Linux · Security advisory · November 7, 2026

ALSA-2026:84721: Security update for 3 packages

ALSA-2026:84721, released November 7, 2026, fixes 8 CVEs across 3 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
8
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0038
32nd percentile

Priority of the 8 CVEs

Patch now 0 Urgent 1 High 7 Routine 0

Fixed package versions

ProductReleaseFixed in
wiresharkalmalinux 101:4.4.2-10.el10_2.8
wireshark-clialmalinux 101:4.4.2-10.el10_2.8
wireshark-develalmalinux 101:4.4.2-10.el10_2.8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2026-76886 wireshark: C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service 9.8 0.0038 None reported
High CVE-2026-95389 wireshark: SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service 8.1 0.0034 None reported
High CVE-2026-76928 wireshark: X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service 8.1 0.0032 None reported
High CVE-2026-76879 wireshark: C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service 8.1 0.0031 None reported
High CVE-2026-76919 wireshark: ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service 8.1 0.0031 None reported
High CVE-2026-95387 wireshark: The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a comput... 8.8 0.0026 None reported
High CVE-2026-76880 wireshark: RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service 8.1 0.0024 None reported
High CVE-2026-76927 wireshark: H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service 8.1 0.0018 None reported
Showing 1 to 8 of 8 1