Thema: Wireshark (Ex-Ethereal) ...

[SiLæncer]

Changelog

What’s New

This is the last release branch with support for 32-bit Windows. Updates will no longer be available after May 22, 2024 for that platform. Issue 17779

Bug Fixes

The following vulnerabilities have been fixed:

    wnpa-sec-2022-09 Multiple dissector infinite loops.

    wnpa-sec-2022-10 Kafka dissector memory exhaustion.

The following bugs have been fixed:

    Packet bytes not displayed completely if scrolling Issue 18438.

    GOOSE: field "floating_point" not working anymore Issue 18491.

    EVS dissector missing value description Issue 18550.

    ProtoBuf parse extension definitions failed Issue 18599.

    Fuzz job crash output: fuzz-2022-11-09-11134.pcap Issue 18613.

    Wireshark is using old version of ASN (ETSI TS 125 453 V11.2.0) which is imapacting length of param in the messages Issue 18646.

    BGP: False IGMP flags value in EVPN routes (type 6,7,8) Issue 18660.

    wslog assumes stderr and stdout exist Issue 18684.

    Editing packet comments, with non-ASCII characters, on Windows saves them in the local code page, not in UTF-8. Issue 18698.

New and Updated Features

New Protocol Support

There are no new protocols in this release.

Updated Protocol Support

ASN.1 PER, BGP, BPv6, EVS, GOOSE, GSM Osmux, Kafka, Mongo, NXP 802.15.4, OpenFlow, PCAP, S1AP, and WASSP

New and Updated Capture File Support

There is no new or updated capture file support in this release.

New File Format Decoding Support

There is no new or updated file format support in this release.

[close]

https://www.wireshark.org/

[SiLæncer]

Changelog

What’s New

We do not ship official 32-bit Windows packages for Wireshark 4.0 and later. If you need to use Wireshark on that platform, we recommend using the latest 3.6 release. Issue 17779

Bug Fixes

The following vulnerabilities have been fixed:

    wnpa-sec-2023-01 EAP dissector crash. Issue 18622.

    wnpa-sec-2023-02 NFS dissector memory leak. Issue 18628.

    wnpa-sec-2023-03 Dissection engine crash. Issue 18766.

    wnpa-sec-2023-04 GNW dissector crash. Issue 18779.

    wnpa-sec-2023-05 iSCSI dissector crash. Issue 18796.

    wnpa-sec-2023-06 Multiple dissector excessive loops. Issue 18711. Issue 18720, Issue 18737.

    wnpa-sec-2023-07 TIPC dissector crash. Issue 18770.

The following bugs have been fixed:

    Qt: After modifying coloring rules, the coloring rule applied to the first packet reflects the coloring rules previously in effect. Issue 12475.

    Help file doesn’t display for extcap interfaces. Issue 15592.

    For USB traffic on XHC20 interface destination is always given as Host. Issue 16768.

    Wireshark Expert Info - cannot deselect the limit to display filter tick box. Issue 18461.

    Wrong pointer conversion in get_data_source_tvb_by_name() Issue 18517.

    Wrong number of bits skipped while decoding an empty UTF8String on UPER packet. Issue 18702.

    Crash when analyzing protobuf packets. Issue 18730.

    Uninitialized values in various dissectors. Issue 18742.

    String (GeoIP country/city) ordering doesn’t work in Endpoints. Issue 18749.

    Wireshark crashes with an assertion failure on stray minus in filter. Issue 18750.

    IO Graph: Add new graph only works until the 10th graph. Issue 18762.

    Fuzz job crash output: fuzz-2022-12-30-11007.pcap. Issue 18770.

    Q.850 - error in label for cause 0x7F. Issue 18780.

    Uninitialized values in CoAP and RTPS dissectors. Issue 18785.

    Screenshots in AppStream metainfo.xml file not available. Issue 18801.

New and Updated Features
Removed Features and Support

New Protocol Support

There are no new protocols in this release.

Updated Protocol Support

ASTERIX, BEEP, BGP, BPv6, CoAP, EAP, GNW, GSM A-bis P-GSL, iSCSI, ISUP, LwM2M-TLV, MBIM, NBAP, NFS, OBD-II, OPUS, ProtoBuf, RLC, ROHC, RTPS, Telnet, TIPC, and USB

New and Updated Capture File Support

There is no new or updated capture file support in this release.

New File Format Decoding Support

There is no new or updated file format support in this release.

Getting Wireshark

Wireshark source code and installation packages are available from https://www.wireshark.org/download.html.

Vendor-supplied Packages

Most Linux and Unix vendors supply their own Wireshark packages. You can usually install or upgrade Wireshark using the package management system specific to that platform. A list of third-party packages can be found on the download page on the Wireshark web site.

File Locations

Wireshark and TShark look in several different locations for preference files, plugins, SNMP MIBS, and RADIUS dictionaries. These locations vary from platform to platform. You can use Help › About Wireshark › Folders or tshark -G folders to find the default locations on your system.

[close]

https://www.wireshark.org/

[SiLæncer]

Changelog

What’s New

This is the last release branch with support for 32-bit Windows. Updates will no longer be available after May 22, 2024 for that platform. Issue 17779

Bug Fixes

The following vulnerabilities have been fixed:

    wnpa-sec-2023-02 NFS dissector memory leak. Issue 18628.

    wnpa-sec-2023-03 Dissection engine crash. Issue 18766.

    wnpa-sec-2023-04 GNW dissector crash. Issue 18779.

    wnpa-sec-2023-05 iSCSI dissector crash. Issue 18796.

    wnpa-sec-2023-06 Multiple dissector excessive loops. Issue 18711. Issue 18720, Issue 18737.

    wnpa-sec-2023-07 TIPC dissector crash. Issue 18770.

The following bugs have been fixed:

    Qt: After modifying coloring rules, the coloring rule applied to the first packet reflects the coloring rules previously in effect. Issue 12475.

    Help file doesn’t display for extcap interfaces Issue 15592.

    Dissector bug, protocol DRBD Issue 16689.

    For USB traffic on XHC20 interface destination is always given as Host Issue 16768.

    Wrong pointer conversion in get_data_source_tvb_by_name() Issue 18517.

    Wrong number of bits skipped while decoding an empty UTF8String on UPER packet Issue 18702.

    Uninitialized values in various dissectors Issue 18742.

    Q.850 - error in label for cause 0x7F Issue 18780.

    Uninitialized values in CoAP and RTPS dissectors Issue 18785.

    Screenshots in AppStream metainfo.xml file not available Issue 18801.

New and Updated Features

New Protocol Support

There are no new protocols in this release.

Updated Protocol Support

BEEP, BGP, BPv6, BSSGP, CoAP, GNW, GSM A-bis P-GSL, GSM BSSMAP, iSCSI, ISUP, Kafka, LwM2M-TLV, NAS-5GS, NFS, OPUS, RLC, ROHC, RTPS, TCP, Telnet, and USB

[close]

https://www.wireshark.org/

[SiLæncer]

Changelog

What’s New

We do not ship official 32-bit Windows packages for Wireshark 4.0 and later. If you need to use Wireshark on that platform, we recommend using the latest 3.6 release. Issue 17779

If you’re running Wireshark on macOS and upgraded to macOS 13 from an earlier version, you will likely have to open and run the “Uninstall ChmodBPF” package, then open and run “Install ChmodBPF” in order to reset the ChmodBPF Launch Daemon. Issue 18734.

Bug Fixes

The following vulnerabilities have been fixed:

    wnpa-sec-2023-08 ISO 15765 and ISO 10681 dissector crash. Issue 18839.

The following bugs have been fixed:

    UTF-8 characters end up escaped in PSML output. Issue 10445.

    Export filtered displayed packets won’t save IP fragments of SCTP fragments needed to reassemble a displayed frame. Issue 12597.

    DICOM dissection in reassembled PDV goes wrong. Issue 13388.

    "Export Objects - IMF" produces incorrect file, TCP reassembly fails with retransmissions that have additional data. Issue 13523.

    The intelligent scroll bar or minimap is not predictable on locating and scrolling. Issue 13989.

    If you mark (or unmark) the currently-selected frame, the packet details still say it’s not marked (or it is marked) Issue 14330.

    An out-of-order packet incorrectly detected as retransmission breaks desegmentation of TCP stream. Issue 15993.

    Sorting Packet Loss Column is not sorting correct. Issue 16785.

    Some HTTPS packets cannot be decrypted. Issue 17406.

    SIP TCP decoding regression from Wireshark 1.99.0 to 3.6.8. Issue 18411.

    Frame comments not preserved when using filter to write new pcap from tshark. Issue 18693.

    ChmodBPF not working on macOS Ventura 13.1. Issue 18734.

    Wireshark GUI and window manager stuck after setting display filter. Issue 18809.

    Dissector bug, protocol H.261. Issue 18812.

    File extension heuristics are case-sensitive. Issue 18821.

    Symbolic links to packages in macOS dmg can’t be double-clicked to install on macOS 13.2. Issue 18830.

    Potential memory leak in tshark.c. Issue 18837.

    Fuzz job crash output: fuzz-2023-02-05-7303.pcap. Issue 18842.

    f5fileinfo: Hardware platforms missing descriptions. Issue 18848.

    The lines in the intelligent scrollbar are off by one. Issue 18850.

    Wireshark crashes on invalid UDS packet in Lua context. Issue 18865.

    TECMP dissector shows the wrong Voltage in Vendor Data. Issue 18871.

    UDS: Names of RDTCI subfunctions 0x0b …? 0x0e are not correct. Issue 18873.

New and Updated Features

There are no new or updated features in this release.

Removed Features and Support

New Protocol Support

There are no new protocols in this release.

Updated Protocol Support

ASTERIX, BGP, DHCP, ERF, F5 Ethernet trailer, GMR-1 RR, Gryphon, GSM SMS, H.261, H.450, ISO 10681, ISO 15765, MIPv6, NAS-5gs, NR RRC, NS Trace, OptoMMP, PDCP-LTE, PDCP-NR, QSIG, ROHC, RSVP, RTCP, SCTP, SIP, TCP, TECMP, TWAMP, UDS, and UMTS RLC

[close]

https://www.wireshark.org/

[SiLæncer]

Changelog

What’s New

This is the last release branch with support for 32-bit Windows. Updates will no longer be available after May 22, 2024 for that platform. Issue 17779

Bug Fixes

The following vulnerabilities have been fixed:

    wnpa-sec-2023-08 ISO 15765 and ISO 10681 dissector crash. Issue 18839.

The following bugs have been fixed:

    UTF-8 characters end up escaped in PSML output Issue 10445.

    Export filtered displayed packets won’t save IP fragments of SCTP fragments needed to reassemble a displayed frame. Issue 12597.

    The intelligent scroll bar or minimap is not predictable on locating and scrolling Issue 13989.

    If you mark (or unmark) the currently-selected frame, the packet details still say it’s not marked (or it is marked) Issue 14330.

    Sorting Packet Loss Column is not sorting correct Issue 16785.

    SIP TCP decoding regression from Wireshark 1.99.0 to 3.6.8 Issue 18411.

    ChmodBPF not working on macOS Ventura 13.1 Issue 18734.

    Symbolic links to packages in macOS dmg can’t be double-clicked to install on macOS 13.2 Issue 18830.

    Potential memory leak in tshark.c Issue 18837.

    Fuzz job crash output: fuzz-2023-02-05-7303.pcap Issue 18842.

    f5fileinfo: Hardware platforms missing descriptions Issue 18848.

    The lines in the intelligent scrollbar are off by one Issue 18850.

    TECMP dissector shows the wrong Voltage in Vendor Data Issue 18871.

New and Updated Features

New Protocol Support

There are no new protocols in this release.

Updated Protocol Support

DHCP, ERF, F5 Ethernet trailer, GMR-1 RR, Gryphon, GSM SMS, H.450, ISO 10681, ISO 15765, NAS-5GS, NR RRC, NS Trace, OptoMMP, PDCP-LTE, QSIG, ROHC, RSVP, RTCP, SCTP, SIP, TCP, TECMP, TWAMP, and UMTS RLC

[close]

https://www.wireshark.org/

[SiLæncer]

Changelog

What’s New

We do not ship official 32-bit Windows packages for Wireshark 4.0 and later. If you need to use Wireshark on that platform, we recommend using the latest 3.6 release. Issue 17779

If you’re running Wireshark on macOS and upgraded to macOS 13 from an earlier version, you will likely have to open and run the “Uninstall ChmodBPF” package, then open and run “Install ChmodBPF” in order to reset the ChmodBPF Launch Daemon. Issue 18734.

Bug Fixes

The following vulnerabilities have been fixed:

    wnpa-sec-2023-09 RPCoRDMA dissector crash. Issue 18852.

    wnpa-sec-2023-10 LISP dissector large loop. Issue 18900.

    wnpa-sec-2023-11 GQUIC dissector crash Issue 18947.

The following bugs have been fixed:

    Wireshark ITS Dissector RTCMEM wrong protocol version selector 2 - should use 1. Issue 18862.

    Wireshark treats the letter E in SSRC as an exponential representation of a number. Issue 18879.

    VNC RRE Parser skips over data. Issue 18883.

    sshdump coredump when --remote-interface is left empty. Issue 18904.

    Fuzz job crash output: fuzz-2023-03-17-7298.pcap. Issue 18917.

    Fuzz job crash output: fuzz-2023-03-27-7564.pcap. Issue 18934.

    RFC8925 support (dhcp option 108) Issue 18943.

    DIS dissector shows an incorrect state in the packet list info column. Issue 18967.

    RTP analysis shows incorrect timestamp error when timestamp is rolled over. Issue 18973.

    Asterisk (*) key crash on Endpoint/Conversation dialog. Issue 18975.

    The RTP player waveform now synchronizes better with audio.

New and Updated Features

There are no new or updated features in this release.
Removed Features and Support

New Protocol Support

There are no new protocols in this release.

Updated Protocol Support

DHCP, DIS, DNS, ERF, FF, genl, GQUIC, GSM A-bis OML, HL7, IEEE 802.11, ITS, LAPD, netfilter, netlink-route, netlink-sock_diag, nl80211, RLC, RPCoRDMA, RTPS, SCTP, SMB, UDS, VNC, and WCP

New and Updated Capture File Support

There is no new or updated capture file support in this release.

Netmon and NetScaler

New File Format Decoding Support

There is no new or updated file format support in this release.

[close]

https://www.wireshark.org/

[SiLæncer]

Changelog

What’s New

This is the last release branch with support for 32-bit Windows. Updates will no longer be available after May 22, 2024 for that platform. Issue 17779

If you’re running Wireshark on macOS and upgraded to macOS 13 from an earlier version, you will likely have to open and run the “Uninstall ChmodBPF” package, then open and run “Install ChmodBPF” in order to reset the ChmodBPF Launch Daemon. Issue 18734.

Bug Fixes

The following vulnerabilities have been fixed:

    wnpa-sec-2023-09 RPCoRDMA dissector crash. Issue 18852. CVE-2023-1992.

    wnpa-sec-2023-10 LISP dissector large loop. Issue 18900. CVE-2023-1993.

    wnpa-sec-2023-11 GQUIC dissector crash Issue 18947. CVE-2023-1994.

The following bugs have been fixed:

    Wireshark ITS Dissector RTCMEM wrong protocol version selector 2 - should use 1 Issue 18862.

    Wireshark treats the letter E in SSRC as an exponential representation of a number Issue 18879.

    VNC RRE Parser skips over data Issue 18883.

    Fuzz job crash output: fuzz-2023-03-27-7564.pcap Issue 18934.

    Fuzz job crash output: fuzz-2023-03-31-6903.pcap Issue 18947.

    RTP analysis shows incorrect timestamp error when timestamp is rolled over Issue 18973.

New and Updated Features

New Protocol Support

There are no new protocols in this release.

Updated Protocol Support

DNS, ERF, FF, genl, GQUIC, GSM A-bis OML, HL7, IEEE 802.11, ITS, ITS, LISP, netlink, netlink-netfilter, netlink-sock_diag, nl80211, RLC, RPCoRDMA, RTPS, SCTP, SMB, VNC, and WCP
New and Updated Capture File Support

Netmon and NetScaler

New File Format Decoding Support

There is no new or updated file format support in this release.

[close]

https://www.wireshark.org/

[SiLæncer]

Changelog

What’s New

We do not ship official 32-bit Windows packages for Wireshark 4.0 and later. If you need to use Wireshark on that platform, we recommend using the latest 3.6 release. Issue 17779

If you’re running Wireshark on macOS and upgraded to macOS 13 from an earlier version, you will likely have to open and run the “Uninstall ChmodBPF” package, then open and run “Install ChmodBPF” in order to reset the ChmodBPF Launch Daemon. Issue 18734.

Bug Fixes

The following vulnerabilities have been fixed:

    wnpa-sec-2023-12 Candump log file parser crash. Issue 19062. CVE-2023-2855.

    wnpa-sec-2023-13 BLF file parser crash. Issue 19063. CVE-2023-2857.

    wnpa-sec-2023-14 GDSDB dissector infinite loop. Issue 19068.

    wnpa-sec-2023-15 NetScaler file parser crash. Issue 19081. CVE-2023-2858.

    wnpa-sec-2023-16 VMS TCPIPtrace file parser crash. Issue 19083. CVE-2023-2856.

    wnpa-sec-2023-17 BLF file parser crash. Issue 19084. CVE-2023-2854.

    wnpa-sec-2023-18 RTPS dissector crash. Issue 19085. CVE-2023-0666.

    wnpa-sec-2023-19 IEEE C37.118 Synchrophasor dissector crash. Issue 19087. CVE-2023-0668.

    wnpa-sec-2023-20 XRA dissector infinite loop. Issue 19100.

The following bugs have been fixed:

    Conversations list has incorrect unit (bytes) in bit speed columns in the 3.7 development versions. Issue 18211.

    The media_type table should treat media types, e.g. application/3gppHal+json, as case-insensitive. Issue 18611.

    NNTP dissector bug. Issue 18981.

    Incorrect padding in BFCP decoder. Issue 18890.

    SPNEGO dissector bug. Issue 18991.

    SRT values are incorrect when applying a time shift. Issue 18999.

    Add warning that capturing is not supported in Wireshark installed from flatpak. Issue 19008.

    Opening Wireshark with -z io,stat option. Issue 19042.

    batadv dissector bug. Issue 19047.

    radiotap-gen build fails if pcap is not found. Issue 19059.

    [UDS] When filtering the uds.wdbi.data_identifier or uds.iocbi.data_identifier field is interpreted as 1 byte whereas it consists of 2 bytes. Issue 19078.

    Wireshark can’t save this capture in that format. Issue 19080.

    MSMMS parsing buffer overflow. Issue 19086.

    USB HID parser shows wrong label for usages Rx/Vx/Vbrx of usage page Generic Desktop Control. Issue 19095.

    "Follow ? QUIC Stream" mixes data between streams. Issue 19102.

New and Updated Features

The media type dissector table now properly treats media types and subtypes as case-insensitive automatically, per RFC 6838. Media types no longer need to be lower cased before registering or looking up in the table.

Removed Features and Support

New Protocol Support

There are no new protocols in this release.

Updated Protocol Support

batadv, BFCP, CommunityID, COSE, GDSDB, H.265, HTTP, ILP, ISAKMP, MSMMS, NNTP, NR RRC, NTLMSSP, QUIC, RTPS, SPNEGO, Synphasor, TCP, UDS, ULP, USB HID, and XRA

New and Updated Capture File Support

BLF, Candump, NetScaler, and VMS TCPIPtrace

New File Format Decoding Support

There is no new or updated file format support in this release.

[close]

https://www.wireshark.org/

[SiLæncer]

Changelog

What’s New

This is the last release branch with support for 32-bit Windows. Updates will no longer be available after May 22, 2024 for that platform. Issue 17779

If you’re running Wireshark on macOS and upgraded to macOS 13 from an earlier version, you will likely have to open and run the “Uninstall ChmodBPF” package, then open and run “Install ChmodBPF” in order to reset the ChmodBPF Launch Daemon. Issue 18734.

Bug Fixes

The following vulnerabilities have been fixed:

    wnpa-sec-2023-12 Candump log file parser crash. Issue 19062. CVE-2023-2855.

    wnpa-sec-2023-13 BLF file parser crash. Issue 19063. CVE-2023-2857.

    wnpa-sec-2023-14 GDSDB dissector infinite loop. Issue 19068.

    wnpa-sec-2023-15 NetScaler file parser crash. Issue 19081. CVE-2023-2858.

    wnpa-sec-2023-16 VMS TCPIPtrace file parser crash. Issue 19083. CVE-2023-2856.

    wnpa-sec-2023-19 IEEE C37.118 Synchrophasor dissector crash. Issue 19087. CVE-2023-0668.

    wnpa-sec-2023-20 XRA dissector infinite loop. Issue 19100.

The following bugs have been fixed:

    Incorrect padding in BFCP decoder Issue 18890.

    SPNEGO dissector bug Issue 18991.

    SRT values are incorrect when applying a time shift. Issue 18999.

    batadv dissector bug Issue 19047.

    [UDS] When filtering the uds.wdbi.data_identifier or uds.iocbi.data_identifier field is interpreted as 1 byte whereas it consists of 2 bytes Issue 19078.

    Wireshark can’t save this capture in that format Issue 19080.

    MSMMS parsing buffer overflow Issue 19086.

    USB HID parser shows wrong label for usages Rx/Vx/Vbrx of usage page Generic Desktop Control Issue 19095.

    "Follow ? QUIC Stream" mixes data between streams. Issue 19102.

New and Updated Features

New Protocol Support

There are no new protocols in this release.

Updated Protocol Support

batadv, BFCP, CommunityID, COSE, GDSDB, ILP, ISAKMP, MSMMS, NTLMSSP, QUIC, SPNEGO, Synphasor, TCP, UDS, ULP, USB HID, and XRA

New and Updated Capture File Support

BLF, Candump, NetScaler, and VMS TCPIPtrace

New File Format Decoding Support

There is no new or updated file format support in this release.

[close]

https://www.wireshark.org/

[SiLæncer]

Changelog

What’s New

We do not ship official 32-bit Windows packages for Wireshark 4.0 and later. If you need to use Wireshark on that platform, we recommend using the latest 3.6 release. Issue 17779

If you’re running Wireshark on macOS and upgraded to macOS 13 from an earlier version, you might have to open and run the “Uninstall ChmodBPF” package, then open and run “Install ChmodBPF” in order to reset the ChmodBPF Launch Daemon. Issue 18734.

Bug Fixes

The following vulnerabilities have been fixed:

    wnpa-sec-2023-21 Kafka dissector crash. Issue 19105.

    wnpa-sec-2023-22 iSCSI dissector crash. Issue 19164.

The following bugs have been fixed:

    Crash when (re)loading a capture file after renaming a dfilter macro. Issue 13753.

    Moving a column deselects selected packet and moves to beginning of packet list. Issue 16251.

    If you set the default interface in the preferences, it doesn’t work with TShark. Issue 16593.

    Severe performance issues in Follow ? Save As raw workflow. Issue 17313.

    TShark doesn’t support the tab character as an aggregator character in \"-T fields\" Issue 18002.

    On Windows clicking on a link in the 'Software Update' window launches, now unsupported, MS Internet Explorer. Issue 18488.

    Wireshark 4.x.x on Win10-x64 crashes after saving a file with a name already in use. Issue 18679.

    NAS-5GS Operator-defined Access Category: Multiple Criteria values not displayed in dissected packet display. Issue 18941.

    Server Hello Packet Invisible - during 802.1x Authentication- from Wireshark App Version 4.0.3 (v4.0.3-0-gc552f74cdc23) & above. Issue 19071.

    TShark reassembled data is incomplete/truncated. Issue 19107.

    CQL protocol parsing issues with Result frames from open source Cassandra. Issue 19119.

    TLS 1.3 second Key Update doesn’t work. Issue 19120.

    HTTP2 dissector reports an assertion error on large data frames. Issue 19121.

    epan: Single letter hostnames aren’t displayed correctly. Issue 19137.

    BLF: CAN-FD-Message format is missing a field. Issue 19146.

    BLF: last parameter of LIN-Message is not mandatory (BUGFIX) Issue 19147.

    PPP IPv6CP: Incorrect payload length warning. Issue 19149.

    INSTALL file needs to be updated for Debian. Issue 19167.

    Some RTP streams make Wireshark crash when trying to play stream. Issue 19170.

    Wrong ordering in OpenFlow 1.0 Datapath unique ID. Issue 19172.

    Incorrect mask in RTCP slice picture ID. Issue 19182.

    Dissection error in AMQP 1.0. Issue 19191.

New and Updated Features

There are no new or updated features in this release.

Removed Features and Support

New Protocol Support

There are no new protocols in this release.

Updated Protocol Support

9P, AMQP, BGP, CQL, DHCPFO, EAP, GlusterFS, GSM MAP, HTTP2, iSCSI, Kafka, Kerberos, NAN, NAS-5GS, OCP.1, OpenFlow 1.0, PDCP-NR, PEAP, PPPoE, RSL, RTCP, rtnetlink, and XMPP
New and Updated Capture File Support

There is no new or updated capture file support in this release.

New File Format Decoding Support

There is no new or updated file format support in this release.

[close]

https://www.wireshark.org/

[SiLæncer]

Changelog

What’s New

This is the last release branch with support for 32-bit Windows. Updates will no longer be available after May 22, 2024 for that platform. Issue 17779

If you’re running Wireshark on macOS and upgraded to macOS 13 from an earlier version, you might have to open and run the “Uninstall ChmodBPF” package, then open and run “Install ChmodBPF” in order to reset the ChmodBPF Launch Daemon. Issue 18734.

Bug Fixes

The following vulnerabilities have been fixed:

    wnpa-sec-2023-21 Kafka dissector crash. Issue 19105.

The following bugs have been fixed:

    Crash when (re)loading a capture file after renaming a dfilter macro Issue 13753.

    Moving a column deselects selected packet and moves to beginning of packet list Issue 16251.

    If you set the default interface in the preferences, it doesn’t work with TShark Issue 16593.

    Severe performance issues in Follow ? Save As raw workflow Issue 17313.

    NAS-5GS Operator-defined Access Category: Multiple Criteria values not displayed in dissected packet display Issue 18941.

    CQL protocol parsing issues with Result frames from open source Cassandra Issue 19119.

    TLS 1.3 second Key Update doesn’t work Issue 19120.

    HTTP2 dissector reports an assertion error on large data frames Issue 19121.

    epan: Single letter hostnames aren’t displayed correctly Issue 19137.

    BLF: CAN-FD-Message format is missing a field Issue 19146.

    BLF: last parameter of LIN-Message is not mandatory (BUGFIX) Issue 19147.

    PPP IPv6CP: Incorrect payload length warning Issue 19149.

    Wrong ordering in OpenFlow 1.0 Datapath unique ID Issue 19172.

    Incorrect mask in RTCP slice picture ID Issue 19182.

    Dissection error in AMQP 1.0 Issue 19191.

New and Updated Features

New Protocol Support

There are no new protocols in this release.

Updated Protocol Support

9P, AMQP, BGP, CQL, GlusterFS, HTTP2, Kafka, NAN, NAS-5GS, OpenFlow v1.0, PDCP-NR, PPPoE, RSL, RTCP, and XMPP

New and Updated Capture File Support

There is no new or updated capture file support in this release.

New File Format Decoding Support

There is no new or updated file format support in this release.

[close]

https://www.wireshark.org/

[SiLæncer]

Changelog

What’s New

We do not ship official 32-bit Windows packages for Wireshark 4.0 and later. If you need to use Wireshark on that platform, we recommend using the latest 3.6 release. Issue 17779

If you’re running Wireshark on macOS and upgraded to macOS 13 from an earlier version, you might have to open and run the “Uninstall ChmodBPF” package, then open and run “Install ChmodBPF” in order to reset the ChmodBPF Launch Daemon. Issue 18734.

Bug Fixes

The following vulnerabilities have been fixed:

    wnpa-sec-2023-23 CBOR dissector crash. Issue 19144.

    wnpa-sec-2023-24 BT SDP dissector infinite loop. Issue 19258.

    wnpa-sec-2023-25 BT SDP dissector memory leak. Issue 19259.

    wnpa-sec-2023-26 CP2179 dissector crash. Issue 19229.

The following bugs have been fixed:

    TShark cannot capture to pipe on Windows correctly. Issue 17900.

    Wireshark wrongly blames group membership when pcap capabilities are removed. Issue 18279.

    Packet bytes window broken layout. Issue 18326.

    RTP Player only shows waveform until sequence rollover. Issue 18829.

    Valid Ethernet CFM DMM packets are shown as malformed. Issue 19198.

    Crash on DICOM Export Objects window close. Issue 19207.

    The QUIC dissector is reporting the quic_transport_parameters max_ack_delay with the title \"GREASE\" Issue 19209.

    Preferences: Folder name editing behaves weirdly, cursor jumps. Issue 19213.

    DHCPFO: Expert info list does not show all expert infos. Issue 19216.

    Websocket packets not decoded and displayed for Field type=Custom and Field name websocket.payload.text. Issue 19220.

    Cannot read pcapng file captured on OpenBSD and read on FreeBSD. Issue 19230.

    UI: While capturing the Wireshark icon changes from green to blue when new file is created. Issue 19252.

    Conversation: heap-use-after-free after wmem_leave_file_scope. Issue 19265.

    IP Packets with DSCP 44 does not indicate "Voice-Admit" Issue 19270.

    NAS 5GS Malformed Packet Decoding SOR transparent container PLMN ID and access technology list. Issue 19273.

    UI: Auto scroll button in the toolbar is turned on when manually scrolling to the end of packet list. Issue 19274.

New and Updated Features

There are no new or updated features in this release.

New Protocol Support

There are no new protocols in this release.

Updated Protocol Support

BT SDP, CBOR, CFM, CP2179, CQL, DHCPFO, DICOM, F1AP, GSM DTAP, IEEE 802.11, IPv4, NAS-5GS, PFCP, PKT CCC, QUIC, RTP, TFTP, WebSocket, and XnAP

New and Updated Capture File Support

There is no new or updated capture file support in this release.

New File Format Decoding Support

There is no new or updated file format support in this release.

[close]

https://www.wireshark.org/

[SiLæncer]

Changelog

What’s New

This is the last release branch with support for 32-bit Windows. Updates will no longer be available after May 22, 2024 for that platform. Issue 17779

If you’re running Wireshark on macOS and upgraded to macOS 13 from an earlier version, you might have to open and run the “Uninstall ChmodBPF” package, then open and run “Install ChmodBPF” in order to reset the ChmodBPF Launch Daemon. Issue 18734.

Bug Fixes

The following vulnerabilities have been fixed:

    wnpa-sec-2023-22 iSCSI dissector crash. Issue 19164. CVE-2023-3649.

    wnpa-sec-2023-24 BT SDP dissector infinite loop. Issue 19258.

    wnpa-sec-2023-25 BT SDP dissector memory leak. Issue 19259.

    wnpa-sec-2023-26 CP2179 dissector crash. Issue 19229.

The following bugs have been fixed:

    Wireshark wrongly blames group membership when pcap capabilities are removed. Issue 18279.

    Packet bytes window broken layout. Issue 18326.

    Valid Ethernet CFM DMM packets are shown as malformed. Issue 19198.

    The QUIC dissector is reporting the quic_transport_parameters max_ack_delay with the title "GREASE". Issue 19209.

    Preferences: Folder name editing behaves weirdly, cursor jumps. Issue 19213.

    DHCPFO: Expert info list does not show all expert infos. Issue 19216.

    Applying color filtering fails when selecting the same field to color (i.e., changing frames without focusing in packet details). Issue 19249.

    NAS 5GS Malformed Packet Decoding SOR transparent container PLMN ID and access technology list. Issue 19273.

New and Updated Features

There are no new or updated features in this release.

New Protocol Support

There are no new protocols in this release.

Updated Protocol Support

BT SDP, CP2179, CQL, DHCPFO, F1AP, GSM DTAP, IEEE 802.11, NAS-5GS, PFCP, and TFTP

New and Updated Capture File Support

There is no new or updated capture file support in this release.

New File Format Decoding Support

There is no new or updated file format support in this release.

[close]

https://www.wireshark.org/

[SiLæncer]

Changelog

What’s New

We do not ship official 32-bit Windows packages for Wireshark 4.0 and later. If you need to use Wireshark on that platform, we recommend using the latest 3.6 release. Issue 17779

If you’re running Wireshark on macOS and upgraded to macOS 13 from an earlier version, you might have to open and run the “Uninstall ChmodBPF” package, then open and run “Install ChmodBPF” in order to reset the ChmodBPF Launch Daemon. Issue 18734.

Bug Fixes

The following bugs have been fixed:

    Error loading g729.so plugin with Wireshark 4.0.9 and 3.6.17 on macOS. Issue 19374.

New and Updated Features

There are no new or updated features in this release.

New Protocol Support

There are no new protocols in this release.

Updated Protocol Support

There are no updated protocols in this release.

New and Updated Capture File Support

There is no new or updated capture file support in this release.

New File Format Decoding Support

There is no new or updated file format support in this release.


4.0.9

What’s New

We do not ship official 32-bit Windows packages for Wireshark 4.0 and later. If you need to use Wireshark on that platform, we recommend using the latest 3.6 release. Issue 17779

If you’re running Wireshark on macOS and upgraded to macOS 13 from an earlier version, you might have to open and run the “Uninstall ChmodBPF” package, then open and run “Install ChmodBPF” in order to reset the ChmodBPF Launch Daemon. Issue 18734.

Bug Fixes

The following vulnerabilities have been fixed:

    wnpa-sec-2023-27 RTPS dissector memory leak. Issue 19322. CVE-2023-5371.

The following bugs have been fixed:

    Updating from within Wireshark if a file is open fails because it can’t close Wireshark. Issue 17658.

    ESL timestamp provided by ET2000 not displayed. Issue 18308.

    Kafka: dissect_kafka_sync_group_request missing version check for instance_id. Issue 19290.

    Start Capture via context menu crashes on macOS with an older Qt version. Issue 19299.

    Delta time displayed is incorrect after unsetting time reference. Issue 19324.

    Fuzz job crash output: randpkt-2023-09-09-7060.pcap. Issue 19332.

    Missing one bit in SCCP::sequencing/segmenting. Issue 19336.

    Protobuf field malformed packet for last byte of 'repeated fixed32' Issue 19342.

    RTP/RFC 4571: Wrong desegmentation/reassembly in RTP over TCP packets. Issue 19345.

    Sparklines not working on macOS Sonoma with both native OS and Homebrew pcap. Issue 19349.

    Incorrect bit values and namings in BSS Configuration Report TLV. Issue 19352.

New and Updated Features

There are no new or updated features in this release.

New Protocol Support

There are no new protocols in this release.

Updated Protocol Support

ESL, GNW, IDN, IEEE 1722, IEEE 1905.1a, ITS, Kafka, ProtoBuf, RTP, RTPS, SCCP, TACACS, and Tibia

New and Updated Capture File Support

There is no new or updated capture file support in this release.

New File Format Decoding Support

There is no new or updated file format support in this release.

[close]

https://www.wireshark.org/

[SiLæncer]

Changelog

What’s New

This is the last release branch with support for 32-bit Windows. Updates will no longer be available after May 22, 2024 for that platform. Issue 17779

If you’re running Wireshark on macOS and upgraded to macOS 13 from an earlier version, you might have to open and run the “Uninstall ChmodBPF” package, then open and run “Install ChmodBPF” in order to reset the ChmodBPF Launch Daemon. Issue 18734.

Bug Fixes

The following bugs have been fixed:

    Error loading g729.so plugin with Wireshark 4.0.9 and 3.6.17 on macOS. Issue 19374.

New and Updated Features

There are no new or updated features in this release.

New Protocol Support

There are no new protocols in this release.

Updated Protocol Support

There are no updated protocols in this release.

New and Updated Capture File Support

There is no new or updated capture file support in this release.

New File Format Decoding Support

There is no new or updated file format support in this release.


3.6.17

What’s New

This is the last release branch with support for 32-bit Windows. Updates will no longer be available after May 22, 2024 for that platform. Issue 17779

If you’re running Wireshark on macOS and upgraded to macOS 13 from an earlier version, you might have to open and run the “Uninstall ChmodBPF” package, then open and run “Install ChmodBPF” in order to reset the ChmodBPF Launch Daemon. Issue 18734.

Bug Fixes

The following vulnerabilities have been fixed:

    wnpa-sec-2023-27 RTPS dissector memory leak. Issue 19322. CVE-2023-5371.

The following bugs have been fixed:

    ESL timestamp provided by ET2000 not displayed Issue 18308.

    Kafka: dissect_kafka_sync_group_request missing version check for instance_id Issue 19290.

    Missing one bit in SCCP::sequencing/segmenting Issue 19336.

    RTP/RFC 4571: Wrong desegmentation/reassembly in RTP over TCP packets Issue 19345.

New and Updated Features

There are no new or updated features in this release.

New Protocol Support

There are no new protocols in this release.

Updated Protocol Support

ESL, IEEE 1905.1a, ITS, Kafka, RTP, RTPS, SCCP, and Tibia

New and Updated Capture File Support

There is no new or updated capture file support in this release.

New File Format Decoding Support

There is no new or updated file format support in this release.

[close]

https://www.wireshark.org/