[El-errata] ELSA-2026-20600 Important: Oracle Linux 10 wireshark security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-20600

http://linux.oracle.com/errata/ELSA-2026-20600.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
wireshark-4.4.2-10.0.1.el10_2.x86_64.rpm
wireshark-cli-4.4.2-10.0.1.el10_2.x86_64.rpm
wireshark-devel-4.4.2-10.0.1.el10_2.x86_64.rpm

aarch64:
wireshark-4.4.2-10.0.1.el10_2.aarch64.rpm
wireshark-cli-4.4.2-10.0.1.el10_2.aarch64.rpm
wireshark-devel-4.4.2-10.0.1.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/wireshark-4.4.2-10.0.1.el10_2.src.rpm

Related CVEs:

CVE-2026-5405
CVE-2026-5656




Description of changes:

[4.4.2-10.0.1]
- Fix post script to not fail during initial installation [Orabug: 37565359]

[1:4.4.2-10]
- Resolves: RHEL-173221 - CVE-2026-5656 Improper Limitation of a Pathname to a Restricted Directory

[1:4.4.2-9]
- Resolves: RHEL-173218 - CVE-2026-5405 Heap-based Buffer Overflow

[1:4.4.2-8]
- Resolves: RHEL-152922 - CVE-2026-3203 Buffer Over-read

[1:4.4.2-7]
- Resolves: RHEL-152913 - CVE-2026-3201 Improperly Controlled Sequential Memory Allocation

[1:4.4.2-6]
- Resolves: RHEL-136919 - NULL Pointer Dereference in Wireshark (CVE-2025-9817)

[1:4.4.2-5]
- Resolves: RHEL-130427 - Access of Uninitialized Pointer in Wireshark