[Wireshark announcements <wireshark-announce@xxxxxxxxxxxxx>]

I'm proud to announce the release of Wireshark 4.0.17.


 What is Wireshark?

  Wireshark is the world’s most popular network protocol analyzer. It is
  used for troubleshooting, analysis, development and education.

  Wireshark is hosted by the Wireshark Foundation, a nonprofit which
  promotes protocol analysis education. Wireshark and the foundation
  depend on your contributions in order to do their work. If you or your
  organization would like to contribute or become a sponsor, please
  visit wiresharkfoundation.org[1].

 What’s New

  This is expected to be the final release of the 4.0 branch.

  This is the last release to support Windows 8.1 and Windows Server
  2012.

  Bug Fixes

   A regression in the TCP Stream Graph "Time Sequence (tcptrace)"
   receive window line behavior introduced in 4.0.15 and 4.2.5 has been
   fixed. Issue 19846[2]

   The following vulnerability has been fixed:

     • wnpa-sec-2024-11[3] NTLMSSP dissector crash. Issue 19943[4].
       CVE-2024-8250[5].

   The following bugs have been fixed:

     • Fuzz job issue: fuzz-2024-01-31-7745.pcap. Issue 19627[6].

     • OSS-Fuzz 70534: wireshark:fuzzshark_ip_proto-udp: Stack-overflow
       in dissect_cbor_main_type. Issue 19935[7].

     • 6loWPAN: Page Number Field Incorrect Registration. Issue
       19934[8].

     • Fuzz job issue: fuzz-2024-07-28-7314.pcap. Issue 19964[9].

     • PacketBB incorrectly reports "Malformed Packet" Issue 19972[10].

  New and Updated Features

   There are no new or updated features in this release.

  New Protocol Support

   There are no new protocols in this release.

  Updated Protocol Support

   6LoWPAN, CAN-ETH, CBOR, LBMSRS, NTLMSSP, PacketBB, and PN-MRP

  New and Updated Capture File Support

   There is no new or updated capture file support in this release.

  Updated File Format Decoding Support

   There is no updated file format support in this release.

 Prior Versions

  This document only describes the changes introduced in Wireshark
  4.0.17. You can find release notes for prior versions at the following
  locations:

    • Wireshark 4.0.16[11]

    • Wireshark 4.0.15[12]

    • Wireshark 4.0.14[13]

    • Wireshark 4.0.13[14]

    • Wireshark 4.0.12[15]

    • Wireshark 4.0.11[16]

    • Wireshark 4.0.10[17]

    • Wireshark 4.0.9[18]

    • Wireshark 4.0.8[19]

    • Wireshark 4.0.7[20]

    • Wireshark 4.0.6[21]

    • Wireshark 4.0.5[22]

    • Wireshark 4.0.4[23]

    • Wireshark 4.0.3[24]

    • Wireshark 4.0.2[25]

    • Wireshark 4.0.1[26]

    • Wireshark 4.0.0[27]

 Getting Wireshark

  Wireshark source code and installation packages are available from
  https://www.wireshark.org/download.html.

  Vendor-supplied Packages

   Most Linux and Unix vendors supply their own Wireshark packages. You
   can usually install or upgrade Wireshark using the package management
   system specific to that platform. A list of third-party packages can
   be found on the download page[28] on the Wireshark web site.

 File Locations

  Wireshark and TShark look in several different locations for
  preference files, plugins, SNMP MIBS, and RADIUS dictionaries. These
  locations vary from platform to platform. You can use "Help › About
  Wireshark › Folders" or `tshark -G folders` to find the default
  locations on your system.

 Getting Help

  The User’s Guide, manual pages and various other documentation can be
  found at https://www.wireshark.org/docs/

  Community support is available on Wireshark’s Q&A site[29] and on the
  wireshark-users mailing list. Subscription information and archives
  for all of Wireshark’s mailing lists can be found on the web site[30].

  Bugs and feature requests can be reported on the issue tracker[31].

  You can learn protocol analysis and meet Wireshark’s developers at
  SharkFest[32].

 How You Can Help

  The Wireshark Foundation helps as many people as possible understand
  their networks as much as possible. You can find out more and donate
  at wiresharkfoundation.org[33].

 Frequently Asked Questions

  A complete FAQ is available on the Wireshark web site[34].

 References

   1. https://wiresharkfoundation.org
   2. https://gitlab.com/wireshark/wireshark/-/issues/19846
   3. https://www.wireshark.org/security/wnpa-sec-2024-11
   4. https://gitlab.com/wireshark/wireshark/-/issues/19943
   5. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8250
   6. https://gitlab.com/wireshark/wireshark/-/issues/19627
   7. https://gitlab.com/wireshark/wireshark/-/issues/19935
   8. https://gitlab.com/wireshark/wireshark/-/issues/19934
   9. https://gitlab.com/wireshark/wireshark/-/issues/19964
  10. https://gitlab.com/wireshark/wireshark/-/issues/19972
  11. https://www.wireshark.org/docs/relnotes/wireshark-4.0.16.html
  12. https://www.wireshark.org/docs/relnotes/wireshark-4.0.15.html
  13. https://www.wireshark.org/docs/relnotes/wireshark-4.0.14.html
  14. https://www.wireshark.org/docs/relnotes/wireshark-4.0.13.html
  15. https://www.wireshark.org/docs/relnotes/wireshark-4.0.12.html
  16. https://www.wireshark.org/docs/relnotes/wireshark-4.0.11.html
  17. https://www.wireshark.org/docs/relnotes/wireshark-4.0.10.html
  18. https://www.wireshark.org/docs/relnotes/wireshark-4.0.9.html
  19. https://www.wireshark.org/docs/relnotes/wireshark-4.0.8.html
  20. https://www.wireshark.org/docs/relnotes/wireshark-4.0.7.html
  21. https://www.wireshark.org/docs/relnotes/wireshark-4.0.6.html
  22. https://www.wireshark.org/docs/relnotes/wireshark-4.0.5.html
  23. https://www.wireshark.org/docs/relnotes/wireshark-4.0.4.html
  24. https://www.wireshark.org/docs/relnotes/wireshark-4.0.3.html
  25. https://www.wireshark.org/docs/relnotes/wireshark-4.0.2.html
  26. https://www.wireshark.org/docs/relnotes/wireshark-4.0.1.html
  27. https://www.wireshark.org/docs/relnotes/wireshark-4.0.0.html
  28. https://www.wireshark.org/download.html
  29. https://ask.wireshark.org/
  30. https://www.wireshark.org/lists/
  31. https://gitlab.com/wireshark/wireshark/-/issues
  32. https://sharkfest.wireshark.org
  33. https://wiresharkfoundation.org
  34. https://www.wireshark.org/faq.html


Digests

wireshark-4.0.17.tar.xz: 43210400 bytes
SHA256(wireshark-4.0.17.tar.xz)=5968c25979e84a9d1fafc4f37fffb77296830311a712d6df28f2bdeec0740627
SHA1(wireshark-4.0.17.tar.xz)=0853c04000d0c1fb4928b731966e25898afe1a46

Wireshark-win64-4.0.17.exe: 79821832 bytes
SHA256(Wireshark-win64-4.0.17.exe)=87a9ad3e98d34a2256dffdacb214088473819bca39e2081f039f210d54a26a66
SHA1(Wireshark-win64-4.0.17.exe)=75086e9eccf71ddb967a141c517547a4c3999389

Wireshark-win64-4.0.17.msi: 54599680 bytes
SHA256(Wireshark-win64-4.0.17.msi)=f713b9c930c6aa92591d1d24c90f358927871d10c8daf9e1ded25c9e8dfde180
SHA1(Wireshark-win64-4.0.17.msi)=8d46e42f561a711a3657ec7d62e3f49f65b254a0

WiresharkPortable64_4.0.17.paf.exe: 46962336 bytes
SHA256(WiresharkPortable64_4.0.17.paf.exe)=f63520203c9eb02354b0a68793f3a56a5716f346596d3809449082e14a0d09b4
SHA1(WiresharkPortable64_4.0.17.paf.exe)=06b50709c0df62829472d93bf4cf3e759a6b064d

Wireshark 4.0.17 Arm 64.dmg: 64808916 bytes
SHA256(Wireshark 4.0.17 Arm 64.dmg)=0e24c610bfd2bbc2a24a0f22843d0d7a657a041beebec9b7664e6ab6ca76a6f1
SHA1(Wireshark 4.0.17 Arm 64.dmg)=2a8b5d4773f448e318a8b0c2168cb68fd12b3eb0

Wireshark 4.0.17 Intel 64.dmg: 68839466 bytes
SHA256(Wireshark 4.0.17 Intel 64.dmg)=09c60de65478041284ed2c8915d6e613878e241af2c3a4e82abb888d626c1f9b
SHA1(Wireshark 4.0.17 Intel 64.dmg)=9b55240bfd8d06bb511658796f6cf1b48b4b1c56

You can validate these hashes using the following commands (among others):

    Windows: certutil -hashfile Wireshark-win64-x.y.z.exe SHA256
    Linux (GNU Coreutils): sha256sum wireshark-x.y.z.tar.xz
    macOS: shasum -a 256 "Wireshark x.y.z Arm 64.dmg"
    Other: openssl sha256 wireshark-x.y.z.tar.xz

Attachment: OpenPGP_signature.asc
Description: OpenPGP digital signature