HCE2-SA-2023-0271 Critical HCE 2.0 Security Fix(es): XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file (CVE-2023-2952) Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file (CVE-2023-3648) Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark (CVE-2023-0667) HCE 2.0 wireshark-3.6.14-2.hce2.aarch64.rpm wireshark-devel-3.6.14-2.hce2.aarch64.rpm wireshark-help-3.6.14-2.hce2.aarch64.rpm wireshark-3.6.14-2.hce2.x86_64.rpm wireshark-devel-3.6.14-2.hce2.x86_64.rpm wireshark-help-3.6.14-2.hce2.x86_64.rpm