SUSE-SU-2025:4440-1

Details

This update for wireshark fixes the following issues:

CVE-2025-13499: Fixed Kafka dissector crash due to malformed packet (bsc#1254108).
CVE-2025-13946: Fixed MEGACO dissector infinite loop that allows denial of service (bsc#1254472).

Affected Packages

SUSE:Linux Enterprise Module for Basesystem 15 SP7libwireshark17

Fixed in:

4.2.14-150600.18.32.1

SUSE:Linux Enterprise Module for Basesystem 15 SP7libwiretap14

Fixed in:

4.2.14-150600.18.32.1

SUSE:Linux Enterprise Module for Basesystem 15 SP7libwsutil15

Fixed in:

4.2.14-150600.18.32.1

SUSE:Linux Enterprise Module for Basesystem 15 SP7wireshark

Fixed in:

4.2.14-150600.18.32.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP7wireshark

Fixed in:

4.2.14-150600.18.32.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP7wireshark-devel

Fixed in:

4.2.14-150600.18.32.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP7wireshark-ui-qt

Fixed in:

4.2.14-150600.18.32.1

openSUSE:Leap 15.6libwireshark17

Fixed in:

4.2.14-150600.18.32.1

openSUSE:Leap 15.6libwiretap14

Fixed in:

4.2.14-150600.18.32.1

openSUSE:Leap 15.6libwsutil15

Fixed in:

4.2.14-150600.18.32.1

openSUSE:Leap 15.6wireshark

Fixed in:

4.2.14-150600.18.32.1

openSUSE:Leap 15.6wireshark-devel

Fixed in:

4.2.14-150600.18.32.1

openSUSE:Leap 15.6wireshark-ui-qt

Fixed in:

4.2.14-150600.18.32.1

References

REPORThttps://bugzilla.suse.com/1254108 REPORThttps://bugzilla.suse.com/1254472 WEBhttps://www.suse.com/security/cve/CVE-2025-13499 WEBhttps://www.suse.com/security/cve/CVE-2025-13946 ADVISORYhttps://www.suse.com/support/update/announcement/2025/suse-su-20254440-1/

SUSE-SU-2025:4440-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline