wireshark-4.0.3

[Bruce Dubbs]

New point version.

[Bruce Dubbs]

Wireshark 4.0.3 Release Notes

The following vulnerabilities have been fixed:

• wnpa-sec-2023-01[2] EAP dissector crash.
• wnpa-sec-2023-02[4] NFS dissector memory leak.
• wnpa-sec-2023-03[6] Dissection engine crash.
• wnpa-sec-2023-04[8] GNW dissector crash.
• wnpa-sec-2023-05[10] iSCSI dissector crash.
• wnpa-sec-2023-06[12] Multiple dissector excessive loops.
• wnpa-sec-2023-07[16] TIPC dissector crash.

The following bugs have been fixed:

• Qt: After modifying coloring rules, the coloring rule applied to the first packet reflects the coloring rules previously in effect.
• Help file doesn’t display for extcap interfaces.
• For USB traffic on XHC20 interface destination is always given as Host.
• Wireshark Expert Info - cannot deselect the limit to display filter tick box.
• Wrong pointer conversion in get_data_source_tvb_by_name()
• Wrong number of bits skipped while decoding an empty UTF8String on UPER packet.
• Crash when analyzing protobuf packets.
• Uninitialized values in various dissectors.
• String (GeoIP country/city) ordering doesn’t work in Endpoints.
• Wireshark crashes with an assertion failure on stray minus in filter.
• IO Graph: Add new graph only works until the 10th graph.
• Fuzz job crash output: fuzz-2022-12-30-11007.pcap.
• Q.850 - error in label for cause 0x7F.
• Uninitialized values in CoAP and RTPS dissectors.
• Screenshots in AppStream metainfo.xml file not available

[Bruce Dubbs]

Fixed at commits

ca3c3571a7 Update to wireshark-4.0.3.
f1edc0de8b Update to goffice-0.10.54.
d723609036 Update to gnumeric-1.12.54.
732a9c4834 Update to graphviz-7.1.0.

[Douglas R. Reno]

SA-11.2-079 issued