-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 28 Jan 2026 13:22:40 +0100 Source: wireshark Architecture: source Version: 4.0.17-0+deb12u2 Distribution: bookworm Urgency: medium Maintainer: Balint Reczey Changed-By: Jochen Sprickerhof Changes: wireshark (4.0.17-0+deb12u2) bookworm; urgency=medium . * Non-maintainer upload. * Fix CVE-2024-11596: ECMP dissector crash allows denial of service via packet injection or crafted capture file. * Fix CVE-2025-5601: Column handling crashes allows denial of service via packet injection or crafted capture file. * Fix CVE-2024-9781: AppleTalk and RELOAD Framing dissector crash allows denial of service via packet injection or crafted capture file. * Fix CVE-2025-11626: MONGO dissector infinite loop allows denial of service. * Fix CVE-2025-13499: Kafka dissector crash allows denial of service. * Fix CVE-2025-13945: HTTP3 dissector crash allows denial of service. * Fix CVE-2025-13946: MEGACO dissector infinite loop in allows denial of service. * Fix CVE-2025-9817: SSH dissector crash allows denial of service. * Fix CVE-2026-0960: HTTP3 protocol dissector infinite loop allows denial of service. * Fix CVE-2025-1492: Bundle Protocol and CBOR dissector crashes allows denial of service via packet injection or crafted capture file. Checksums-Sha1: 1fe9b2fa048b3e1ef693aa7be8ae68fe114ec070 3482 wireshark_4.0.17-0+deb12u2.dsc 593b93ee5e32c5e84ef0f1318081b9055342a2b5 46774565 wireshark_4.0.17.orig.tar.bz2 bc5c905caba47b769958451391f1cee1f676ae2c 90048 wireshark_4.0.17-0+deb12u2.debian.tar.xz 908e694547e4b518da187a68606b657dc18a5e75 7555 wireshark_4.0.17-0+deb12u2_source.buildinfo Checksums-Sha256: 6831a29bf41e6e591faffabfd8709c01b47d854958dd49e8600eb92dc3a95340 3482 wireshark_4.0.17-0+deb12u2.dsc 62fd1491b6211d1651a16a45ead15808970b3a6a9ebde2537f96722af47aaaa5 46774565 wireshark_4.0.17.orig.tar.bz2 ba67a54de70428d5acf9ae1725c73e42b916e60045f1df158091622e611bc36b 90048 wireshark_4.0.17-0+deb12u2.debian.tar.xz ee271f0c37f22ef525de8d078246e4e0451cfb47453aedd6db166d5a974a098f 7555 wireshark_4.0.17-0+deb12u2_source.buildinfo Files: 244ba5fe22a0e6f4fc51e8a766dd20cb 3482 net optional wireshark_4.0.17-0+deb12u2.dsc 067d2c6fbf7a2b660b798e6a12079319 46774565 net optional wireshark_4.0.17.orig.tar.bz2 d52109ca9cb02a241324bd8742e5175c 90048 net optional wireshark_4.0.17-0+deb12u2.debian.tar.xz f0a357c0267d3212d285e67ab52c73c8 7555 net optional wireshark_4.0.17-0+deb12u2_source.buildinfo -----BEGIN PGP SIGNATURE----- wsG7BAEBCgBvBYJp1VloCRAX+9y/2ZKP9EcUAAAAAAAeACBzYWx0QG5vdGF0aW9u cy5zZXF1b2lhLXBncC5vcmcr2SQzdj9eF8mQv9JFgY5Ebj9OW8opfG8qEKxd2ptm eRYhBOxHhMWwhZqan8X88Bf73L/Zko/0AAAAfQ/9HrBYo49RPmnA268vUcCSOBrZ 6cC1kcIEYYTzfCkX6KRWLHOBMo8ru1nZg8OipQq34nk5jD5NTzJk93NiDUGP6dff R1vFhFLX/cK6IeGMPjftMNwq2JbIaz7PlsMsO0I9WetMNve8q403IuGAYcFr97HP /NkbXo0qrOEspOWOY41nAtB+zVl9o7b8CEPjVkAo3NzRPjlbdOh8NhMpEp19NCz5 qRJixfFGHx6mKQ8kdpU8fMAUHGGDr1ZbHdnxoQyMBF9du0z1NIWUfq0sL3NCghQe ninFlsFDnGxvf81Yg9eUtUyUnsqFk1hEizhUYDXsBtDedMVO5zmbIyA1WbGslMj1 dfiQPOHB35Bo6O7inZEdqxFvRkEn6/3k/Y51kVa/gdM+HDdW3skNZdkfDnIvW4kh hSqlDFYLQsq2tHJKAhKpPTzx90GI0KrA7oS68np1bxef7t48pmLj8gLp0BtLNWYl 9j93QbRntcL7ECuT9ijmMg6sbDipjsZOhHfUV72pHgvNmYBhxjy8auAo/8fh7jhm wvE3SwzmwDA6VSXCiQL0Dj8O14Gt2YSgAHk4QDUXUUtIQsbxsLY30Ci+KdVh5Ti8 bFOGRyaRPgm0P0Yuc2GiKMMxeTzPf07R31m44plON0wNk4qR/gLUNhDAlw2Ekc6t xN+GBdOftddqbyhGZdI= =Il76 -----END PGP SIGNATURE-----