ELSA-2026-20600

Опубликовано: 16 июл. 2026

Источник: oracle-oval

Платформа: Oracle Linux 10

Описание

ELSA-2026-20600: wireshark security update (IMPORTANT)

[4.4.2-10.0.1]

Fix post script to not fail during initial installation [Orabug: 37565359]

[1:4.4.2-10]

Resolves: RHEL-173221 - CVE-2026-5656 Improper Limitation of a Pathname to a Restricted Directory

[1:4.4.2-9]

Resolves: RHEL-173218 - CVE-2026-5405 Heap-based Buffer Overflow

[1:4.4.2-8]

Resolves: RHEL-152922 - CVE-2026-3203 Buffer Over-read

[1:4.4.2-7]

Resolves: RHEL-152913 - CVE-2026-3201 Improperly Controlled Sequential Memory Allocation

[1:4.4.2-6]

Resolves: RHEL-136919 - NULL Pointer Dereference in Wireshark (CVE-2025-9817)

[1:4.4.2-5]

Resolves: RHEL-130427 - Access of Uninitialized Pointer in Wireshark

Обновленные пакеты

Oracle Linux 10

Oracle Linux aarch64

wireshark

4.4.2-10.0.1.el10_2

wireshark-cli

4.4.2-10.0.1.el10_2

wireshark-devel

4.4.2-10.0.1.el10_2

Oracle Linux x86_64

wireshark

4.4.2-10.0.1.el10_2

wireshark-cli

4.4.2-10.0.1.el10_2

wireshark-devel

4.4.2-10.0.1.el10_2

Связанные CVE

CVE-2026-5405

CVE-2026-5656

Ссылки на источники

Связанные уязвимости

SUSE-SU-2026:2437-1

suse-cvrf

около 2 месяцев назад

Security update for wireshark

RLSA-2026:20600

rocky

около 2 месяцев назад

Important: wireshark security update

CVE-2026-5656

CVSS3: 7

ubuntu

3 месяца назад

Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

CVE-2026-5656

CVSS3: 7.8

redhat

3 месяца назад

Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

CVE-2026-5656

CVSS3: 7

nvd

3 месяца назад

Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution