# ALAS2023-2026-1904: Security update for 4 packages ALAS2023-2026-1904, released July 6, 2026, fixes 35 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/alas2023-2026-1904 - Platform: Linux - Released: Jul 6, 2026 - Priority: High (Closes CVE-2026-5657, high severity) - CVEs: 35, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-1904.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [wireshark-cli](https://patchblox.com/security/data/product/linux/wireshark-cli.md) | amzn 2023 | 1:4.6.6-1.amzn2023.0.1 | | [wireshark-cli-debuginfo](https://patchblox.com/security/data/product/linux/wireshark-cli-debuginfo.md) | amzn 2023 | 1:4.6.6-1.amzn2023.0.1 | | [wireshark-debugsource](https://patchblox.com/security/data/product/linux/wireshark-debugsource.md) | amzn 2023 | 1:4.6.6-1.amzn2023.0.1 | | [wireshark-devel](https://patchblox.com/security/data/product/linux/wireshark-devel.md) | amzn 2023 | 1:4.6.6-1.amzn2023.0.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-5653](https://patchblox.com/security/data/cve/CVE-2026-5653.md) | High | wireshark: DCP-ETSI dissector crash (bsc#1263750). | 7.5 | 0.0021 | | | [CVE-2026-5654](https://patchblox.com/security/data/cve/CVE-2026-5654.md) | High | wireshark: AMR-NB audio codec crash (bsc#1263749). | 7.5 | 0.0021 | | | [CVE-2026-5657](https://patchblox.com/security/data/cve/CVE-2026-5657.md) | High | wireshark: iLBC audio codec crash (bsc#1263747). | 7.5 | 0.0021 | | | [CVE-2026-6868](https://patchblox.com/security/data/cve/CVE-2026-6868.md) | High | wireshark: HTTP protocol dissector crash (bsc#1263762). | 7.5 | 0.0019 | | | [CVE-2026-7375](https://patchblox.com/security/data/cve/CVE-2026-7375.md) | High | wireshark: UDS protocol dissector infinite loop (bsc#1263761). | 7.5 | 0.0019 | | | [CVE-2026-7376](https://patchblox.com/security/data/cve/CVE-2026-7376.md) | High | wireshark: Sharkd utility crash (bsc#1263760). | 7.5 | 0.0019 | | | [CVE-2026-7378](https://patchblox.com/security/data/cve/CVE-2026-7378.md) | High | wireshark: Sharkd utility crash (bsc#1263759). | 7.5 | 0.0019 | | | [CVE-2026-7379](https://patchblox.com/security/data/cve/CVE-2026-7379.md) | High | wireshark: Sharkd utility memory leak (bsc#1263758). | 7.5 | 0.0019 | | | [CVE-2026-6519](https://patchblox.com/security/data/cve/CVE-2026-6519.md) | High | wireshark: MBIM protocol dissector infinite loop (bsc#1263746). | 7.5 | 0.0017 | | | [CVE-2026-6520](https://patchblox.com/security/data/cve/CVE-2026-6520.md) | High | wireshark: OpenFlow v6 protocol dissector infinite loop (bsc#1263745). | 7.5 | 0.0017 | | | [CVE-2026-6532](https://patchblox.com/security/data/cve/CVE-2026-6532.md) | Routine | wireshark: Kismet protocol dissector crash (bsc#1263734). | 5.5 | 0.0020 | | | [CVE-2026-6531](https://patchblox.com/security/data/cve/CVE-2026-6531.md) | Routine | wireshark: SANE protocol dissector infinite loop (bsc#1263735). | 5.5 | 0.0019 | | | [CVE-2026-6534](https://patchblox.com/security/data/cve/CVE-2026-6534.md) | Routine | wireshark: USB HID dissector infinite loop (bsc#1263732). | 5.5 | 0.0018 | | | [CVE-2026-6537](https://patchblox.com/security/data/cve/CVE-2026-6537.md) | Routine | wireshark: ZigBee dissector crash (bsc#1263729). | 5.5 | 0.0018 | | | [CVE-2026-6538](https://patchblox.com/security/data/cve/CVE-2026-6538.md) | Routine | wireshark: BEEP dissector crash (bsc#1263728). | 5.5 | 0.0018 | | | [CVE-2026-5406](https://patchblox.com/security/data/cve/CVE-2026-5406.md) | Routine | wireshark: FC-SWILS dissector crash (bsc#1263754). | 5.5 | 0.0018 | | | [CVE-2026-6530](https://patchblox.com/security/data/cve/CVE-2026-6530.md) | Routine | wireshark: DCP-ETSI protocol dissector crash (bsc#1263736). | 5.5 | 0.0016 | | | [CVE-2026-6870](https://patchblox.com/security/data/cve/CVE-2026-6870.md) | Routine | wireshark: GSM RP protocol dissector crash (bsc#1263725). | 5.5 | 0.0016 | | | [CVE-2026-6533](https://patchblox.com/security/data/cve/CVE-2026-6533.md) | Routine | wireshark: Dissection engine LZ77 decompression crash (bsc#1263733). | 5.5 | 0.0015 | | | [CVE-2026-5408](https://patchblox.com/security/data/cve/CVE-2026-5408.md) | Routine | wireshark: BT-DHT dissector crash (bsc#1263752). | 5.5 | 0.0014 | | | [CVE-2026-5409](https://patchblox.com/security/data/cve/CVE-2026-5409.md) | Routine | wireshark: Monero dissector crash (bsc#1263751). | 5.5 | 0.0014 | | | [CVE-2026-6521](https://patchblox.com/security/data/cve/CVE-2026-6521.md) | Routine | wireshark: OpenFlow v5 protocol dissector infinite loops (bsc#1263744). | 5.5 | 0.0014 | | | [CVE-2026-6535](https://patchblox.com/security/data/cve/CVE-2026-6535.md) | Routine | wireshark: Dissection engine zlib decompression crash (bsc#1263731). | 5.5 | 0.0014 | | | [CVE-2026-5407](https://patchblox.com/security/data/cve/CVE-2026-5407.md) | Routine | wireshark: SMB2 dissector infinite loop (bsc#1263753). | 5.5 | 0.0014 | | | [CVE-2026-6527](https://patchblox.com/security/data/cve/CVE-2026-6527.md) | Routine | wireshark: ASN.1 PER dissector crash (bsc#1263739). | 5.5 | 0.0013 | | | [CVE-2026-6529](https://patchblox.com/security/data/cve/CVE-2026-6529.md) | Routine | wireshark: iLBC audio codec crash (bsc#1263737). | 5.5 | 0.0013 | | | [CVE-2026-6869](https://patchblox.com/security/data/cve/CVE-2026-6869.md) | Routine | wireshark: WebSocket protocol dissector crash (bsc#1263726). | 5.5 | 0.0013 | | | [CVE-2026-6523](https://patchblox.com/security/data/cve/CVE-2026-6523.md) | Routine | wireshark: GNW protocol dissector infinite loop (bsc#1263742). | 5.5 | 0.0012 | | | [CVE-2026-6524](https://patchblox.com/security/data/cve/CVE-2026-6524.md) | Routine | wireshark: MySQL protocol dissector crash (bsc#1263741). | 5.5 | 0.0012 | | | [CVE-2026-6867](https://patchblox.com/security/data/cve/CVE-2026-6867.md) | Routine | wireshark: SMB2 protocol dissector crash (bsc#1263727). | 5.5 | 0.0012 | | | [CVE-2026-5299](https://patchblox.com/security/data/cve/CVE-2026-5299.md) | Routine | wireshark: ICMPv6 dissector crash (bsc#1263757). | 5.5 | 0.0012 | | | [CVE-2026-5401](https://patchblox.com/security/data/cve/CVE-2026-5401.md) | Routine | wireshark: AFP dissector crash (bsc#1263756). | 5.5 | 0.0012 | | | [CVE-2026-6522](https://patchblox.com/security/data/cve/CVE-2026-6522.md) | Routine | wireshark: RPKI-Router protocol dissector infinite loop (bsc#1263743). | 5.5 | 0.0012 | | | [CVE-2026-5404](https://patchblox.com/security/data/cve/CVE-2026-5404.md) | Routine | wireshark: K12 RF5 file parser crash (bsc#1263766). | 5.5 | 0.0012 | | | [CVE-2026-9759](https://patchblox.com/security/data/cve/CVE-2026-9759.md) | Routine | wireshark: ROHC protocol dissector crash (bsc#1266670). | 5.5 | 0.0009 | | --- Data as of 2026-11-12T07:53:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.