openSUSE-SU-2026:20151-1

Details

This update for wireshark fixes the following issues:

Update to Wireshark 4.4.13:

CVE-2025-11626: MONGO dissector infinite loop (bsc#1251933).
CVE-2025-13499: Kafka dissector crash (bsc#1254108).
CVE-2025-13945: HTTP3 dissector crash (bsc#1254471).
CVE-2025-13946: MEGACO dissector infinite loop (bsc#1254472).
CVE-2025-9817: SSH dissector crash (bsc#1249090).
CVE-2026-0959: IEEE 802.11 dissector crash (bsc#1256734).
CVE-2026-0961: BLF file parser crash (bsc#1256738).
CVE-2026-0962: SOME/IP-SD dissector crash (bsc#1256739).

Full changelog:

https://www.wireshark.org/docs/relnotes/wireshark-4.4.13.html

Affected Packages

libwireshark18

openSUSE Leap 16.0

Fixed in:

4.4.13-160000.1.1

libwiretap15

openSUSE Leap 16.0

Fixed in:

4.4.13-160000.1.1

libwsutil16

openSUSE Leap 16.0

Fixed in:

4.4.13-160000.1.1

wireshark

openSUSE Leap 16.0

Fixed in:

4.4.13-160000.1.1

wireshark-devel

openSUSE Leap 16.0

Fixed in:

4.4.13-160000.1.1

wireshark-ui-qt

openSUSE Leap 16.0

Fixed in:

4.4.13-160000.1.1

References

ADVISORY

REPORT

https://bugzilla.suse.com/1249090

REPORT

https://bugzilla.suse.com/1251933

REPORT

https://bugzilla.suse.com/1254108

REPORT

https://bugzilla.suse.com/1254471

REPORT

https://bugzilla.suse.com/1254472

REPORT

https://bugzilla.suse.com/1256734

REPORT

https://bugzilla.suse.com/1256738

REPORT

https://bugzilla.suse.com/1256739

WEB

https://www.suse.com/security/cve/CVE-2025-11626

WEB

https://www.suse.com/security/cve/CVE-2025-13499

WEB

https://www.suse.com/security/cve/CVE-2025-13945

WEB

https://www.suse.com/security/cve/CVE-2025-13946

WEB

https://www.suse.com/security/cve/CVE-2025-9817

WEB

https://www.suse.com/security/cve/CVE-2026-0959

WEB

https://www.suse.com/security/cve/CVE-2026-0961

WEB

https://www.suse.com/security/cve/CVE-2026-0962