I'm proud to announce the release of Wireshark 4.2.9.
What is Wireshark?
Wireshark is the world’s most popular network protocol analyzer. It is
used for troubleshooting, analysis, development and education.
Wireshark is hosted by the Wireshark Foundation, a nonprofit which
promotes protocol analysis education. Wireshark and the foundation
depend on your contributions in order to do their work. If you or your
organization would like to contribute or become a sponsor, please
visit wiresharkfoundation.org[1].
What’s New
Bug Fixes
The following vulnerabilities have been fixed:
• wnpa-sec-2024-14[2] FiveCo RAP dissector infinite loop. Issue
20176[3].
• wnpa-sec-2024-15[4] ECMP dissector crash. Issue 20214[5].
The following bugs have been fixed:
• JA4_c hashes an empty field to e3b0c44298fc when it should be
000000000000. Issue 20066[6].
• SRT dissector: The StreamID (SID) in the handshake extension is
displayed without regarding the control characters and with NUL
as terminating. Issue 20113[7].
• Ghost error message on POP3 packets. Issue 20124[8].
• Building against c-ares 1.34 fails. Issue 20125[9].
• Wi-Fi: 256 Block Ack (BA) is not parsed properly. Issue
20156[10].
• HTTP2 body decompression fails on DATA with a single padded
frame. Issue 20167[11].
• SIP dissector bug due to "be-route" param in VIA header. Issue
20173[12].
• Coredump after trying to open 'Follow TCP stream' Issue
20174[13].
• Protobuf JSON mapping error. Issue 20182[14].
• IEEE 802.11be: Wrong regulatory info in HE Operation IE in Beacon
frame. Issue 20187[15].
• Wireshark crashes when a field is dragged from packet details
towards the find input. Issue 20204[16].
• Lua DissectorTable("") : set ("10,11") unexpected behavior in
locales with comma as decimal separator. Issue 20216[17].
New and Updated Features
There are no new or updated features in this release.
New Protocol Support
There are no new protocols in this release.
Updated Protocol Support
ASN.1 PER, ECMP, FiveCo RAP, HSRP, HTTP/2, IEEE 802.11, MPEG PES,
PN-DCP, POP, ProtoBuf, SIP, SRT, TCP, and UMTS RLC
New and Updated Capture File Support
There is no new or updated capture file support in this release.
Updated File Format Decoding Support
There is no updated file format support in this release.
Prior Versions
This document only describes the changes introduced in Wireshark
4.2.9. You can find release notes for prior versions at the following
locations:
• Wireshark 4.2.8[18]
• Wireshark 4.2.7[19]
• Wireshark 4.2.6[20]
• Wireshark 4.2.5[21]
• Wireshark 4.2.4[22]
• Wireshark 4.2.3[23]
• Wireshark 4.2.2[24]
• Wireshark 4.2.1[25]
• Wireshark 4.2.0[26]
Getting Wireshark
Wireshark source code and installation packages are available from
https://www.wireshark.org/download.html.
Vendor-supplied Packages
Most Linux and Unix vendors supply their own Wireshark packages. You
can usually install or upgrade Wireshark using the package management
system specific to that platform. A list of third-party packages can
be found on the download page[27] on the Wireshark web site.
File Locations
Wireshark and TShark look in several different locations for
preference files, plugins, SNMP MIBS, and RADIUS dictionaries. These
locations vary from platform to platform. You can use "Help › About
Wireshark › Folders" or `tshark -G folders` to find the default
locations on your system.
Getting Help
The User’s Guide, manual pages and various other documentation can be
found at https://www.wireshark.org/docs/
Community support is available on Wireshark’s Q&A site[28] and on the
wireshark-users mailing list. Subscription information and archives
for all of Wireshark’s mailing lists can be found on the web site[29].
Bugs and feature requests can be reported on the issue tracker[30].
You can learn protocol analysis and meet Wireshark’s developers at
SharkFest[31].
How You Can Help
The Wireshark Foundation helps as many people as possible understand
their networks as much as possible. You can find out more and donate
at wiresharkfoundation.org[32].
Frequently Asked Questions
A complete FAQ is available on the Wireshark web site[33].
References
1. https://wiresharkfoundation.org
2. https://www.wireshark.org/security/wnpa-sec-2024-14
3. https://gitlab.com/wireshark/wireshark/-/issues/20176
4. https://www.wireshark.org/security/wnpa-sec-2024-15
5. https://gitlab.com/wireshark/wireshark/-/issues/20214
6. https://gitlab.com/wireshark/wireshark/-/issues/20066
7. https://gitlab.com/wireshark/wireshark/-/issues/20113
8. https://gitlab.com/wireshark/wireshark/-/issues/20124
9. https://gitlab.com/wireshark/wireshark/-/issues/20125
10. https://gitlab.com/wireshark/wireshark/-/issues/20156
11. https://gitlab.com/wireshark/wireshark/-/issues/20167
12. https://gitlab.com/wireshark/wireshark/-/issues/20173
13. https://gitlab.com/wireshark/wireshark/-/issues/20174
14. https://gitlab.com/wireshark/wireshark/-/issues/20182
15. https://gitlab.com/wireshark/wireshark/-/issues/20187
16. https://gitlab.com/wireshark/wireshark/-/issues/20204
17. https://gitlab.com/wireshark/wireshark/-/issues/20216
18. https://www.wireshark.org/docs/relnotes/wireshark-4.2.8.html
19. https://www.wireshark.org/docs/relnotes/wireshark-4.2.7.html
20. https://www.wireshark.org/docs/relnotes/wireshark-4.2.6.html
21. https://www.wireshark.org/docs/relnotes/wireshark-4.2.5.html
22. https://www.wireshark.org/docs/relnotes/wireshark-4.2.4.html
23. https://www.wireshark.org/docs/relnotes/wireshark-4.2.3.html
24. https://www.wireshark.org/docs/relnotes/wireshark-4.2.2.html
25. https://www.wireshark.org/docs/relnotes/wireshark-4.2.1.html
26. https://www.wireshark.org/docs/relnotes/wireshark-4.2.0.html
27. https://www.wireshark.org/download.html
28. https://ask.wireshark.org/
29. https://www.wireshark.org/lists/
30. https://gitlab.com/wireshark/wireshark/-/issues
31. https://sharkfest.wireshark.org
32. https://wiresharkfoundation.org
33. https://www.wireshark.org/faq.html
Digests
wireshark-4.2.9.tar.xz: 45045592 bytes
SHA256(wireshark-4.2.9.tar.xz)=62c2b6652d7f9a50668867bd57b21609c9a9b6950f26e7f30a24b2de0e72ded3
SHA1(wireshark-4.2.9.tar.xz)=d1abbe110451dab9e57c9ee1fe0892e0d6a7d515
Wireshark-4.2.9-x64.exe: 86497240 bytes
SHA256(Wireshark-4.2.9-x64.exe)=3eb1d48fb4b5db39154ad9f73778c7fce0d749393a406775cbe24cefb0476f5d
SHA1(Wireshark-4.2.9-x64.exe)=75dc0bf4f750b9e17be4a29fcebf67aba1d14e8a
Wireshark-4.2.9-arm64.exe: 68046416 bytes
SHA256(Wireshark-4.2.9-arm64.exe)=4cd708cc401e0b538a93dba725ab3e1e798350498ff1713be5907e959f7c56ee
SHA1(Wireshark-4.2.9-arm64.exe)=eb76a49b37564d0e034b7f0818c8b44a50e29327
Wireshark-4.2.9-x64.msi: 63156224 bytes
SHA256(Wireshark-4.2.9-x64.msi)=58acadf82c1f1dcb28bf0a3bab5d5a82107a80ee8eab476ab150d78abea710ed
SHA1(Wireshark-4.2.9-x64.msi)=47a33a9f9c553b364f28dc0c2e12390b599a7c4c
WiresharkPortable64_4.2.9.paf.exe: 53703032 bytes
SHA256(WiresharkPortable64_4.2.9.paf.exe)=06dc3cd2bcc2045ffebc4e4781d20702c6fa1f7ecec0da168f474e15fc901eb0
SHA1(WiresharkPortable64_4.2.9.paf.exe)=f6e9ee6de841b2dd5e3afef1f0d9d1c2368f6550
Wireshark 4.2.9 Arm 64.dmg: 65704617 bytes
SHA256(Wireshark 4.2.9 Arm
64.dmg)=9dafd0d3eb9ca5d0372eb4ef00b264dd457cce3c22bb430aadeafa054853cad6
SHA1(Wireshark 4.2.9 Arm 64.dmg)=66386fc3cbd9d3a3c7a95993f301b8f8a4410697
Wireshark 4.2.9 Intel 64.dmg: 69462238 bytes
SHA256(Wireshark 4.2.9 Intel
64.dmg)=64f5a653d812f4c248fcdb17f2dd43ab227880992ceed77994fd2b3604ff6997
SHA1(Wireshark 4.2.9 Intel 64.dmg)=106897e7269b092f2721a5da0f6655ef446abe63
You can validate these hashes using the following commands (among others):
Windows: certutil -hashfile Wireshark-win64-x.y.z.exe SHA256
Linux (GNU Coreutils): sha256sum wireshark-x.y.z.tar.xz
macOS: shasum -a 256 "Wireshark x.y.z Arm 64.dmg"
Other: openssl sha256 wireshark-x.y.z.tar.xz
OpenPGP_signature.asc
Description: OpenPGP digital signature
_______________________________________________ Wireshark-announce mailing list -- wireshark-announce@wireshark.org To unsubscribe send an email to wireshark-announce-le...@wireshark.org
