From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4hr8k13cnCz2xVL for ; Thu, 24 Sep 2026 10:11:05 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (secp384r1 raw public key) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "YR2" (not verified)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4hr8jy0gt8z2xJ1 for ; Thu, 24 Sep 2026 10:11:02 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4hr8jx03nczQC; Thu, 24 Sep 2026 10:11:00 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1790244661; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=86UWKE4zvkgBBxHLDOaNUjKk4I5ct3KEzOaUK+559+0=; b=U6V1LJQxoxksdmi1zCQGnmS3BqogJVkhDn6besRKrUlN5DIhsp75BE36DR6AhORNC9NACc xfb2O6BQaoKHi+Cw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1790244661; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=86UWKE4zvkgBBxHLDOaNUjKk4I5ct3KEzOaUK+559+0=; b=NNFAyTMgIiFKUoKZYOJG1vHofs9kVyGqH+zXaodoIo+WIcffrSNcXZbykdWMNsj5MIMqwt 4xQK4AdNqWR1yJSQGdgXOMVKhAXbmaFErK0ToAOkZU2Z4tdy4h948dhPG05e5yyQM4D034 JZpqHbDx//ml1HWUSO2un9S6qO/ecLI4nCHkDCu+8JNwefEkNP2MGOO2R0VwCej/gPvP9H vNE0ltwX35cirNwEEWvYeW34IMZbTa6Focb81n/35O3ZhJkODQWhZKeFCMHfoI/piw8P5/ FBozTevuajeseMFJToCDqjrhx0FFQ3cB2tU42D6za2wpFloIbdW4tVGc85J66g== From: Adolf Belka To: development@lists.ipfire.org Cc: Adolf Belka Subject: [PATCH] tshark: Update to version 4.6.9 Date: Thu, 24 Sep 2026 12:10:57 +0200 Message-ID: <20260924101058.3414142-1-adolf.belka@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit - Update from version 4.6.8 to 4.6.9 - Update of rootfile - 19 CVE and 3 Zero Day Initiative (ZDI) vulnerability fixes applied - Changelog 4.6.9 Bug Fixes wnpa-sec-2026-92 ZigBee ZCL protocol dissector crash. CVE-2026-95391. wnpa-sec-2026-93 SCTP protocol dissector crash. Issue 21481. CVE-2026-95389. wnpa-sec-2026-94 TTL file parser infinite loop. Issue 21501. CVE-2026-95386. wnpa-sec-2026-95 PEAK CAN TRC file parser crash. Issue 21503. CVE-2026-95390. wnpa-sec-2026-96 IEEE C37.118 Synchrophasor protocol dissector memory leak. Issue 21492. CVE-2026-95395. wnpa-sec-2026-97 SPDY protocol dissector crash. Issue 21487. CVE-2026-95387. wnpa-sec-2026-98 Microsoft Network Monitor file parser large loop. Issue 21523. CVE-2026-95394. wnpa-sec-2026-99 CSN.1 protocol dissector crash. Issue 21510. CVE-2026-95393. wnpa-sec-2026-100 MBIM protocol dissector crash. wsbuglink:21549, Issue 21550. CVE-2026-95392. wnpa-sec-2026-101 Sharkd utility crash. Issue 21545. CVE-2026-95388. wnpa-sec-2026-102 Frame protocol metadissector crash. Issue 21525. CVE-2026-96422. wnpa-sec-2026-103 USB HID protocol dissector infinite loop and memory leak. Issue 21566. CVE-2026-96421. wnpa-sec-2026-104 RF4CE protocol dissector crash. Issue 21574. CVE-2026-96417. wnpa-sec-2026-105 Toshiba file parser crash. Issue 21541. CVE-2026-96420. wnpa-sec-2026-106 Profile import crash and possible code execution. Issue 21553. CVE-2026-96419. wnpa-sec-2026-107 TIFF protocol dissector infinite loop. Issue 21565. CVE-2026-96418. wnpa-sec-2026-108 X11 protocol dissector crash. Issue 21563. CVE-2026-96423. wnpa-sec-2026-109 IEEE 802.11 protocol dissector crash. Issue 21564. CVE-2026-96416. wnpa-sec-2026-110 Catapult DCT2000 protocol dissector crash. Issue 21589. CVE-2026-96415. DICOM Export Objects uint32 length wrap causes undersized allocation and heap overwrite. Issue 21497. DICOM AT value formatting has quadratic packet-scope memory amplification. Issue 21498. F1AP: NotificationInformation IE under PWSSystemInformation.iE-Extensions not decoded in WriteReplaceWarningRequest. Issue 21499. ZDI-CAN-32846: Wireshark LBMC Fragment Reassembly Integer Overflow Remote Code Execution Vulnerability. Issue 21519. ZDI-CAN-32851: Wireshark LoRaWAN Decryption Numeric Truncation Error Remote Code Execution Vulnerability. Issue 21520. RTPS: dissect_RTPS_DATA_BATCH() sample-info minimum-length check increments the wrong variable (min_len instead of min_length) Issue 21521. NULL-pointer dereference in pkcs12 PBE_decrypt_data via empty AlgorithmIdentifier. Issue 21535. AKP EncryptedData footer can use an uninitialized tvbuff pointer after malformed OCTET STRING parsing. Issue 21539. Out-of-bounds read in DFVM binary-operation error path. Issue 21540. Wireshark is not ignoring GREASE values in the JA4 calculation. Issue 21548. Bluetooth AVCTP multipart reassembly integer overflow (incomplete AVRCP ckd_add sibling fix) Issue 21552. Fuzz job UTF-8 encoding issue: fuzz-2026-09-06-16330342486.pcap. Issue 21562. ZDI-CAN-31676: Wireshark SMB Object Export Integer Overflow. Issue 21575. Heap out-of-bounds read in FP Hint E-DCH DDI count handling. Issue 21580. F1AP fails to decode RRC release message. Issue 21581. Stack-based buffer overflow in etwdump extcap (etw_ndiscap.c) when parsing crafted ETL files. Issue 21587. Updated Protocol Support AKP, Bencode, BSSLAP, BT AVCTP, Catapult DCT2000, CSN.1, DICOM, F1AP, FP Hint, Frame, GNW, GSM BSSMAP, IEEE 802.11, LBMC, LoRaWAN, NBAP, OBEX, OpenFlow 1.3, OpenFlow 1.4, OpenFlow 1.5, PKCS12, QUIC, RTPS, SGP.32, SMB, SPDY, SYNCHROPHASOR, UMTS FP, X11, and ZigBee ZCL New and Updated Capture File Support BLF, Network Monitor, pcapng, PEAK TRC, Toshiba, and TTL Plugin Development Changes On UN*X systems (excluding macOS when running from an app bundle, as with the official installer) extcap binaries are now searched for under the libexec directory by default, e.g., /usr/libexec/wireshark/extcap instead of /usr/lib64/wireshark/extcap or similar. This is the customary place for helper binaries, which as opposed to libraries do not need multiarch support. The location can be overridden via the environment variable WIRESHARK_EXTCAP_DIR. The extcap binaries shipped with Wireshark are installed in the new location, but third party extcaps may need packaging changes. This change was effective in version 4.6.0, but was not explicitly noted in the release notes previously. Note that some distributions do not use a libexec directory, such as Alpine Linux, which does not have multilib support. On such systems extcap binaries should be in the same location as before. Signed-off-by: Adolf Belka --- config/rootfiles/packages/tshark | 4 ++-- lfs/tshark | 6 +++--- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/config/rootfiles/packages/tshark b/config/rootfiles/packages/tshark index f81a6f2c8..1ebe4b526 100644 --- a/config/rootfiles/packages/tshark +++ b/config/rootfiles/packages/tshark @@ -11,10 +11,10 @@ usr/bin/dumpcap usr/bin/tshark #usr/lib/libwireshark.so usr/lib/libwireshark.so.19 -usr/lib/libwireshark.so.19.1.8 +usr/lib/libwireshark.so.19.1.9 #usr/lib/libwiretap.so usr/lib/libwiretap.so.16 -usr/lib/libwiretap.so.16.0.8 +usr/lib/libwiretap.so.16.0.9 #usr/lib/libwsutil.so usr/lib/libwsutil.so.17 usr/lib/libwsutil.so.17.0.0 diff --git a/lfs/tshark b/lfs/tshark index 8cca495bd..e1bea84d7 100644 --- a/lfs/tshark +++ b/lfs/tshark @@ -26,7 +26,7 @@ include Config SUMMARY = A Network Traffic Analyser -VER = 4.6.8 +VER = 4.6.9 THISAPP = wireshark-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -35,7 +35,7 @@ DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = tshark DEPS = c-ares libxxhash -PAK_VER = 38 +PAK_VER = 39 SERVICES = @@ -47,7 +47,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 6a7c2407780b7aae8d7091465ecc724e7a042eb38ee1595e0bf038a6a0426b8f072fd09cfc95f6283236ae1e7e2fdac8e77d4509a28e83a2a5e6b5bad01bb59a +$(DL_FILE)_BLAKE2 = 986942975ea432479a1424bf57071457e01dc5861454bc6cd1c15a10cd341f2c72cdae1b862d4f047886b4e79fa1f560815345d3a9d823f954d946bc2f67acc3 install : $(TARGET) -- 2.55.0