From 9cc508d95f6d28f5c6295ec78ae77dea331b8215 Mon Sep 17 00:00:00 2001 From: Michal Ruprich Date: Mon, 19 Jan 2026 14:23:15 +0100 Subject: [PATCH] Resolves: RHEL-130440 - Access of Uninitialized Pointer in Wireshark --- wireshark-0020-cve-2025-13499.patch | 24 ++++++++++++++++++++++++ wireshark.spec | 6 +++++- 2 files changed, 29 insertions(+), 1 deletion(-) create mode 100644 wireshark-0020-cve-2025-13499.patch diff --git a/wireshark-0020-cve-2025-13499.patch b/wireshark-0020-cve-2025-13499.patch new file mode 100644 index 0000000..f955af4 --- /dev/null +++ b/wireshark-0020-cve-2025-13499.patch @@ -0,0 +1,24 @@ +diff --git a/epan/dissectors/packet-kafka.c b/epan/dissectors/packet-kafka.c +index d476eda..fa93628 100644 +--- a/epan/dissectors/packet-kafka.c ++++ b/epan/dissectors/packet-kafka.c +@@ -1749,7 +1749,7 @@ decompress_snappy(tvbuff_t *tvb, packet_info *pinfo, int offset, guint32 length, + tvb_new_child_real_data(tvb, decompressed_buffer, (guint)uncompressed_size, (gint)uncompressed_size)); + pos += chunk_size; + } +- ++ ret = composite_tvb != NULL; + } else { + + /* unframed format */ +@@ -1767,9 +1767,9 @@ decompress_snappy(tvbuff_t *tvb, packet_info *pinfo, int offset, guint32 length, + + *decompressed_tvb = tvb_new_child_real_data(tvb, decompressed_buffer, (guint)uncompressed_size, (gint)uncompressed_size); + *decompressed_offset = 0; ++ ret = TRUE; + + } +- ret = TRUE; + end: + if (composite_tvb) { + tvb_composite_finalize(composite_tvb); diff --git a/wireshark.spec b/wireshark.spec index 2c59787..88de52d 100644 --- a/wireshark.spec +++ b/wireshark.spec @@ -6,7 +6,7 @@ Summary: Network traffic analyzer Name: wireshark Version: 3.4.10 -Release: 8%{?dist} +Release: 9%{?dist} Epoch: 1 License: GPL+ Url: http://www.wireshark.org/ @@ -38,6 +38,7 @@ Patch0016: wireshark-0016-cve-2023-2855.patch Patch0017: wireshark-0017-cve-2023-2952.patch Patch0018: wireshark-0018-sync-pipe-stderr-messages.patch Patch0019: wireshark-0019-nfs-over-tls.patch +Patch0020: wireshark-0020-cve-2025-13499.patch #install tshark together with wireshark GUI Requires: %{name}-cli = %{epoch}:%{version}-%{release} @@ -285,6 +286,9 @@ fi %{_libdir}/pkgconfig/%{name}.pc %changelog +* Mon Jan 19 2026 Michal Ruprich - 1:3.4.10-9 +- Resolves: RHEL-130440 - Access of Uninitialized Pointer in Wireshark + * Mon Jul 07 2025 Michal Ruprich - 1:3.4.10-8 - Resolves: RHEL-55554 - NFS packets decrypted via TLS are displayed as RPC