openSUSE 16 Security Update : wireshark (openSUSE-SU-2026:20685-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20685-1 advisory. This update for wireshark fixes the following issues - CVE-2026-3201: missing limit checks in USB HID protocol dissector's parsereportdescriptor...

CVE-2026-5404 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark

K12 RF5 file parser crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

CVE-2026-5404

Wireshark is affected by CVE-2026-5404 due to a buffer copy without size checking in the K12 RF5 file parser, impacting Wireshark versions 4.6.0–4.6.4 and 4.4.0–4.4.14 and causing a denial of service. The root cause is an unchecked input size during parsing. A fix appears in Wireshark 4.6.5 (per ...