.0.1.el10_2.8 |
Vulnerabilities 8
-
High 8.1
Heap-based Buffer Overflow in Wireshark
C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
-
High 8.1
Heap-based Buffer Overflow in Wireshark
SPDY protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
-
High 8.1
Heap-based Buffer Overflow in Wireshark
SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
-
High 7.5
Stack-based Buffer Overflow in Wireshark
C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
-
High 7.5
Out-of-bounds Write in Wireshark
RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
-
High 7.5
NULL Pointer Dereference in Wireshark
X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
-
Medium 5.3
Use of Uninitialized Variable in Wireshark
ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
-
Medium 4.7
NULL Pointer Dereference in Wireshark
H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service