Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-76886: C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76879: C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | wireshark | 1:2.6.2-15.amzn2.0.11 |
| Amazon Linux · 2 | wireshark-cli | 1:2.6.2-15.amzn2.0.11 |
| Amazon Linux · 2 | wireshark-debuginfo | 1:2.6.2-15.amzn2.0.11 |
| Amazon Linux · 2 | wireshark-devel | 1:2.6.2-15.amzn2.0.11 |
Vulnerabilities 2
-
High 8.1
Heap-based Buffer Overflow in Wireshark
C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
-
High 7.5
Stack-based Buffer Overflow in Wireshark
C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service