ALAS2023-2026-1450

References: CVE-2025-11626  CVE-2025-13499  CVE-2025-13674  CVE-2025-13945  CVE-2025-13946  CVE-2025-1492  CVE-2026-0959  CVE-2026-0960  CVE-2026-0961  CVE-2026-0962 
FAQs regarding Amazon Linux ALAS/CVE Severity

Issue Overview:

MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of service (CVE-2025-11626)

Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service (CVE-2025-13499)

BPv7 dissector crash in Wireshark 4.6.0 allows denial of service (CVE-2025-13674)

HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (CVE-2025-13945)

MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service (CVE-2025-13946)

Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10 allows denial of service via packet injection or crafted capture file (CVE-2025-1492)

IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service (CVE-2026-0959)

HTTP3 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.2 allows denial of service (CVE-2026-0960)

BLF file parser crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service (CVE-2026-0961)

SOME/IP-SD protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service (CVE-2026-0962)

Issue Correction:
Run dnf update wireshark --releasever 2023.10.20260302 or dnf update --advisory ALAS2023-2026-1450 --releasever 2023.10.20260302 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation

New Packages:

aarch64:
    wireshark-cli-debuginfo-4.4.2-1.amzn2023.0.4.aarch64
    wireshark-cli-4.4.2-1.amzn2023.0.4.aarch64
    wireshark-devel-4.4.2-1.amzn2023.0.4.aarch64
    wireshark-debugsource-4.4.2-1.amzn2023.0.4.aarch64

src:
    wireshark-4.4.2-1.amzn2023.0.4.src

x86_64:
    wireshark-cli-debuginfo-4.4.2-1.amzn2023.0.4.x86_64
    wireshark-cli-4.4.2-1.amzn2023.0.4.x86_64
    wireshark-devel-4.4.2-1.amzn2023.0.4.x86_64
    wireshark-debugsource-4.4.2-1.amzn2023.0.4.x86_64