Wireshark 3.6.24 Release Notes$$$What is Wireshark?$$$Wireshark is the world’s most popular network protocol analyzer. It is used for troubleshooting; analysis; development and education.$$$$$$What’s New$$$This is expected to be the final release of the 3.6 branch.$$$$$$This is also the final release with support for 32-bit Windows. Updates will no longer be available after May 22; 2024 for that platform. Issue 17779.$$$$$$Bug Fixes$$$The following vulnerabilities have been fixed:$$$$$$wnpa-sec-2024-09 The editcap command line utility could crash when injecting secrets while writing multiple files. Issue 19782. CVE-2024-4855.$$$$$$The following bugs have been fixed:$$$$$$Wireshark crashes on exit when using wmem_register_callback in a plugin Issue 19579.

What’s New$$$This is expected to be the final release of the 3.6 branch.$$$$$$This is also the final release with support for 32-bit Windows. Updates will no longer be available after May 22; 2024 for that platform. Issue 17779.$$$$$$Bug Fixes$$$The following vulnerabilities have been fixed:$$$$$$wnpa-sec-2024-07 MONGO and ZigBee TLV dissector infinite loops. Issue 19726. CVE-2024-4854.$$$$$$wnpa-sec-2024-08 The editcap command line utility could crash when chopping bytes from the beginning of a packet. Issue 19724. CVE-2024-4853.$$$$$$The following bugs have been fixed:$$$$$$Flow Graph scrolls in the wrong direction vertically when pressing Up/Down Issue 12932.$$$$$$TCP Stream Window Scaling not working in version 2.6.1 and later Issue 15016.$$$$$$TCP stream graphs (Window scaling) axis display is confusing Issue 17425.$$$$$$LUA get_dissector does not give the correct dissector under 32-bit version Issue 18367.$$$$$$Lua: Segfault when registering a field or expert info twice Issue 19194.$$$$$$RTP Player triggers c

Refer - https://www.wireshark.org/docs/relnotes/wireshark-3.6.21.html

Wireshark 3.6.20 Release Notes$$$What is Wireshark?$$$Wireshark is the world’s most popular network protocol analyzer. It is used for troubleshooting; analysis; development and education.$$$$$$What’s New$$$This is the last release branch with support for 32-bit Windows. Updates will no longer be available after May 22; 2024 for that platform. Issue 17779$$$$$$If you’re running Wireshark on macOS and upgraded to macOS 13 from an earlier version; you might have to open and run the “Uninstall ChmodBPF” package; then open and run “Install ChmodBPF” in order to reset the ChmodBPF Launch Daemon. Issue 18734.$$$$$$Bug Fixes$$$wnpa-sec-2024-01 GVCP dissector crash. Issue 19496. CVE-2024-0208.$$$$$$wnpa-sec-2024-02 IEEE 1609.2 dissector crash. Issue 19501. CVE-2024-0209.$$$$$$The following bugs have been fixed:$$$$$$Capture filters not saved to recently used list Issue 12918.$$$$$$Segfault when enabling monitor mode on wireless card that falsely claims to support it Issue 16693.$$$$$$Capture filter compilation fails with obscure error message Issue 19480.$$$$$$NFLOG timestamp is incorrect Issue 19525.$$$$$$Qt6 Crash (Double Free) When Attempting to Save TCP Stream Graph Issue 19529.$$$$$$New and Updated Features$$$There are no new or updated features in this release.$$$$$$New Protocol Support$$$There are no new protocols in this release.$$$$$$Updated Protocol Support$$$New and Updated Capture File Support$$$There is no new or updated capture file support in this release.$$$$$$pcapng: the if_tsoffset option is now supported.$$$$$$New File Format Decoding Support$$$There is no new or updated file format support in this release.

Wireshark 3.6.19 Release Notes$$$What is Wireshark?$$$Wireshark is the world’s most popular network protocol analyzer. It is used for troubleshooting; analysis; development and education.$$$$$$What’s New$$$This is the last release branch with support for 32-bit Windows. Updates will no longer be available after May 22; 2024 for that platform. Issue 17779$$$$$$If you’re running Wireshark on macOS and upgraded to macOS 13 from an earlier version; you might have to open and run the “Uninstall ChmodBPF” package; then open and run “Install ChmodBPF” in order to reset the ChmodBPF Launch Daemon. Issue 18734.$$$$$$Bug Fixes$$$wnpa-sec-2023-29 NetScreen file parser crash. Issue 19404.$$$$$$The following bugs have been fixed:$$$$$$First ZigBee APS packet is not decrypted Issue 16507.$$$$$$Problem with decoding OpenFlow actions in OFPT_FLOW_MOD message Issue 17072.$$$$$$The frames method in sharkd does not consider time references and displays incorrect delta time Issue 17923.$$$$$$Wireshark interprets If_fcslen option in the Interface Description Block as byte instead of bit. Issue 19174.$$$$$$Flathub’s Wireshark page shows wrong version number Issue 19382.$$$$$$OSPFv3 RI decode error Issue 19444.$$$$$$GSM SIM READ / UPDATE BINARY command has wrong offset Issue 19472.$$$$$$New and Updated Features$$$There are no new or updated features in this release.$$$$$$New Protocol Support$$$There are no new protocols in this release.$$$$$$Updated Protocol Support$$$DHCP; GSM SIM; ISO 15765; OpenFlow v1; and OSPF$$$$$$New and Updated Capture File Support$$$NetScreen and pcapng$$$$$$New File Format Decoding Support$$$There is no new or updated file format support in this release.

What’s New$$$This is the last release branch with support for 32-bit Windows. Updates will no longer be available after May 22; 2024 for that platform. Issue 17779$$$$$$If you’re running Wireshark on macOS and upgraded to macOS 13 from an earlier version; you might have to open and run the “Uninstall ChmodBPF” package; then open and run “Install ChmodBPF” in order to reset the ChmodBPF Launch Daemon. Issue 18734.$$$$$$Bug Fixes$$$The following vulnerabilities have been fixed:$$$$$$wnpa-sec-2023-22 iSCSI dissector crash. Issue 19164. CVE-2023-3649.$$$$$$wnpa-sec-2023-24 BT SDP dissector infinite loop. Issue 19258.$$$$$$wnpa-sec-2023-25 BT SDP dissector memory leak. Issue 19259.$$$$$$wnpa-sec-2023-26 CP2179 dissector crash. Issue 19229.$$$$$$The following bugs have been fixed:$$$$$$Wireshark wrongly blames group membership when pcap capabilities are removed. Issue 18279.$$$$$$Packet bytes window broken layout. Issue 18326.$$$$$$Valid Ethernet CFM DMM packets are shown as malformed. Issue 19198.$$$$$$The QUIC dissector is reporting the quic_transport_parameters max_ack_delay with the title GREASE. Issue 19209.$$$$$$Preferences: Folder name editing behaves weirdly; cursor jumps. Issue 19213.$$$$$$DHCPFO: Expert info list does not show all expert infos. Issue 19216.$$$$$$Applying color filtering fails when selecting the same field to color (i.e.; changing frames without focusing in packet details). Issue 19249.$$$$$$NAS 5GS Malformed Packet Decoding SOR transparent container PLMN ID and access technology list. Issue 19273.$$$$$$New and Updated Features$$$There are no new or updated features in this release.$$$$$$New Protocol Support$$$There are no new protocols in this release.$$$$$$Updated Protocol Support$$$BT SDP; CP2179; CQL; DHCPFO; F1AP; GSM DTAP; IEEE 802.11; NAS-5GS; PFCP; and TFTP$$$$$$New and Updated Capture File Support$$$There is no new or updated capture file support in this release.$$$$$$New File Format Decoding Support$$$There is no new or updated file format support in this release.

Wireshark 3.6.15 Release Notes$$$What is Wireshark?$$$Wireshark is the world’s most popular network protocol analyzer. It is used for troubleshooting; analysis; development and education.$$$$$$What’s New$$$This is the last release branch with support for 32-bit Windows. Updates will no longer be available after May 22; 2024 for that platform. Issue 17779$$$$$$If you’re running Wireshark on macOS and upgraded to macOS 13 from an earlier version; you might have to open and run the “Uninstall ChmodBPF” package; then open and run “Install ChmodBPF” in order to reset the ChmodBPF Launch Daemon. Issue 18734.$$$$$$Bug Fixes$$$The following vulnerabilities have been fixed:$$$$$$wnpa-sec-2023-21 Kafka dissector crash. Issue 19105.$$$$$$The following bugs have been fixed:$$$$$$Crash when (re)loading a capture file after renaming a dfilter macro Issue 13753.

$$$Bug Fixes$$$$$$The following vulnerabilities have been fixed:$$$$$$ wnpa-sec-2023-12 Candump log file parser crash. Issue 19062. CVE-2023-2855.$$$$$$ wnpa-sec-2023-13 BLF file parser crash. Issue 19063. CVE-2023-2857.$$$$$$ wnpa-sec-2023-14 GDSDB dissector infinite loop. Issue 19068.$$$$$$ wnpa-sec-2023-15 NetScaler file parser crash. Issue 19081. CVE-2023-2858.$$$$$$ wnpa-sec-2023-16 VMS TCPIPtrace file parser crash. Issue 19083. CVE-2023-2856.$$$$$$ wnpa-sec-2023-19 IEEE C37.118 Synchrophasor dissector crash. Issue 19087. CVE-2023-0668.$$$$$$ wnpa-sec-2023-20 XRA dissector infinite loop. Issue 19100.$$$$$$The following bugs have been fixed:$$$$$$ Incorrect padding in BFCP decoder Issue 18890.$$$$$$ SPNEGO dissector bug Issue 18991.$$$$$$ SRT values are incorrect when applying a time shift. Issue 18999.$$$$$$ batadv dissector bug Issue 19047.$$$$$$ [UDS] When filtering the uds.wdbi.data_identifier or uds.iocbi.data_identifier field is interpreted as 1 byte whereas it consists of 2 bytes Issue 19078.$$$$$$ Wireshark can’t save this capture in that format Issue 19080.$$$$$$ MSMMS parsing buffer overflow Issue 19086.$$$$$$ USB HID parser shows wrong label for usages Rx/Vx/Vbrx of usage page Generic Desktop Control Issue 19095.$$$$$$ Follow ? QUIC Stream mixes data between streams. Issue 19102.$$$$$$

Bug Fixes$$$The following vulnerabilities have been fixed:$$$$$$wnpa-sec-2023-09 RPCoRDMA dissector crash. Issue 18852. CVE-2023-1992.$$$$$$wnpa-sec-2023-10 LISP dissector large loop. Issue 18900. CVE-2023-1993.$$$$$$wnpa-sec-2023-11 GQUIC dissector crash Issue 18947. CVE-2023-1994.$$$$$$The following bugs have been fixed:$$$$$$Wireshark ITS Dissector RTCMEM wrong protocol version selector 2 - should use 1 Issue 18862.$$$$$$Wireshark treats the letter E in SSRC as an exponential representation of a number Issue 18879.$$$$$$VNC RRE Parser skips over data Issue 18883.$$$$$$Fuzz job crash output: fuzz-2023-03-27-7564.pcap Issue 18934.$$$$$$Fuzz job crash output: fuzz-2023-03-31-6903.pcap Issue 18947.$$$$$$RTP analysis shows incorrect timestamp error when timestamp is rolled over Issue 18973.$$$$$$New and Updated Features$$$New Protocol Support$$$There are no new protocols in this release.$$$$$$Updated Protocol Support$$$DNS; ERF; FF; genl; GQUIC; GSM A-bis OML; HL7; IEEE 802.11; ITS; ITS; LISP; netlink; netlink-netfilter; netlink-sock_diag; nl80211; RLC; RPCoRDMA; RTPS; SCTP; SMB; VNC; and WCP$$$$$$

What’s New$$$This is the last release branch with support for 32-bit Windows. Updates will no longer be available after May 22; 2024 for that platform. Issue 17779$$$$$$Bug Fixes$$$The following vulnerabilities have been fixed:$$$$$$wnpa-sec-2023-08 ISO 15765 and ISO 10681 dissector crash. Issue 18839.$$$$$$The following bugs have been fixed:$$$$$$UTF-8 characters end up escaped in PSML output Issue 10445.$$$$$$Export filtered displayed packets won’t save IP fragments of SCTP fragments needed to reassemble a displayed frame. Issue 12597.$$$$$$The intelligent scroll bar or minimap is not predictable on locating and scrolling Issue 13989.$$$$$$If you mark (or unmark) the currently-selected frame; the packet details still say it’s not marked (or it is marked) Issue 14330.$$$$$$Sorting Packet Loss Column is not sorting correct Issue 16785.$$$$$$SIP TCP decoding regression from Wireshark 1.99.0 to 3.6.8 Issue 18411.$$$$$$ChmodBPF not working on macOS Ventura 13.1 Issue 18734.$$$$$$Symbolic links to packages in macOS dmg can’t be double-clicked to install on macOS 13.2 Issue 18830.$$$$$$Potential memory leak in tshark.c Issue 18837.$$$$$$Fuzz job crash output: fuzz-2023-02-05-7303.pcap Issue 18842.$$$$$$f5fileinfo: Hardware platforms missing descriptions Issue 18848.$$$$$$The lines in the intelligent scrollbar are off by one Issue 18850.$$$$$$TECMP dissector shows the wrong Voltage in Vendor Data Issue 18871.$$$$$$New and Updated Features$$$New Protocol Support$$$There are no new protocols in this release.$$$$$$Updated Protocol Support$$$DHCP; ERF; F5 Ethernet trailer; GMR-1 RR; Gryphon; GSM SMS; H.450; ISO 10681; ISO 15765; NAS-5GS; NR RRC; NS Trace; OptoMMP; PDCP-LTE; QSIG; ROHC; RSVP; RTCP; SCTP; SIP; TCP; TECMP; TWAMP; and UMTS RLC$$$$$$New and Updated Capture File Support$$$There is no new or updated capture file support in this release.$$$$$$New File Format Decoding Support$$$There is no new or updated file format support in this release.

Wireshark 3.6.11 Release Notes$$$What is Wireshark?$$$Wireshark is the world’s most popular network protocol analyzer. It is used for troubleshooting; analysis; development and education.$$$$$$What’s New$$$This is the last release branch with support for 32-bit Windows. Updates will no longer be available after May 22; 2024 for that platform. Issue 17779$$$$$$Bug Fixes$$$The following vulnerabilities have been fixed:$$$$$$wnpa-sec-2023-02 NFS dissector memory leak. Issue 18628.$$$$$$wnpa-sec-2023-03 Dissection engine crash. Issue 18766.$$$$$$wnpa-sec-2023-04 GNW dissector crash. Issue 18779.$$$$$$wnpa-sec-2023-05 iSCSI dissector crash. Issue 18796.$$$$$$wnpa-sec-2023-06 Multiple dissector excessive loops. Issue 18711. Issue 18720; Issue 18737.$$$$$$wnpa-sec-2023-07 TIPC dissector crash. Issue 18770.$$$$$$The following bugs have been fixed:$$$$$$Qt: After modifying coloring rules; the coloring rule applied to the first packet reflects the coloring rules previously in effect. Issue 12475.$$$$$$Help file doesn’t display for extcap interfaces Issue 15592.$$$$$$Dissector bug; protocol DRBD Issue 16689.$$$$$$For USB traffic on XHC20 interface destination is always given as Host Issue 16768.$$$$$$Wrong pointer conversion in get_data_source_tvb_by_name() Issue 18517.$$$$$$Wrong number of bits skipped while decoding an empty UTF8String on UPER packet Issue 18702.$$$$$$Uninitialized values in various dissectors Issue 18742.$$$$$$Q.850 - error in label for cause 0x7F Issue 18780.$$$$$$Uninitialized values in CoAP and RTPS dissectors Issue 18785.$$$$$$Screenshots in AppStream metainfo.xml file not available Issue 18801.$$$$$$New and Updated Features$$$New Protocol Support$$$There are no new protocols in this release.$$$$$$Updated Protocol Support$$$BEEP; BGP; BPv6; BSSGP; CoAP; GNW; GSM A-bis P-GSL; GSM BSSMAP; iSCSI; ISUP; Kafka; LwM2M-TLV; NAS-5GS; NFS; OPUS; RLC; ROHC; RTPS; TCP; Telnet; and USB$$$$$$New and Updated Capture File Support$$$There is no new or updated capture file support in this release.$$$$$$New File Format Decoding Support$$$There is no new or updated file format support in this release.

Wireshark 3.6.10 Release Notes$$$What is Wireshark?$$$Wireshark is the world’s most popular network protocol analyzer. It is used for troubleshooting; analysis; development and education.$$$$$$What’s New$$$This is the last release branch with support for 32-bit Windows. Updates will no longer be available after May 22; 2024 for that platform. Issue 17779$$$$$$Bug Fixes$$$The following vulnerabilities have been fixed:$$$$$$wnpa-sec-2022-09 Multiple dissector infinite loops.$$$$$$wnpa-sec-2022-10 Kafka dissector memory exhaustion.$$$$$$The following bugs have been fixed:$$$$$$Packet bytes not displayed completely if scrolling Issue 18438.$$$$$$GOOSE: field floating_point not working anymore Issue 18491.$$$$$$EVS dissector missing value description Issue 18550.$$$$$$ProtoBuf parse extension definitions failed Issue 18599.$$$$$$Fuzz job crash output: fuzz-2022-11-09-11134.pcap Issue 18613.$$$$$$Wireshark is using old version of ASN (ETSI TS 125 453 V11.2.0) which is imapacting length of param in the messages Issue 18646.$$$$$$BGP: False IGMP flags value in EVPN routes (type 6;7;8) Issue 18660.$$$$$$wslog assumes stderr and stdout exist Issue 18684.$$$$$$Editing packet comments; with non-ASCII characters; on Windows saves them in the local code page; not in UTF-8. Issue 18698.$$$$$$New and Updated Features$$$New Protocol Support$$$There are no new protocols in this release.$$$$$$Updated Protocol Support$$$ASN.1 PER; BGP; BPv6; EVS; GOOSE; GSM Osmux; Kafka; Mongo; NXP 802.15.4; OpenFlow; PCAP; S1AP; and WASSP$$$$$$New and Updated Capture File Support$$$There is no new or updated capture file support in this release.$$$$$$New File Format Decoding Support$$$There is no new or updated file format support in this release.

Note$$$This is the last release branch with support for 32-bit Windows. Updates will no longer be available after May 22; 2024 for that platform. Issue 17779$$$Bug Fixes$$$The following vulnerabilities have been fixed:$$$$$$wnpa-sec-2022-06 F5 Ethernet Trailer dissector infinite loop. Issue 18307.$$$$$$The following bugs have been fixed:$$$$$$TCAP Malformed exception on externally re-assembled packet Issue 10515.$$$$$$Extended 3GPP-GPRS-Negotiated-QoS-profile strings decoded incompletely Issue 10688.$$$$$$HTTP2 dissector decodes first SSL record only Issue 11173.$$$$$$L2TP improvements - cookie length detection; UDP encapsulation and more Issue 16565.$$$$$$USB Truncation of URB_isochronous in frames Issue 18021.$$$$$$ISUP/BICC parameter summary text duplication Issue 18094.$$$$$$Running rpm-setup.sh shows missing packages that Centos does not need Issue 18166.$$$$$$IPX/IPX RIP: Crash on expand subtree Issue 18234.$$$$$$Qt: A file or packet comment that is too large will corrupt the pcapng file Issue 18235.$$$$$$BGP dissector bug Issue 18248.$$$$$$Wrong interpretation of the cbsp.rep_period field in epan/dissectors/packet-gsm_cbsp.c Issue 18254.$$$$$$Assertion due to incorrect mask for btatt.battery_power_state.* Issue 18267.$$$$$$Qt: Expert Info dialog not showing Malformed Frame when Frame length is less than captured length Issue 18312.$$$$$$Wireshark and tshark become non-responsive when reading certain packets Issue 18313.$$$$$$New and Updated Features$$$New Protocol Support$$$There are no new protocols in this release.$$$$$$Updated Protocol Support$$$BGP; BICC; BT ATT; CBSP; Couchbase; F5 Ethernet Trailer; Frame; GTP; GTP (prime); IPsec; ISUP; L2TP; NAS-5GS; Protobuf; SCCP; TCP; and TLS$$$$$$New and Updated Capture File Support$$$pcap; pcapng$$$$$$New File Format Decoding Support$$$There is no new or updated file format support in this release.$$$$$$Getting Wireshark$$$Wireshark source code and installation packages are available from https://www.wireshark.org/download.html.$$$$$$Vendor-supplied Packages$$$Most Linux and Unix vendors supply their own Wireshark packages. You can usually install or upgrade Wireshark using the package management system specific to that platform. A list of third-party packages can be found on the download page on the Wireshark web site.$$$$$$File Locations$$$Wireshark and TShark look in several different locations for preference files; plugins; SNMP MIBS; and RADIUS dictionaries. These locations vary from platform to platform. You can use Help › About Wireshark › Folders or tshark -G folders to find the default locations on your system.