An update that solves two vulnerabilities can now be installed.. # Security update for wireshark Announcement ID: SUSE-SU-2025:4440-1 Release Date: 2025-12-17T15:44:46Z Rating: moderate References: * bsc#1254108 * bsc#1254472 Cross-References: * CVE-2025-13499 * CVE-2025-13946 CVSS scores: * CVE-2025-13499 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-13499 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2025-13499 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-13499 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-13946 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-13946 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * Desktop Applications Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves two vulnerabilities can now be installed. ## Description: This update for wireshark fixes the following issues: * CVE-2025-13499: Fixed Kafka dissector crash due to malformed packet (bsc#1254108). * CVE-2025-13946: Fixed MEGACO dissector infinite loop that allows denial of service (bsc#1254472). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2025-4440=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-4440=1 openSUSE-SLE-15.6-2025-4440=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2025-4440=1 ## Package List: * Desktop Applications Module 15-SP7 (aarch64ppc64le s390x x86_64) * wireshark-ui-qt-debuginfo-4.2.14-150600.18.32.1 * wireshark-debugsource-4.2.14-150600.18.32.1 * wireshark-debuginfo-4.2.14-150600.18.32.1 * wireshark-ui-qt-4.2.14-150600.18.32.1 * wireshark-devel-4.2.14-150600.18.32.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libwiretap14-4.2.14-150600.18.32.1 * libwsutil15-debuginfo-4.2.14-150600.18.32.1 * wireshark-ui-qt-debuginfo-4.2.14-150600.18.32.1 * libwsutil15-4.2.14-150600.18.32.1 * wireshark-debugsource-4.2.14-150600.18.32.1 * libwiretap14-debuginfo-4.2.14-150600.18.32.1 * wireshark-4.2.14-150600.18.32.1 * libwireshark17-4.2.14-150600.18.32.1 * wireshark-debuginfo-4.2.14-150600.18.32.1 * wireshark-ui-qt-4.2.14-150600.18.32.1 * libwireshark17-debuginfo-4.2.14-150600.18.32.1 * wireshark-devel-4.2.14-150600.18.32.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libwiretap14-4.2.14-150600.18.32.1 * libwsutil15-debuginfo-4.2.14-150600.18.32.1 * libwsutil15-4.2.14-150600.18.32.1 * wireshark-debugsource-4.2.14-150600.18.32.1 * libwiretap14-debuginfo-4.2.14-150600.18.32.1 * wireshark-4.2.14-150600.18.32.1 * libwireshark17-4.2.14-150600.18.32.1 * wireshark-debuginfo-4.2.14-150600.18.32.1 * libwireshark17-debuginfo-4.2.14-150600.18.32.1 ## References: * https://www.suse.com/security/cve/CVE-2025-13499.html * https://www.suse.com/security/cve/CVE-2025-13946.html * https://bugzilla.suse.com/show_bug.cgi?id=1254108 * https://bugzilla.suse.com/show_bug.cgi?id=1254472 . Update for wireshark addresses critical issues including denial of service and crashes with CVE-2025-13499 and CVE-2025-13946.. wireshark security update, openSUSE vulnerability, denial of service fix, Linux patch, wireshark CVE information. . LinuxSecurity.com Team
This is an update fixing crash when processing ROSE packets.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-6424 2015-04-21 13:39:36 -------------------------------------------------------------------------------- Name : ax25-tools Product : Fedora 21 Version : 0.0.10 Release : 0.12.rc2.fc21 URL : Summary : Tools used to configure an ax.25 enabled computer Description : ax25-tools is a collection of tools that are used to configure an ax.25 enabled computer. They will configure interfaces and assign callsigns to ports as well as Net/ROM and ROSE configuration. This package only contains the command line programs; the GUI programs are contained in ax25-tools-x package. * m6pack - handle multiple 6pack TNCs on a single interface * ax25d - general purpose AX.25, NET/ROM and Rose daemon * axctl - configure/Kill running AX.25 connections * axparms - configure AX.25 interfaces * axspawn - allow automatic login to a Linux system * beacon - transmit periodic messages on an AX.25 port * bpqparms - configure BPQ ethernet devices * mheardd - display AX.25 calls recently heard * rxecho - transparently route AX.25 packets between ports * mheard - collect information about packet activity * dmascc_cfg - configure dmascc devices * sethdlc - get/set Linux HDLC packet radio modem driver port information * smmixer - get/set Linux soundcard packet radio modem driver mixer * kissattach - Attach a KISS or 6PACK interface * kissnetd - create a virtual network * kissparms - configure KISS TNCs * mkiss - attach multiple KISS interfaces * net2kiss - convert a network AX.25 driver to a KISS stream on a pty * netromd - send and receive NET/ROM routing messages * nodesave - saves NET/ROM routing information * nrattach - start a NET/ROM interface * nrparms - configure a NET/ROM interface * nrsdrv - KISS to NET/ROM serial converter * rsattach - start a ROSE interface * rsdwnlnk - user exit from the ROSEnetwork * rsmemsiz - monitor the ROSE subsystem * rsusers.sh - monitor AX.25, NET/ROM and ROSE users * rsparms - configure a ROSE interface * rsuplnk - User entry into the ROSE network * rip98d - RIP98 routing daemon * ttylinkd - TTYlink daemon for AX.25, NET/ROM, ROSE and IP * ax25_call - Make an AX.25 connection * netrom_call - Make a NET/ROM connection * rose_call - Make a ROSE connection * tcp_call - Make a TCP connection * yamcfg - configure a YAM interface -------------------------------------------------------------------------------- Update Information: This is an update fixing crash when processing ROSE packets. -------------------------------------------------------------------------------- ChangeLog: * Mon Apr 20 2015 Jaroslav Å karvada - 0.0.10-0.12.rc2 - Fixed crash when processing ROSE packets (by rose-fix patch) Resolves: rhbz#1210008 * Tue Apr 7 2015 Jaroslav Å karvada - 0.0.10-0.11.rc2 - Fixed netrom nrattach Resolves: rhbz#981833 - Fixed format string build error * Thu Feb 19 2015 Rex Dieter 0.0.10-0.10.rc2 - rebuild (fltk) -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update ax25-tools' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list
Get the latest Linux and open source security news straight to your inbox.