Resolves: RHEL-130440 - Access of Uninitialized Pointer in Wireshark

wireshark-0020-cve-2025-13499.patch

@@ -0,0 +1,24 @@
+diff --git a/epan/dissectors/packet-kafka.c b/epan/dissectors/packet-kafka.c
+index d476eda..fa93628 100644
+--- a/epan/dissectors/packet-kafka.c
++++ b/epan/dissectors/packet-kafka.c
+@@ -1749,7 +1749,7 @@ decompress_snappy(tvbuff_t *tvb, packet_info *pinfo, int offset, guint32 length,
+                       tvb_new_child_real_data(tvb, decompressed_buffer, (guint)uncompressed_size, (gint)uncompressed_size));
+             pos += chunk_size;
+         }
+-
++        ret = composite_tvb != NULL;
+     } else {
+ 
+         /* unframed format */
+@@ -1767,9 +1767,9 @@ decompress_snappy(tvbuff_t *tvb, packet_info *pinfo, int offset, guint32 length,
+ 
+         *decompressed_tvb = tvb_new_child_real_data(tvb, decompressed_buffer, (guint)uncompressed_size, (gint)uncompressed_size);
+         *decompressed_offset = 0;
++        ret = TRUE;
+ 
+     }
+-    ret = TRUE;
+ end:
+     if (composite_tvb) {
+         tvb_composite_finalize(composite_tvb);

wireshark.spec

@@ -6,7 +6,7 @@
 Summary:	Network traffic analyzer
 Name:		wireshark
 Version:	3.4.10
-Release:	8%{?dist}
+Release:	9%{?dist}
 Epoch:		1
 License:	GPL+
 Url:		http://www.wireshark.org/
@@ -38,6 +38,7 @@ Patch0016:	wireshark-0016-cve-2023-2855.patch
 Patch0017:	wireshark-0017-cve-2023-2952.patch
 Patch0018:	wireshark-0018-sync-pipe-stderr-messages.patch
 Patch0019:	wireshark-0019-nfs-over-tls.patch
+Patch0020:	wireshark-0020-cve-2025-13499.patch
 
 #install tshark together with wireshark GUI
 Requires:	%{name}-cli = %{epoch}:%{version}-%{release}
@@ -285,6 +286,9 @@ fi
 %{_libdir}/pkgconfig/%{name}.pc
 
 %changelog
+* Mon Jan 19 2026 Michal Ruprich <mruprich@redhat.com> - 1:3.4.10-9
+- Resolves: RHEL-130440 - Access of Uninitialized Pointer in Wireshark
+
 * Mon Jul 07 2025 Michal Ruprich <mruprich@redhat.com> - 1:3.4.10-8
 - Resolves: RHEL-55554 - NFS packets decrypted via TLS are displayed as RPC