wireshark-4.0.2

[Bruce Dubbs]

New point version.

[Bruce Dubbs]

Wireshark 4.0.2 Release Notes

Bug Fixes

• The following vulnerabilities have been fixed:
  • wnpa-sec-2022-09[2] Multiple dissector infinite loops.
  • wnpa-sec-2022-10[3] Kafka dissector memory exhaustion.

The following bugs have been fixed:

• Qt: Endpoints dialog - unexpected byte unit suffixes in packet columns.
• GOOSE: field "floating_point" not working anymore.
• EVS Header-Full format padding issues.
• Wireshark 4.0.0 VOIP playback has no sound and can’t resume after pausing.
• Wireshark crashes when exporting a profile on Mac OSX if there is no extension.
• EVS dissector missing value description.
• Qt 6 font descriptions not backward compatible with Qt 5.
• Wireshark, wrong TCP ACKed unseen segment message.
• Invalid Cyrillic symbol in timezone at \"Arrival Time\" field in frame.
• ProtoBuf parse extension definitions failed.
• Fuzz job crash output: fuzz-2022-11-09-11134.pcap.
• Fuzz job crash output: fuzz-2022-11-14-11111.pcap.
• Wireshark is using old version of ASN (ETSI TS 125 453 V11.2.0) which is imapacting length of param in the messages.
• BGP: False IGMP flags value in EVPN routes (type 6,7,8).
• wslog assumes stderr and stdout exist.
• Editing packet comments, with non-ASCII characters, on Windows saves them in the local code page, not in UTF-8.
• Unable to decrypt PSK based DTLS traffic which uses Connection ID.
• HTTP2 tests fail when built without nghttp2.

Updated Protocol Support

ASN.1 PER, ASTERIX, BGP, BPv6, DTLS, EVS, GOOSE, GSM Osmux, IPv6, Kafka, Locamation IM, MONGO, NXP 802.15.4, OpenFlow v6, PCAP, Protobuf, RTP, S1AP, SKINNY, TCP, and WASSP

[Bruce Dubbs]

Fixed at commits

c289c501b2 Update to NetworkManager-1.40.6.
ccf0941dc3 Update to pcre2-10.41.
d671407106 Update to wireshark-4.0.2.

[Douglas R. Reno]

Issued SA-11.2-051 for WPNA-SEC-2022-09 and WPNA-SEC-2022-10