Wireshark Security Update — AlmaLinux 8 (ALSA-2026:93627)
ALSA-2026:93627 updates Wireshark on AlmaLinux 8, fixing CVE-2026-95387 — a denial-of-service heap-based buffer overflow (CWE-122) in a protocol dissector, rated CVSS 8.1. Update with dnf update wireshark on servers or workstations where the analyzer is installed.
What this means under a SharedLicense license
Dissector overflows are triggered by capturing crafted traffic — anyone who can get a malicious packet past the analyzer (including on monitored network segments) can crash the capture session or potentially exploit the parser.
Type:
security
Severity:
important
Release date:
2026-11-02
Description:
The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.
Security Fix(es):
* wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector (CVE-2026-95387)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
| Architecture | Package | Checksum |
| aarch64 | wireshark-devel-2.6.2-22.el8_10.aarch64.rpm | 30c924e0f75040dff6c739d699a091aef1c62f18754cac8c85fb727dde146e33 |
| aarch64 | wireshark-cli-2.6.2-22.el8_10.aarch64.rpm | 88437337eccfc465b9f823b748cbe5f00985fd93ce909a3a312f6c5dcce986c0 |
| aarch64 | wireshark-2.6.2-22.el8_10.aarch64.rpm | 8c08e48248fe8b4986d826fe3e898a582cf7bdc3586813b3f1235b6faca65a6e |
| i686 | wireshark-cli-2.6.2-22.el8_10.i686.rpm | b52b8ed1531d25c51a7cd1073e5d671846501da4f5adb941727660c36a9344b0 |
| i686 | wireshark-devel-2.6.2-22.el8_10.i686.rpm | d22692589bc563fd3c4ae4501a2b508a3542282fc6249f5bb5ce5a135ecf0da1 |
| ppc64le | wireshark-2.6.2-22.el8_10.ppc64le.rpm | 001ea98aac6b3a7f26d2c0eaf839378d57953df11fc7f3a0a59f1e964e097cc6 |
| ppc64le | wireshark-cli-2.6.2-22.el8_10.ppc64le.rpm | a5dcec283039baef8ac8035e3cf9bdb349b434983ff954b9cdf00a78a2130bca |
| ppc64le | wireshark-devel-2.6.2-22.el8_10.ppc64le.rpm | efe4aa874a65a20fec164734f926873aa440a0f81465b3fae065746664d7630c |
| s390x | wireshark-cli-2.6.2-22.el8_10.s390x.rpm | 45c252035085a1d3c8ac40722b94798cbe4dbc8348bc927fab4351cd7fa393f7 |
| s390x | wireshark-devel-2.6.2-22.el8_10.s390x.rpm | 6a23014c2e63518470d73c1fd0e6716a25511b6eba529f3c8ba350f0cf4a7689 |
| s390x | wireshark-2.6.2-22.el8_10.s390x.rpm | fbaccc98bff9bff4e9eaa82044183f89ddafd300c36b0211301b1b5e24d5e3e8 |
| x86_64 | wireshark-devel-2.6.2-22.el8_10.x86_64.rpm | aaf9391b5c2454eefe87443ca1d49b9e41ca48d71cf720bcccc82cac3335dc7d |
| x86_64 | wireshark-cli-2.6.2-22.el8_10.x86_64.rpm | c547871564bf04bdd8e157b6801a0c6f3370f6234250edd192498a45ff817ab5 |
| x86_64 | wireshark-2.6.2-22.el8_10.x86_64.rpm | eb3c60f20e1938fca440bfea6f482c08daff4f203dda0d935376f79f197e2439 |
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.
Frequently Asked Questions
What is CVE-2026-95387?
Who is affected?
How do I apply the fix?
Why is a traffic analyzer a security concern?
References
Check your system for vulnerabilities
Select your product and operating system to see the exact fix commands that apply to you.
Check Your System