ELSA-2026-84721

Type: Security

Severity: Important

Published: 2026-10-19

Oracle Linux 10

[4.4.2-10.0.1.el10_2.8] - Fix post script to not fail during initial installation [Orabug: 37565359] [1:4.4.2-10.8] - Fix Heap-based Buffer Overflow in Wireshark (CVE-2026-95389) - Resolves: RHEL-272823 [1:4.4.2-10.7] - Fix DoS via heap-based buffer overflow in SPDY dissector (CVE-2026-95387) - Resolves: RHEL-272323 [1:4.4.2-10.6] - Fix DoS via X.509IF protocol dissector crash (CVE-2026-76928) - Resolves: RHEL-248365 [1:4.4.2-10.5] - Fix DoS vulnerability in H.245 protocol dissector (CVE-2026-76927) - Resolves: RHEL-257643 [1:4.4.2-10.4] - Fix DoS vulnerability in ESS protocol dissector (CVE-2026-76919) - Resolves: RHEL-257617 [1:4.4.2-10.3] - Fix DoS via C12.22 protocol dissector crash (CVE-2026-76886) - Resolves: RHEL-247382 [1:4.4.2-10.2] - Fix DoS via RRC protocol dissector out-of-bounds write (CVE-2026-76880) - Resolves: RHEL-245610 [1:4.4.2-10.1] - Fix DoS via C12.22 protocol dissector crash (CVE-2026-76879) - Resolves: RHEL-248209

Evidence and freshness

Data current

Last supporting evidence check: 2026-10-21T10:12:18.539Z UTC

Official vendor advisory

Oracle Linux 10

View source

Observed 2026-10-21T10:12:18.539Z UTC. Last updated 2026-10-19T18:25:15.385Z UTC.

Upstream Advisory

View official advisory

Affected Packages

wireshark-cli 4.4.2-10.0.1.el10_2.8
wireshark-devel 4.4.2-10.0.1.el10_2.8
wireshark 4.4.2-10.0.1.el10_2.8

Interested in being alerted when there are new versions of wireshark-cli, etc? Set up an alert.