[Git][security-tracker-team/security-tracker][master] wireshark DSA
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Thu Aug 27 09:51:38 BST 2026
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
f5840079 by Moritz Mühlenhoff at 2026-08-27T10:50:59+02:00
wireshark DSA
- - - - -
3 changed files:
- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -53950,7 +53950,6 @@ CVE-2026-31309 (Improper authorization in the /tequilapi/config/user endpoint of
NOT-FOR-US: Mysterium Node
CVE-2026-15174 (Catapult DCT2000 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 ...)
- wireshark <unfixed> (bug #1142268)
- [trixie] - wireshark <no-dsa> (Minor issue)
NOTE: https://www.wireshark.org/security/wnpa-sec-2026-52.html
CVE-2026-15173 (pcapng file parser crash in Wireshark 4.6.0 to 4.6.6 allows denial of ...)
- wireshark <unfixed> (bug #1142268)
@@ -53960,31 +53959,24 @@ CVE-2026-15173 (pcapng file parser crash in Wireshark 4.6.0 to 4.6.6 allows deni
NOTE: https://www.wireshark.org/security/wnpa-sec-2026-53.html
CVE-2026-15172 (FMP/NOTIFY protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4. ...)
- wireshark <unfixed> (bug #1142268)
- [trixie] - wireshark <no-dsa> (Minor issue)
NOTE: https://www.wireshark.org/security/wnpa-sec-2026-54.html
CVE-2026-15171 (SSH protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to ...)
- wireshark <unfixed> (bug #1142268)
- [trixie] - wireshark <no-dsa> (Minor issue)
NOTE: https://www.wireshark.org/security/wnpa-sec-2026-55.html
CVE-2026-15170 (Z39.50 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 ...)
- wireshark <unfixed> (bug #1142268)
- [trixie] - wireshark <no-dsa> (Minor issue)
NOTE: https://www.wireshark.org/security/wnpa-sec-2026-58.html
CVE-2026-15169 (UMTS FP protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 ...)
- wireshark <unfixed> (bug #1142268)
- [trixie] - wireshark <no-dsa> (Minor issue)
NOTE: https://www.wireshark.org/security/wnpa-sec-2026-59.html
CVE-2026-15168 (BLF file parser in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows ...)
- wireshark <unfixed> (bug #1142268)
- [trixie] - wireshark <no-dsa> (Minor issue)
NOTE: https://www.wireshark.org/security/wnpa-sec-2026-60.html
CVE-2026-15167 (DBS Etherwatch file parser crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 ...)
- wireshark <unfixed> (bug #1142268)
- [trixie] - wireshark <no-dsa> (Minor issue)
NOTE: https://www.wireshark.org/security/wnpa-sec-2026-62.html
CVE-2026-15166 (IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4 ...)
- wireshark <unfixed> (bug #1142268)
- [trixie] - wireshark <no-dsa> (Minor issue)
NOTE: https://www.wireshark.org/security/wnpa-sec-2026-57.html
CVE-2026-15165 (TLS ECH decryptor crash in Wireshark 4.6.0 to 4.6.6 allows denial of s ...)
- wireshark <unfixed> (bug #1142268)
@@ -53994,11 +53986,9 @@ CVE-2026-15165 (TLS ECH decryptor crash in Wireshark 4.6.0 to 4.6.6 allows denia
NOTE: https://www.wireshark.org/security/wnpa-sec-2026-56.html
CVE-2026-15164 (Crash in ciscodump 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of ...)
- wireshark <unfixed> (bug #1142268)
- [trixie] - wireshark <no-dsa> (Minor issue)
NOTE: https://www.wireshark.org/security/wnpa-sec-2026-63.html
CVE-2026-15163 (Multiple protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.6 ...)
- wireshark <unfixed> (bug #1142268)
- [trixie] - wireshark <no-dsa> (Minor issue)
NOTE: https://www.wireshark.org/security/wnpa-sec-2026-61.html
CVE-2026-15154 (A flaw was found in `guardrails-detectors`, a component of Red Hat Ope ...)
NOT-FOR-US: Red Hat OpenShift AI
=====================================
data/DSA/list
=====================================
@@ -1,3 +1,6 @@
+[27 Aug 2026] DSA-6471-1 wireshark - security update
+ {CVE-2026-15163 CVE-2026-15164 CVE-2026-15166 CVE-2026-15167 CVE-2026-15168 CVE-2026-15169 CVE-2026-15170 CVE-2026-15171 CVE-2026-15172 CVE-2026-15174 CVE-2026-76879 CVE-2026-76880 CVE-2026-76881 CVE-2026-76882 CVE-2026-76883 CVE-2026-76884 CVE-2026-76885 CVE-2026-76886 CVE-2026-76887 CVE-2026-76888 CVE-2026-76889 CVE-2026-76890 CVE-2026-76891 CVE-2026-76917 CVE-2026-76918 CVE-2026-76919 CVE-2026-76920 CVE-2026-76921 CVE-2026-76922 CVE-2026-76923 CVE-2026-76924 CVE-2026-76926 CVE-2026-76927 CVE-2026-76928 CVE-2026-76929}
+ [trixie] - wireshark 4.4.18-0+deb13u1
[27 Aug 2026] DSA-6470-1 gimp - security update
{CVE-2026-18301 CVE-2026-18302 CVE-2026-18303 CVE-2026-18304 CVE-2026-18305 CVE-2026-18306 CVE-2026-18307 CVE-2026-18308 CVE-2026-42170 CVE-2026-58379 CVE-2026-58380 CVE-2026-58381 CVE-2026-58384 CVE-2026-59088 CVE-2026-59090 CVE-2026-66758 CVE-2026-66759}
[trixie] - gimp 3.0.4-3+deb13u10
=====================================
data/dsa-needed.txt
=====================================
@@ -172,9 +172,6 @@ vips
weechat
Upstream recommends to use branch from https://github.com/weechat/weechat/commits/4.6/, cf #1142597
--
-wireshark (jmm)
- Matheus Polkorny prepared an update for review, https://salsa.debian.org/debian/wireshark/-/merge_requests/8
---
wordpress
--
xorg-server
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f5840079300574c1709c1ac350233539356d230d
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f5840079300574c1709c1ac350233539356d230d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260827/21f683dd/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list