सुरक्षा सलाह पर वापस जाएँ

Wireshark Security Update — AlmaLinux 8 (ALSA-2026:93627)

ALSA-2026:93627 updates Wireshark on AlmaLinux 8, fixing CVE-2026-95387 — a denial-of-service heap-based buffer overflow (CWE-122) in a protocol dissector, rated CVSS 8.1. Update with dnf update wireshark on servers or workstations where the analyzer is installed.

High 8.1 CVSS
AlmaLinux 8

SharedLicense लाइसेंस के तहत इसका अर्थ

Dissector overflows are triggered by capturing crafted traffic — anyone who can get a malicious packet past the analyzer (including on monitored network segments) can crash the capture session or potentially exploit the parser.

Type:

security

Severity:

important

Release date:

2026-11-02

Description:

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.

Security Fix(es):

* wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector (CVE-2026-95387)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References:

Updated packages listed below:

Architecture Package Checksum
aarch64 wireshark-devel-2.6.2-22.el8_10.aarch64.rpm 30c924e0f75040dff6c739d699a091aef1c62f18754cac8c85fb727dde146e33
aarch64 wireshark-cli-2.6.2-22.el8_10.aarch64.rpm 88437337eccfc465b9f823b748cbe5f00985fd93ce909a3a312f6c5dcce986c0
aarch64 wireshark-2.6.2-22.el8_10.aarch64.rpm 8c08e48248fe8b4986d826fe3e898a582cf7bdc3586813b3f1235b6faca65a6e
i686 wireshark-cli-2.6.2-22.el8_10.i686.rpm b52b8ed1531d25c51a7cd1073e5d671846501da4f5adb941727660c36a9344b0
i686 wireshark-devel-2.6.2-22.el8_10.i686.rpm d22692589bc563fd3c4ae4501a2b508a3542282fc6249f5bb5ce5a135ecf0da1
ppc64le wireshark-2.6.2-22.el8_10.ppc64le.rpm 001ea98aac6b3a7f26d2c0eaf839378d57953df11fc7f3a0a59f1e964e097cc6
ppc64le wireshark-cli-2.6.2-22.el8_10.ppc64le.rpm a5dcec283039baef8ac8035e3cf9bdb349b434983ff954b9cdf00a78a2130bca
ppc64le wireshark-devel-2.6.2-22.el8_10.ppc64le.rpm efe4aa874a65a20fec164734f926873aa440a0f81465b3fae065746664d7630c
s390x wireshark-cli-2.6.2-22.el8_10.s390x.rpm 45c252035085a1d3c8ac40722b94798cbe4dbc8348bc927fab4351cd7fa393f7
s390x wireshark-devel-2.6.2-22.el8_10.s390x.rpm 6a23014c2e63518470d73c1fd0e6716a25511b6eba529f3c8ba350f0cf4a7689
s390x wireshark-2.6.2-22.el8_10.s390x.rpm fbaccc98bff9bff4e9eaa82044183f89ddafd300c36b0211301b1b5e24d5e3e8
x86_64 wireshark-devel-2.6.2-22.el8_10.x86_64.rpm aaf9391b5c2454eefe87443ca1d49b9e41ca48d71cf720bcccc82cac3335dc7d
x86_64 wireshark-cli-2.6.2-22.el8_10.x86_64.rpm c547871564bf04bdd8e157b6801a0c6f3370f6234250edd192498a45ff817ab5
x86_64 wireshark-2.6.2-22.el8_10.x86_64.rpm eb3c60f20e1938fca440bfea6f482c08daff4f203dda0d935376f79f197e2439

Notes:

This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.

अक्सर पूछे जाने वाले प्रश्न

What is CVE-2026-95387?
It is a heap-based buffer overflow (CWE-122) in a Wireshark protocol dissector, leading to denial of service, rated CVSS 8.1 and fixed in the AlmaLinux 8 update ALSA-2026:93627.
Who is affected?
Systems running Wireshark or tshark for traffic analysis — admin workstations, monitoring nodes and diagnostic servers. Servers without Wireshark installed are unaffected.
How do I apply the fix?
Run dnf update wireshark and restart any running capture sessions with the patched binary.
Why is a traffic analyzer a security concern?
Dissectors parse untrusted network data by definition — a crafted packet on any segment the analyzer monitors is enough to reach the vulnerable parsing code, which is why analyzers belong on the patch list of every monitoring node.

अपने सिस्टम में भेद्यताओं की जाँच करें

अपना उत्पाद और ऑपरेटिंग सिस्टम चुनें ताकि आपके लिए लागू सटीक फिक्स कमांड देख सकें।

अपना सिस्टम जाँचें