Advisories ยป MGASA-2026-0493

Updated wireshark package fixes security vulnerabilities

Publication date: 12 Oct 2026
Modification date: 12 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-95386 , CVE-2026-95387 , CVE-2026-95388 , CVE-2026-95389 , CVE-2026-95390 , CVE-2026-95391 , CVE-2026-95392 , CVE-2026-95393 , CVE-2026-95394 , CVE-2026-95395 , CVE-2026-96415 , CVE-2026-96416 , CVE-2026-96417 , CVE-2026-96418 , CVE-2026-96419 , CVE-2026-96420 , CVE-2026-96421 , CVE-2026-96422 , CVE-2026-96423

Description

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark.
(CVE-2026-95386)
Heap-based Buffer Overflow in Wireshark. (CVE-2026-95387)
Heap-based Buffer Overflow in Wireshark. (CVE-2026-95388)
Heap-based Buffer Overflow in Wireshark. (CVE-2026-95389)
NULL Pointer Dereference in Wireshark. (CVE-2026-95390)
Use After Free in Wireshark. (CVE-2026-95391)
Buffer Over-read in Wireshark. (CVE-2026-95392)
Heap-based Buffer Overflow in Wireshark. (CVE-2026-95393)
Unchecked Input for Loop Condition in Wireshark. (CVE-2026-95394)
Missing Release of Memory after Effective Lifetime in Wireshark.
(CVE-2026-95395)
The Catapult DCT2000 protocol dissector could crash. (CVE-2026-96415)
The IEEE 802.11 protocol dissector could crash. (CVE-2026-96416)
The RF4CE protocol dissector could crash. (CVE-2026-96417)
The TIFF protocol dissector could go into an infinite loop.
(CVE-2026-96418)
Importing a crafted configuration profile could crash Wireshark or
execute arbitrary code. (CVE-2026-96419)
The Toshiba file parser could crash. (CVE-2026-96420)
The USB HID protocol dissector could go into an infinite loop and leak
memory. (CVE-2026-96421)
The Frame protocol metadissector could crash. (CVE-2026-96422)
The X11 protocol dissector could crash. (CVE-2026-96423)

References

SRPMS

10/core