From 6b94ee9448d32137d1719352286c04c3b1fa415b Mon Sep 17 00:00:00 2001 From: Giulio Benetti Date: Sun, 27 Sep 2026 10:53:08 +0200 Subject: [PATCH] package/wireshark: security bump to v4.4.19 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Fixes the following vulnerabilities: - wnpa-sec-2026-93 · SCTP protocol dissector crash. https://www.wireshark.org/security/wnpa-sec-2026-93 CVE-2026-95389. - wnpa-sec-2026-96 · IEEE C37.118 Synchrophasor protocol dissector memory leak. https://www.wireshark.org/security/wnpa-sec-2026-96 CVE-2026-95395. - wnpa-sec-2026-97 · SPDY protocol dissector crash. https://www.wireshark.org/security/wnpa-sec-2026-97 CVE-2026-95387. - wnpa-sec-2026-98 · Microsoft Network Monitor file parser large loop. https://www.wireshark.org/security/wnpa-sec-2026-98 CVE-2026-95394. - wnpa-sec-2026-99 · CSN.1 protocol dissector crash. https://www.wireshark.org/security/wnpa-sec-2026-99 CVE-2026-95393. - wnpa-sec-2026-100 · MBIM protocol dissector crash. wsbuglink:21549, https://www.wireshark.org/security/wnpa-sec-2026-100 CVE-2026-95392. - wnpa-sec-2026-101 · Sharkd utility crash. https://www.wireshark.org/security/wnpa-sec-2026-101 CVE-2026-95388. - wnpa-sec-2026-102 · Frame protocol metadissector crash. https://www.wireshark.org/security/wnpa-sec-2026-102 CVE-2026-96422. - wnpa-sec-2026-103 · USB HID protocol dissector infinite loop and memory leak. https://www.wireshark.org/security/wnpa-sec-2026-103 CVE-2026-96421. - wnpa-sec-2026-104 · RF4CE protocol dissector crash. https://www.wireshark.org/security/wnpa-sec-2026-104 CVE-2026-96417. - wnpa-sec-2026-105 · Toshiba file parser crash. https://www.wireshark.org/security/wnpa-sec-2026-105 CVE-2026-xxx. - wnpa-sec-2026-106 · Profile import crash and possible code execution. https://www.wireshark.org/security/wnpa-sec-2026-106 CVE-2026-96419. - wnpa-sec-2026-107 · TIFF protocol dissector infinite loop. https://www.wireshark.org/security/wnpa-sec-2026-107 CVE-2026-96418. - wnpa-sec-2026-108 · X11 protocol dissector crash. https://www.wireshark.org/security/wnpa-sec-2026-108 CVE-2026-96423. - wnpa-sec-2026-109 · IEEE 802.11 protocol dissector crash. https://www.wireshark.org/security/wnpa-sec-2026-109 CVE-2026-96416. - wnpa-sec-2026-110 · Catapult DCT2000 protocol dissector crash. https://www.wireshark.org/security/wnpa-sec-2026-110 CVE-2026-96415. For more information on the version bump, see: - https://www.wireshark.org/docs/relnotes/wireshark-4.4.19.html Signed-off-by: Giulio Benetti Signed-off-by: Julien Olivain (cherry picked from commit 633d368bae51b20081e31d5d8925705e62f806ef) Signed-off-by: Raphaël Mélotte --- package/wireshark/wireshark.hash | 6 +++--- package/wireshark/wireshark.mk | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package/wireshark/wireshark.hash b/package/wireshark/wireshark.hash index 3d8fdb6131..b17f4bcf17 100644 --- a/package/wireshark/wireshark.hash +++ b/package/wireshark/wireshark.hash @@ -1,6 +1,6 @@ -# From https://www.wireshark.org/download/src/all-versions/SIGNATURES-4.4.18.txt -sha1 482fecbe21a876f53a26bf5beaa5b0ee0ad16e50 wireshark-4.4.18.tar.xz -sha256 f77a7939983758383797fed0a34a491f785e541cca397a7a44e9cdd7c6f847c6 wireshark-4.4.18.tar.xz +# From https://www.wireshark.org/download/src/all-versions/SIGNATURES-4.4.19.txt +sha1 46c2805407197048d90dc7eac9f0a4a19d13815a wireshark-4.4.19.tar.xz +sha256 0499dddc0aeea500bc65196714e1e01097742efbc479a2d67a9a8b5dd57d6d04 wireshark-4.4.19.tar.xz # Locally calculated sha256 edaef632cbb643e4e7a221717a6c441a4c1a7c918e6e4d56debc3d8739b233f6 COPYING diff --git a/package/wireshark/wireshark.mk b/package/wireshark/wireshark.mk index c500a49336..a67b915b5b 100644 --- a/package/wireshark/wireshark.mk +++ b/package/wireshark/wireshark.mk @@ -4,7 +4,7 @@ # ################################################################################ -WIRESHARK_VERSION = 4.4.18 +WIRESHARK_VERSION = 4.4.19 WIRESHARK_SOURCE = wireshark-$(WIRESHARK_VERSION).tar.xz WIRESHARK_SITE = https://www.wireshark.org/download/src/all-versions WIRESHARK_LICENSE = wireshark license