Wireshark Security Update — AlmaLinux 8 (ALSA-2026:93627)
ALSA-2026:93627 updates Wireshark on AlmaLinux 8, fixing CVE-2026-95387 — a denial-of-service heap-based buffer overflow (CWE-122) in a protocol dissector, rated CVSS 8.1. Update with dnf update wireshark on servers or workstations where the analyzer is installed.
Что это значит по лицензии SharedLicense
Dissector overflows are triggered by capturing crafted traffic — anyone who can get a malicious packet past the analyzer (including on monitored network segments) can crash the capture session or potentially exploit the parser.
Type:
security
Severity:
important
Release date:
2026-11-02
Description:
The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.
Security Fix(es):
* wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector (CVE-2026-95387)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
| Architecture | Package | Checksum |
| aarch64 | wireshark-devel-2.6.2-22.el8_10.aarch64.rpm | 30c924e0f75040dff6c739d699a091aef1c62f18754cac8c85fb727dde146e33 |
| aarch64 | wireshark-cli-2.6.2-22.el8_10.aarch64.rpm | 88437337eccfc465b9f823b748cbe5f00985fd93ce909a3a312f6c5dcce986c0 |
| aarch64 | wireshark-2.6.2-22.el8_10.aarch64.rpm | 8c08e48248fe8b4986d826fe3e898a582cf7bdc3586813b3f1235b6faca65a6e |
| i686 | wireshark-cli-2.6.2-22.el8_10.i686.rpm | b52b8ed1531d25c51a7cd1073e5d671846501da4f5adb941727660c36a9344b0 |
| i686 | wireshark-devel-2.6.2-22.el8_10.i686.rpm | d22692589bc563fd3c4ae4501a2b508a3542282fc6249f5bb5ce5a135ecf0da1 |
| ppc64le | wireshark-2.6.2-22.el8_10.ppc64le.rpm | 001ea98aac6b3a7f26d2c0eaf839378d57953df11fc7f3a0a59f1e964e097cc6 |
| ppc64le | wireshark-cli-2.6.2-22.el8_10.ppc64le.rpm | a5dcec283039baef8ac8035e3cf9bdb349b434983ff954b9cdf00a78a2130bca |
| ppc64le | wireshark-devel-2.6.2-22.el8_10.ppc64le.rpm | efe4aa874a65a20fec164734f926873aa440a0f81465b3fae065746664d7630c |
| s390x | wireshark-cli-2.6.2-22.el8_10.s390x.rpm | 45c252035085a1d3c8ac40722b94798cbe4dbc8348bc927fab4351cd7fa393f7 |
| s390x | wireshark-devel-2.6.2-22.el8_10.s390x.rpm | 6a23014c2e63518470d73c1fd0e6716a25511b6eba529f3c8ba350f0cf4a7689 |
| s390x | wireshark-2.6.2-22.el8_10.s390x.rpm | fbaccc98bff9bff4e9eaa82044183f89ddafd300c36b0211301b1b5e24d5e3e8 |
| x86_64 | wireshark-devel-2.6.2-22.el8_10.x86_64.rpm | aaf9391b5c2454eefe87443ca1d49b9e41ca48d71cf720bcccc82cac3335dc7d |
| x86_64 | wireshark-cli-2.6.2-22.el8_10.x86_64.rpm | c547871564bf04bdd8e157b6801a0c6f3370f6234250edd192498a45ff817ab5 |
| x86_64 | wireshark-2.6.2-22.el8_10.x86_64.rpm | eb3c60f20e1938fca440bfea6f482c08daff4f203dda0d935376f79f197e2439 |
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.
Часто задаваемые вопросы
What is CVE-2026-95387?
Who is affected?
How do I apply the fix?
Why is a traffic analyzer a security concern?
Источники
Проверьте систему на уязвимости
Выберите продукт и операционную систему, чтобы увидеть точные команды исправления.
Проверьте свою систему