From 470edc2923f285669e34a57cd223fd37ef25d9a2 Mon Sep 17 00:00:00 2001 From: Thomas Perale Date: Mon, 16 Mar 2026 12:37:16 +0100 Subject: [PATCH] package/wireshark: security bump to v4.2.14 For more information on the version bump, see: - https://www.wireshark.org/docs/relnotes/wireshark-4.2.14.html Fixes the following vulnerability: - CVE-2025-11626: MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of service For more information, see: - https://www.cve.org/CVERecord?id=CVE-2025-11626 (cherry picked from commit 2aaeb10bce055d63ea0855914a8fbac4f6390611) Signed-off-by: Thomas Perale --- package/wireshark/wireshark.hash | 6 +++--- package/wireshark/wireshark.mk | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package/wireshark/wireshark.hash b/package/wireshark/wireshark.hash index f1f2f58442..521fea662c 100644 --- a/package/wireshark/wireshark.hash +++ b/package/wireshark/wireshark.hash @@ -1,6 +1,6 @@ -# From https://www.wireshark.org/download/src/all-versions/SIGNATURES-4.2.13.txt -sha1 e5a08396a98d5dfba4078c66677aacd50d47ec90 wireshark-4.2.13.tar.xz -sha256 2454aa650276264d23aca28e1b62eb5d4bd12b64aa261d38c06b33f97b8fa3dd wireshark-4.2.13.tar.xz +# From https://www.wireshark.org/download/src/all-versions/SIGNATURES-4.2.14.txt +sha1 e972062abc0d15db34c3a0186c39511efb29ea34 wireshark-4.2.14.tar.xz +sha256 098177f021951638f5bdca5b01f284c14fcc3f6c804f7aa2ca00fdcb99c7a166 wireshark-4.2.14.tar.xz # Locally calculated sha256 edaef632cbb643e4e7a221717a6c441a4c1a7c918e6e4d56debc3d8739b233f6 COPYING diff --git a/package/wireshark/wireshark.mk b/package/wireshark/wireshark.mk index bd81224ae7..3a92c4cfa4 100644 --- a/package/wireshark/wireshark.mk +++ b/package/wireshark/wireshark.mk @@ -4,7 +4,7 @@ # ################################################################################ -WIRESHARK_VERSION = 4.2.13 +WIRESHARK_VERSION = 4.2.14 WIRESHARK_SOURCE = wireshark-$(WIRESHARK_VERSION).tar.xz WIRESHARK_SITE = https://www.wireshark.org/download/src/all-versions WIRESHARK_LICENSE = wireshark license