Wireshark 3.6.24 Release Notes$$$What is Wireshark?$$$Wireshark is the world’s most popular network protocol analyzer. It is used for troubleshooting; analysis; development and education.$$$$$$What’s New$$$This is expected to be the final release of the 3.6 branch.$$$$$$This is also the final release with support for 32-bit Windows. Updates will no longer be available after May 22; 2024 for that platform. Issue 17779.$$$$$$Bug Fixes$$$The following vulnerabilities have been fixed:$$$$$$wnpa-sec-2024-09 The editcap command line utility could crash when injecting secrets while writing multiple files. Issue 19782. CVE-2024-4855.$$$$$$The following bugs have been fixed:$$$$$$Wireshark crashes on exit when using wmem_register_callback in a plugin Issue 19579.

What’s New$$$This is expected to be the final release of the 3.6 branch.$$$$$$This is also the final release with support for 32-bit Windows. Updates will no longer be available after May 22; 2024 for that platform. Issue 17779.$$$$$$Bug Fixes$$$The following vulnerabilities have been fixed:$$$$$$wnpa-sec-2024-07 MONGO and ZigBee TLV dissector infinite loops. Issue 19726. CVE-2024-4854.$$$$$$wnpa-sec-2024-08 The editcap command line utility could crash when chopping bytes from the beginning of a packet. Issue 19724. CVE-2024-4853.

Refer - https://www.wireshark.org/docs/relnotes/wireshark-3.6.21.html

Wireshark 3.6.20 Release Notes$$$What is Wireshark?$$$Wireshark is the world’s most popular network protocol analyzer. It is used for troubleshooting; analysis; development and education.$$$$$$What’s New$$$This is the last release branch with support for 32-bit Windows. Updates will no longer be available after May 22; 2024 for that platform. Issue 17779$$$$$$If you’re running Wireshark on macOS and upgraded to macOS 13 from an earlier version; you might have to open and run the “Uninstall ChmodBPF” package; then open and run “Install ChmodBPF” in order to reset the ChmodBPF Launch Daemon. Issue 18734.$$$$$$Bug Fixes$$$wnpa-sec-2024-01 GVCP dissector crash. Issue 19496. CVE-2024-0208.$$$$$$wnpa-sec-2024-02 IEEE 1609.2 dissector crash. Issue 19501. CVE-2024-0209.$$$$$$The following bugs have been fixed:$$$$$$Capture filters not saved to recently used list Issue 12918.$$$$$$Segfault when enabling monitor mode on wireless card that falsely claims to support it Issue 16693.$$$$$$Capture filter compilation fails with obscure error message Issue 19480.$$$$$$NFLOG timestamp is incorrect Issue 19525.$$$$$$Qt6 Crash (Double Free) When Attempting to Save TCP Stream Graph Issue 19529.$$$$$$New and Updated Features$$$There are no new or updated features in this release.$$$$$$New Protocol Support$$$There are no new protocols in this release.$$$$$$Updated Protocol Support$$$New and Updated Capture File Support$$$There is no new or updated capture file support in this release.$$$$$$pcapng: the if_tsoffset option is now supported.$$$$$$New File Format Decoding Support$$$There is no new or updated file format support in this release.

Wireshark 3.6.19 Release Notes$$$What is Wireshark?$$$Wireshark is the world’s most popular network protocol analyzer. It is used for troubleshooting; analysis; development and education.$$$$$$What’s New$$$This is the last release branch with support for 32-bit Windows. Updates will no longer be available after May 22; 2024 for that platform. Issue 17779$$$$$$If you’re running Wireshark on macOS and upgraded to macOS 13 from an earlier version; you might have to open and run the “Uninstall ChmodBPF” package; then open and run “Install ChmodBPF” in order to reset the ChmodBPF Launch Daemon. Issue 18734.$$$$$$Bug Fixes$$$wnpa-sec-2023-29 NetScreen file parser crash. Issue 19404.$$$$$$The following bugs have been fixed:$$$$$$First ZigBee APS packet is not decrypted Issue 16507.$$$$$$Problem with decoding OpenFlow actions in OFPT_FLOW_MOD message Issue 17072.$$$$$$The frames method in sharkd does not consider time references and displays incorrect delta time Issue 17923.$$$$$$Wireshark interprets If_fcslen option in the Interface Description Block as byte instead of bit. Issue 19174.$$$$$$Flathub’s Wireshark page shows wrong version number Issue 19382.$$$$$$OSPFv3 RI decode error Issue 19444.$$$$$$GSM SIM READ / UPDATE BINARY command has wrong offset Issue 19472.$$$$$$New and Updated Features$$$There are no new or updated features in this release.$$$$$$New Protocol Support$$$There are no new protocols in this release.$$$$$$Updated Protocol Support$$$DHCP; GSM SIM; ISO 15765; OpenFlow v1; and OSPF$$$$$$New and Updated Capture File Support$$$NetScreen and pcapng$$$$$$New File Format Decoding Support$$$There is no new or updated file format support in this release.

What’s New$$$This is the last release branch with support for 32-bit Windows. Updates will no longer be available after May 22; 2024 for that platform. Issue 17779$$$$$$If you’re running Wireshark on macOS and upgraded to macOS 13 from an earlier version; you might have to open and run the “Uninstall ChmodBPF” package; then open and run “Install ChmodBPF” in order to reset the ChmodBPF Launch Daemon. Issue 18734.$$$$$$Bug Fixes$$$The following vulnerabilities have been fixed:$$$$$$wnpa-sec-2023-22 iSCSI dissector crash. Issue 19164. CVE-2023-3649.$$$$$$wnpa-sec-2023-24 BT SDP dissector infinite loop. Issue 19258.$$$$$$wnpa-sec-2023-25 BT SDP dissector memory leak. Issue 19259.$$$$$$wnpa-sec-2023-26 CP2179 dissector crash. Issue 19229.$$$$$$The following bugs have been fixed:$$$$$$Wireshark wrongly blames group membership when pcap capabilities are removed. Issue 18279.$$$$$$Packet bytes window broken layout. Issue 18326.$$$$$$Valid Ethernet CFM DMM packets are shown as malformed. Issue 19198.$$$$$$The QUIC dissector is reporting the quic_transport_parameters max_ack_delay with the title GREASE. Issue 19209.$$$$$$Preferences: Folder name editing behaves weirdly; cursor jumps. Issue 19213.$$$$$$DHCPFO: Expert info list does not show all expert infos. Issue 19216.$$$$$$Applying color filtering fails when selecting the same field to color (i.e.; changing frames without focusing in packet details). Issue 19249.$$$$$$NAS 5GS Malformed Packet Decoding SOR transparent container PLMN ID and access technology list. Issue 19273.$$$$$$New and Updated Features$$$There are no new or updated features in this release.$$$$$$New Protocol Support$$$There are no new protocols in this release.$$$$$$Updated Protocol Support$$$BT SDP; CP2179; CQL; DHCPFO; F1AP; GSM DTAP; IEEE 802.11; NAS-5GS; PFCP; and TFTP$$$$$$New and Updated Capture File Support$$$There is no new or updated capture file support in this release.$$$$$$New File Format Decoding Support$$$There is no new or updated file format support in this release.

This is the last release branch with support for 32-bit Windows. Updates will no longer be available after May 22; 2024 for that platform. Issue 17779$$$$$$If you’re running Wireshark on macOS and upgraded to macOS 13 from an earlier version; you might have to open and run the “Uninstall ChmodBPF” package; then open and run “Install ChmodBPF” in order to reset the ChmodBPF Launch Daemon. Issue 18734.$$$$$$Bug Fixes$$$The following vulnerabilities have been fixed:$$$$$$wnpa-sec-2023-21 Kafka dissector crash. Issue 19105.$$$$$$The following bugs have been fixed:$$$$$$Crash when (re)loading a capture file after renaming a dfilter macro Issue 13753.$$$$$$Moving a column deselects selected packet and moves to beginning of packet list Issue 16251.$$$$$$If you set the default interface in the preferences; it doesn’t work with TShark Issue 16593.$$$$$$Severe performance issues in Follow ? Save As raw workflow Issue 17313.$$$$$$NAS-5GS Operator-defined Access Category: Multiple Criteria values not displayed in dissected packet display Issue 18941.$$$$$$CQL protocol parsing issues with Result frames from open source Cassandra Issue 19119.$$$$$$TLS 1.3 second Key Update doesn’t work Issue 19120.

$$$Bug Fixes$$$$$$The following vulnerabilities have been fixed:$$$$$$ wnpa-sec-2023-12 Candump log file parser crash. Issue 19062. CVE-2023-2855.$$$$$$ wnpa-sec-2023-13 BLF file parser crash. Issue 19063. CVE-2023-2857.$$$$$$ wnpa-sec-2023-14 GDSDB dissector infinite loop. Issue 19068.$$$$$$ wnpa-sec-2023-15 NetScaler file parser crash. Issue 19081. CVE-2023-2858.$$$$$$ wnpa-sec-2023-16 VMS TCPIPtrace file parser crash. Issue 19083. CVE-2023-2856.$$$$$$ wnpa-sec-2023-19 IEEE C37.118 Synchrophasor dissector crash. Issue 19087. CVE-2023-0668.$$$$$$ wnpa-sec-2023-20 XRA dissector infinite loop. Issue 19100.$$$$$$The following bugs have been fixed:$$$$$$ Incorrect padding in BFCP decoder Issue 18890.$$$$$$ SPNEGO dissector bug Issue 18991.$$$$$$ SRT values are incorrect when applying a time shift. Issue 18999.$$$$$$ batadv dissector bug Issue 19047.$$$$$$ [UDS] When filtering the uds.wdbi.data_identifier or uds.iocbi.data_identifier field is interpreted as 1 byte whereas it consists of 2 bytes Issue 19078.$$$$$$ Wireshark can’t save this capture in that format Issue 19080.$$$$$$ MSMMS parsing buffer overflow Issue 19086.$$$$$$ USB HID parser shows wrong label for usages Rx/Vx/Vbrx of usage page Generic Desktop Control Issue 19095.$$$$$$ Follow ? QUIC Stream mixes data between streams. Issue 19102.$$$$$$

Bug Fixes$$$The following vulnerabilities have been fixed:$$$$$$wnpa-sec-2023-09 RPCoRDMA dissector crash. Issue 18852. CVE-2023-1992.$$$$$$wnpa-sec-2023-10 LISP dissector large loop. Issue 18900. CVE-2023-1993.$$$$$$wnpa-sec-2023-11 GQUIC dissector crash Issue 18947. CVE-2023-1994.$$$$$$The following bugs have been fixed:$$$$$$Wireshark ITS Dissector RTCMEM wrong protocol version selector 2 - should use 1 Issue 18862.$$$$$$Wireshark treats the letter E in SSRC as an exponential representation of a number Issue 18879.$$$$$$VNC RRE Parser skips over data Issue 18883.$$$$$$Fuzz job crash output: fuzz-2023-03-27-7564.pcap Issue 18934.$$$$$$Fuzz job crash output: fuzz-2023-03-31-6903.pcap Issue 18947.$$$$$$RTP analysis shows incorrect timestamp error when timestamp is rolled over Issue 18973.

What’s New$$$This is the last release branch with support for 32-bit Windows. Updates will no longer be available after May 22; 2024 for that platform. Issue 17779$$$$$$Bug Fixes$$$The following vulnerabilities have been fixed:$$$$$$wnpa-sec-2023-08 ISO 15765 and ISO 10681 dissector crash. Issue 18839.$$$$$$The following bugs have been fixed:$$$$$$UTF-8 characters end up escaped in PSML output Issue 10445.$$$$$$Export filtered displayed packets won’t save IP fragments of SCTP fragments needed to reassemble a displayed frame. Issue 12597.$$$$$$The intelligent scroll bar or minimap is not predictable on locating and scrolling Issue 13989.$$$$$$If you mark (or unmark) the currently-selected frame; the packet details still say it’s not marked (or it is marked) Issue 14330.$$$$$$Sorting Packet Loss Column is not sorting correct Issue 16785.$$$$$$SIP TCP decoding regression from Wireshark 1.99.0 to 3.6.8 Issue 18411.$$$$$$ChmodBPF not working on macOS Ventura 13.1 Issue 18734.$$$$$$Symbolic links to packages in macOS dmg can’t be double-clicked to install on macOS 13.2 Issue 18830.$$$$$$Potential memory leak in tshark.c Issue 18837.$$$$$$Fuzz job crash output: fuzz-2023-02-05-7303.pcap Issue 18842.$$$$$$f5fileinfo: Hardware platforms missing descriptions Issue 18848.$$$$$$The lines in the intelligent scrollbar are off by one Issue 18850.$$$$$$TECMP dissector shows the wrong Voltage in Vendor Data Issue 18871.$$$$$$New and Updated Features$$$New Protocol Support$$$There are no new protocols in this release.$$$$$$Updated Protocol Support$$$DHCP; ERF; F5 Ethernet trailer; GMR-1 RR; Gryphon; GSM SMS; H.450; ISO 10681; ISO 15765; NAS-5GS; NR RRC; NS Trace; OptoMMP; PDCP-LTE; QSIG; ROHC; RSVP; RTCP; SCTP; SIP; TCP; TECMP; TWAMP; and UMTS RLC$$$$$$New and Updated Capture File Support$$$There is no new or updated capture file support in this release.$$$$$$New File Format Decoding Support$$$There is no new or updated file format support in this release.

Wireshark 3.6.11 Release Notes$$$What is Wireshark?$$$Wireshark is the world’s most popular network protocol analyzer. It is used for troubleshooting; analysis; development and education.$$$$$$What’s New$$$This is the last release branch with support for 32-bit Windows. Updates will no longer be available after May 22; 2024 for that platform. Issue 17779$$$$$$Bug Fixes$$$The following vulnerabilities have been fixed:$$$$$$wnpa-sec-2023-02 NFS dissector memory leak. Issue 18628.$$$$$$wnpa-sec-2023-03 Dissection engine crash. Issue 18766.$$$$$$wnpa-sec-2023-04 GNW dissector crash. Issue 18779.$$$$$$wnpa-sec-2023-05 iSCSI dissector crash. Issue 18796.$$$$$$wnpa-sec-2023-06 Multiple dissector excessive loops. Issue 18711. Issue 18720; Issue 18737.$$$$$$wnpa-sec-2023-07 TIPC dissector crash. Issue 18770.$$$$$$The following bugs have been fixed:$$$$$$Qt: After modifying coloring rules; the coloring rule applied to the first packet reflects the coloring rules previously in effect. Issue 12475.$$$$$$Help file doesn’t display for extcap interfaces Issue 15592.$$$$$$Dissector bug; protocol DRBD Issue 16689.$$$$$$For USB traffic on XHC20 interface destination is always given as Host Issue 16768.$$$$$$Wrong pointer conversion in get_data_source_tvb_by_name() Issue 18517.$$$$$$Wrong number of bits skipped while decoding an empty UTF8String on UPER packet Issue 18702.$$$$$$Uninitialized values in various dissectors Issue 18742.$$$$$$Q.850 - error in label for cause 0x7F Issue 18780.$$$$$$Uninitialized values in CoAP and RTPS dissectors Issue 18785.$$$$$$Screenshots in AppStream metainfo.xml file not available Issue 18801.$$$$$$New and Updated Features$$$New Protocol Support$$$There are no new protocols in this release.$$$$$$Updated Protocol Support$$$BEEP; BGP; BPv6; BSSGP; CoAP; GNW; GSM A-bis P-GSL; GSM BSSMAP; iSCSI; ISUP; Kafka; LwM2M-TLV; NAS-5GS; NFS; OPUS; RLC; ROHC; RTPS; TCP; Telnet; and USB$$$$$$New and Updated Capture File Support$$$There is no new or updated capture file support in this release.$$$$$$New File Format Decoding Support$$$There is no new or updated file format support in this release.

Wireshark 3.6.10 Release Notes$$$What is Wireshark?$$$Wireshark is the world’s most popular network protocol analyzer. It is used for troubleshooting; analysis; development and education.$$$$$$What’s New$$$This is the last release branch with support for 32-bit Windows. Updates will no longer be available after May 22; 2024 for that platform. Issue 17779$$$$$$Bug Fixes$$$The following vulnerabilities have been fixed:$$$$$$wnpa-sec-2022-09 Multiple dissector infinite loops.$$$$$$wnpa-sec-2022-10 Kafka dissector memory exhaustion.$$$$$$The following bugs have been fixed:$$$$$$Packet bytes not displayed completely if scrolling Issue 18438.$$$$$$GOOSE: field floating_point not working anymore Issue 18491.$$$$$$EVS dissector missing value description Issue 18550.$$$$$$ProtoBuf parse extension definitions failed Issue 18599.$$$$$$Fuzz job crash output: fuzz-2022-11-09-11134.pcap Issue 18613.$$$$$$Wireshark is using old version of ASN (ETSI TS 125 453 V11.2.0) which is imapacting length of param in the messages Issue 18646.$$$$$$BGP: False IGMP flags value in EVPN routes (type 6;7;8) Issue 18660.$$$$$$wslog assumes stderr and stdout exist Issue 18684.$$$$$$Editing packet comments; with non-ASCII characters; on Windows saves them in the local code page; not in UTF-8. Issue 18698.$$$$$$New and Updated Features$$$New Protocol Support$$$There are no new protocols in this release.$$$$$$Updated Protocol Support$$$ASN.1 PER; BGP; BPv6; EVS; GOOSE; GSM Osmux; Kafka; Mongo; NXP 802.15.4; OpenFlow; PCAP; S1AP; and WASSP$$$$$$New and Updated Capture File Support$$$There is no new or updated capture file support in this release.$$$$$$New File Format Decoding Support$$$There is no new or updated file format support in this release.

What’s New$$$This is the last release branch with support for 32-bit Windows. Updates will no longer be available after May 22; 2024 for that platform. Issue 17779$$$$$$Bug Fixes$$$wnpa-sec-2022-07 OPUS dissector crash. Issue 18378.$$$$$$wnpa-sec-2022-08 USB-HID dissector crash on Windows. Issue 18384.$$$$$$The following bugs have been fixed:$$$$$$Wireshark no longer calculates Statistics ? Service Response Time ? FC properly. Issue 16084.$$$$$$Qt: Crash when opening Statistics ? Service Response Time ? DCE-RPC. Issue 18319.$$$$$$Qt: Crash when closing 3 of the 14 dialogs available from the menu item Statistics ? 29West Issue 18334.$$$$$$TCP: Dissector bug; protocol TCP; in packet 13: …?/wireshark/epan/reassemble.c:1420: failed assertion tvb_bytes_exist(tvb; offset; frag_data_len) Issue 18335.$$$$$$Packet diagram field values are not terminated Issue 18428.$$$$$$Decoding bug H.245 userInput Signal Issue 18468.$$$$$$CFDP dissector doesn’t handle destination filename only Issue 18495.$$$$$$New and Updated Features$$$New Protocol Support$$$There are no new protocols in this release.$$$$$$Updated Protocol Support$$$ASN.1 PER; BGP; CFDP; FC; GSMTAP; GTP; HTTP; IEEE 802.11; IPv4; ISAKMP; NAS-5GS; OPUS; PFCP; RTPS; TCP; and USB HID$$$$$$New and Updated Capture File Support$$$BLF$$$$$$New File Format Decoding Support$$$There is no new or updated file format support in this release.$$$$$$For more information refer the below link$$$https://www.wireshark.org/docs/relnotes/wireshark-3.6.9.html

Note$$$This is the last release branch with support for 32-bit Windows. Updates will no longer be available after May 22; 2024 for that platform. Issue 17779$$$Bug Fixes$$$The following vulnerabilities have been fixed:$$$$$$wnpa-sec-2022-06 F5 Ethernet Trailer dissector infinite loop. Issue 18307.$$$$$$The following bugs have been fixed:$$$$$$TCAP Malformed exception on externally re-assembled packet Issue 10515.$$$$$$Extended 3GPP-GPRS-Negotiated-QoS-profile strings decoded incompletely Issue 10688.$$$$$$HTTP2 dissector decodes first SSL record only Issue 11173.$$$$$$L2TP improvements - cookie length detection; UDP encapsulation and more Issue 16565.$$$$$$USB Truncation of URB_isochronous in frames Issue 18021.$$$$$$ISUP/BICC parameter summary text duplication Issue 18094.$$$$$$Running rpm-setup.sh shows missing packages that Centos does not need Issue 18166.$$$$$$IPX/IPX RIP: Crash on expand subtree Issue 18234.$$$$$$Qt: A file or packet comment that is too large will corrupt the pcapng file Issue 18235.$$$$$$BGP dissector bug Issue 18248.$$$$$$Wrong interpretation of the cbsp.rep_period field in epan/dissectors/packet-gsm_cbsp.c Issue 18254.$$$$$$Assertion due to incorrect mask for btatt.battery_power_state.* Issue 18267.$$$$$$Qt: Expert Info dialog not showing Malformed Frame when Frame length is less than captured length Issue 18312.$$$$$$Wireshark and tshark become non-responsive when reading certain packets Issue 18313.$$$$$$New and Updated Features$$$New Protocol Support$$$There are no new protocols in this release.$$$$$$Updated Protocol Support$$$BGP; BICC; BT ATT; CBSP; Couchbase; F5 Ethernet Trailer; Frame; GTP; GTP (prime); IPsec; ISUP; L2TP; NAS-5GS; Protobuf; SCCP; TCP; and TLS$$$$$$New and Updated Capture File Support$$$pcap; pcapng$$$$$$New File Format Decoding Support$$$There is no new or updated file format support in this release.$$$$$$Getting Wireshark$$$Wireshark source code and installation packages are available from https://www.wireshark.org/download.html.$$$$$$Vendor-supplied Packages$$$Most Linux and Unix vendors supply their own Wireshark packages. You can usually install or upgrade Wireshark using the package management system specific to that platform. A list of third-party packages can be found on the download page on the Wireshark web site.$$$$$$File Locations$$$Wireshark and TShark look in several different locations for preference files; plugins; SNMP MIBS; and RADIUS dictionaries. These locations vary from platform to platform. You can use Help › About Wireshark › Folders or tshark -G folders to find the default locations on your system.