Wireshark 4.6.8 has been released, featuring 31 security patches, marking the largest single-release hardening effort in the tool's history. The updates primarily address vulnerabilities related to crashes from malformed capture files, while also enhancing the Bluetooth stack, 5G telecom protocols, and the sharkd daemon. Users should prioritize updating to this version, especially those who rely on Wireshark for network traffic analysis, to mitigate potential out-of-bounds read vulnerabilities. Additionally, Linux users should note a change in the default path for extcap binaries to align with the FHS convention

Wireshark 4.6.8 Drops Record 31 Security Patches in Major Hardening Push

Wireshark 4.6.8 is here, delivering 31 security patches that represent the largest single-release hardening effort in the tool's history. The updates focus on crashes triggered by malformed capture files, while also patching the Bluetooth stack, 5G telecom protocols, and the network-facing sharkd daemon. The Wireshark Foundation pushed the fixes alongside version 4.4.18 for long-term support users, closing memory corruption risks across dissectors for SSH, Kerberos, and various file parsers. Linux administrators should note that extcap binaries now default to /usr/libexec/wireshark/extcap, and teams relying on the tool for daily traffic analysis should update immediately to mitigate out-of-bounds read vulnerabilities.

Wireshark 4.6.8 Drops Record 31 Security Patches in Major Hardening Push @ Linux Compatible