CVS commit: pkgsrc/net/wireshark

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Thu Sep 24 13:49:49 UTC 2026

Modified Files:
        pkgsrc/net/wireshark: Makefile PLIST distinfo

Log Message:
wireshark: updated to 4.6.9

4.6.9

The following vulnerabilities have been fixed:

wnpa-sec-2026-92 ZigBee ZCL protocol dissector crash. CVE-2026-95391.

wnpa-sec-2026-93 SCTP protocol dissector crash. Issue 21481. CVE-2026-95389.

wnpa-sec-2026-94 TTL file parser infinite loop. Issue 21501. CVE-2026-95386.

wnpa-sec-2026-95 PEAK CAN TRC file parser crash. Issue 21503. CVE-2026-95390.

wnpa-sec-2026-96 IEEE C37.118 Synchrophasor protocol dissector memory leak. Issue 21492. CVE-2026-95395.

wnpa-sec-2026-97 SPDY protocol dissector crash. Issue 21487. CVE-2026-95387.

wnpa-sec-2026-98 Microsoft Network Monitor file parser large loop. Issue 21523. CVE-2026-95394.

wnpa-sec-2026-99 CSN.1 protocol dissector crash. Issue 21510. CVE-2026-95393.

wnpa-sec-2026-100 MBIM protocol dissector crash. wsbuglink:21549, Issue 21550. CVE-2026-95392.

wnpa-sec-2026-101 Sharkd utility crash. Issue 21545. CVE-2026-95388.

wnpa-sec-2026-102 Frame protocol metadissector crash. Issue 21525. CVE-2026-96422.

wnpa-sec-2026-103 USB HID protocol dissector infinite loop and memory leak. Issue 21566. CVE-2026-96421.

wnpa-sec-2026-104 RF4CE protocol dissector crash. Issue 21574. CVE-2026-96417.

wnpa-sec-2026-105 Toshiba file parser crash. Issue 21541. CVE-2026-96420.

wnpa-sec-2026-106 Profile import crash and possible code execution. Issue 21553. CVE-2026-96419.

wnpa-sec-2026-107 TIFF protocol dissector infinite loop. Issue 21565. CVE-2026-96418.

wnpa-sec-2026-108 X11 protocol dissector crash. Issue 21563. CVE-2026-96423.

wnpa-sec-2026-109 IEEE 802.11 protocol dissector crash. Issue 21564. CVE-2026-96416.

wnpa-sec-2026-110 Catapult DCT2000 protocol dissector crash. Issue 21589. CVE-2026-96415.

The following bugs have been fixed:

DICOM Export Objects uint32 length wrap causes undersized allocation and heap overwrite. Issue 21497.

DICOM AT value formatting has quadratic packet-scope memory amplification. Issue 21498.

F1AP: NotificationInformation IE under PWSSystemInformation.iE-Extensions not decoded in WriteReplaceWarningRequest. Issue 21499.

ZDI-CAN-32846: Wireshark LBMC Fragment Reassembly Integer Overflow Remote Code Execution Vulnerability. Issue 21519.

ZDI-CAN-32851: Wireshark LoRaWAN Decryption Numeric Truncation Error Remote Code Execution Vulnerability. Issue 21520.

RTPS: dissect_RTPS_DATA_BATCH() sample-info minimum-length check increments the wrong variable (min_len instead of min_length) Issue 21521.

NULL-pointer dereference in pkcs12 PBE_decrypt_data via empty AlgorithmIdentifier. Issue 21535.

AKP EncryptedData footer can use an uninitialized tvbuff pointer after malformed OCTET STRING parsing. Issue 21539.

Out-of-bounds read in DFVM binary-operation error path. Issue 21540.

Wireshark is not ignoring GREASE values in the JA4 calculation. Issue 21548.

Bluetooth AVCTP multipart reassembly integer overflow (incomplete AVRCP ckd_add sibling fix) Issue 21552.

Fuzz job UTF-8 encoding issue: fuzz-2026-09-06-16330342486.pcap. Issue 21562.

ZDI-CAN-31676: Wireshark SMB Object Export Integer Overflow. Issue 21575.

Heap out-of-bounds read in FP Hint E-DCH DDI count handling. Issue 21580.

F1AP fails to decode RRC release message. Issue 21581.

Stack-based buffer overflow in etwdump extcap (etw_ndiscap.c) when parsing crafted ETL files. Issue 21587.


To generate a diff of this commit:
cvs rdiff -u -r1.354 -r1.355 pkgsrc/net/wireshark/Makefile
cvs rdiff -u -r1.113 -r1.114 pkgsrc/net/wireshark/PLIST
cvs rdiff -u -r1.194 -r1.195 pkgsrc/net/wireshark/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/wireshark/Makefile
diff -u pkgsrc/net/wireshark/Makefile:1.354 pkgsrc/net/wireshark/Makefile:1.355
--- pkgsrc/net/wireshark/Makefile:1.354 Wed Sep  2 19:04:05 2026
+++ pkgsrc/net/wireshark/Makefile       Thu Sep 24 13:49:48 2026
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.354 2026/09/02 19:04:05 wiz Exp $
+# $NetBSD: Makefile,v 1.355 2026/09/24 13:49:48 adam Exp $
 
-DISTNAME=      wireshark-4.6.8
-PKGREVISION=   1
+DISTNAME=      wireshark-4.6.9
 CATEGORIES=    net
 MASTER_SITES=  https://www.wireshark.org/download/src/
 EXTRACT_SUFX=  .tar.xz
@@ -13,7 +12,7 @@ LICENSE=      gnu-gpl-v2
 
 CONFLICTS+=    ethereal-[0-9]*
 
-DEPENDS+=      lemon-[0-9]*:../../devel/lemon
+DEPENDS+=      lemon>=0:../../devel/lemon
 
 CMAKE_CONFIGURE_ARGS+=         -DCMAKE_BUILD_TYPE=Release
 CMAKE_CONFIGURE_ARGS+=         -DENABLE_APPLICATION_BUNDLE=OFF

Index: pkgsrc/net/wireshark/PLIST
diff -u pkgsrc/net/wireshark/PLIST:1.113 pkgsrc/net/wireshark/PLIST:1.114
--- pkgsrc/net/wireshark/PLIST:1.113    Thu Aug 13 09:26:54 2026
+++ pkgsrc/net/wireshark/PLIST  Thu Sep 24 13:49:49 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.113 2026/08/13 09:26:54 adam Exp $
+@comment $NetBSD: PLIST,v 1.114 2026/09/24 13:49:49 adam Exp $
 bin/capinfos
 bin/captype
 bin/dumpcap
@@ -14,10 +14,10 @@ bin/tshark
 ${PLIST.qt}bin/wireshark
 lib/libwireshark.so
 lib/libwireshark.so.19
-lib/libwireshark.so.19.1.8
+lib/libwireshark.so.19.1.9
 lib/libwiretap.so
 lib/libwiretap.so.16
-lib/libwiretap.so.16.0.8
+lib/libwiretap.so.16.0.9
 lib/libwsutil.so
 lib/libwsutil.so.17
 lib/libwsutil.so.17.0.0

Index: pkgsrc/net/wireshark/distinfo
diff -u pkgsrc/net/wireshark/distinfo:1.194 pkgsrc/net/wireshark/distinfo:1.195
--- pkgsrc/net/wireshark/distinfo:1.194 Thu Aug 13 09:26:54 2026
+++ pkgsrc/net/wireshark/distinfo       Thu Sep 24 13:49:49 2026
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.194 2026/08/13 09:26:54 adam Exp $
+$NetBSD: distinfo,v 1.195 2026/09/24 13:49:49 adam Exp $
 
-BLAKE2s (wireshark-4.6.8.tar.xz) = eb7e829d57ad9b4ab5f316eae8a521d2f75753e7c5814d37ad7639551e46820b
-SHA512 (wireshark-4.6.8.tar.xz) = 4692bd15bebd67475502b6afe106e3be85b90add16f932d7e58c4426fd62b5886e96daa522aafd9ee4a8300bf3e091a738b5b1fa20e3e0721d0d0f3be216f3c8
-Size (wireshark-4.6.8.tar.xz) = 56464692 bytes
+BLAKE2s (wireshark-4.6.9.tar.xz) = 67125d8a27ad56e096088f61ab785c6be11af2675d640b7035af1f962b49d64a
+SHA512 (wireshark-4.6.9.tar.xz) = dde86fafc38132c834fb28865f66351aa7cdaccaabc7612731fd418014cf8624471a2a20a5b3a6546bf4b1c397f04d35271bd92a6e4680d63caeabee90cab6aa
+Size (wireshark-4.6.9.tar.xz) = 56477044 bytes
 SHA1 (patch-CMakeLists.txt) = 80af7e00226894efe82db3b89ea8fee08bd30681