Linux · Amazon Linux · Security advisory · November 7, 2026

ALAS2023-2026-3252: Security update for 4 packages

ALAS2023-2026-3252, released November 7, 2026, fixes 18 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
18
None rated Critical
Exploited
0
None reported
Highest CVSS
8.8
Base score, 0 to 10
Highest EPSS
0.0034
27th percentile

Priority of the 18 CVEs

Patch now 0 Urgent 0 High 3 Routine 15

Fixed package versions

ProductReleaseFixed in
wireshark-cliamzn 20231:4.6.9-1.amzn2023.0.2
wireshark-cli-debuginfoamzn 20231:4.6.9-1.amzn2023.0.2
wireshark-debugsourceamzn 20231:4.6.9-1.amzn2023.0.2
wireshark-develamzn 20231:4.6.9-1.amzn2023.0.2

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2026-95389 wireshark: SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service8.1 0.0034 None reported
High CVE-2026-95387 wireshark: The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a comput...8.8 0.0026 None reported
High CVE-2026-96423 wireshark: X11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service7.1 0.0014 None reported
Routine CVE-2026-95386 wireshark: TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service5.5 0.0027 None reported
Routine CVE-2026-95390 wireshark: PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service5.5 0.0027 None reported
Routine CVE-2026-95392 wireshark: MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service5.5 0.0016 None reported
Routine CVE-2026-96417 wireshark: RF4CE protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service5.5 0.0015 None reported
Routine CVE-2026-95394 wireshark: Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service4.7 0.0014 None reported
Routine CVE-2026-96422 wireshark: Frame protocol metadissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service5.5 0.0014 None reported
Routine CVE-2026-96416 wireshark: IEEE 802.11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service5.5 0.0014 None reported
Routine CVE-2026-96418 wireshark: TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service5.5 0.0014 None reported
Routine CVE-2026-96421 wireshark: USB HID protocol dissector infinite loop and memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service5.5 0.0014 None reported
Routine CVE-2026-95388 wireshark: Sharkd utility crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service5.5 0.0014 None reported
Routine CVE-2026-95395 wireshark: IEEE C37.118 Synchrophasor protocol dissector memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service5.5 0.0014 None reported
Routine CVE-2026-96415 wireshark: Catapult DCT2000 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service5.5 0.0014 None reported
Routine CVE-2026-95393 wireshark: CSN.1 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service4.7 0.0013 None reported
Routine CVE-2026-95391 wireshark: ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service5.5 0.0010 None reported
Routine CVE-2026-96420 wireshark: Toshiba file parser crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service5.5 0.0009 None reported
Showing 1 to 18 of 18 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.