[Wireshark announcements <wireshark-announce@xxxxxxxxxxxxx>]

I'm proud to announce the release of Wireshark 4.2.9.


 What is Wireshark?

  Wireshark is the world’s most popular network protocol analyzer. It is
  used for troubleshooting, analysis, development and education.

  Wireshark is hosted by the Wireshark Foundation, a nonprofit which
  promotes protocol analysis education. Wireshark and the foundation
  depend on your contributions in order to do their work. If you or your
  organization would like to contribute or become a sponsor, please
  visit wiresharkfoundation.org[1].

 What’s New

  Bug Fixes

   The following vulnerabilities have been fixed:

     • wnpa-sec-2024-14[2] FiveCo RAP dissector infinite loop. Issue
       20176[3].

     • wnpa-sec-2024-15[4] ECMP dissector crash. Issue 20214[5].

   The following bugs have been fixed:

     • JA4_c hashes an empty field to e3b0c44298fc when it should be
       000000000000. Issue 20066[6].

     • SRT dissector: The StreamID (SID) in the handshake extension is
       displayed without regarding the control characters and with NUL
       as terminating. Issue 20113[7].

     • Ghost error message on POP3 packets. Issue 20124[8].

     • Building against c-ares 1.34 fails. Issue 20125[9].

     • Wi-Fi: 256 Block Ack (BA) is not parsed properly. Issue
       20156[10].

     • HTTP2 body decompression fails on DATA with a single padded
       frame. Issue 20167[11].

     • SIP dissector bug due to "be-route" param in VIA header. Issue
       20173[12].

     • Coredump after trying to open 'Follow TCP stream' Issue
       20174[13].

     • Protobuf JSON mapping error. Issue 20182[14].

     • IEEE 802.11be: Wrong regulatory info in HE Operation IE in Beacon
       frame. Issue 20187[15].

     • Wireshark crashes when a field is dragged from packet details
       towards the find input. Issue 20204[16].

     • Lua DissectorTable("") : set ("10,11") unexpected behavior in
       locales with comma as decimal separator. Issue 20216[17].

  New and Updated Features

   There are no new or updated features in this release.

  New Protocol Support

   There are no new protocols in this release.

  Updated Protocol Support

   ASN.1 PER, ECMP, FiveCo RAP, HSRP, HTTP/2, IEEE 802.11, MPEG PES,
   PN-DCP, POP, ProtoBuf, SIP, SRT, TCP, and UMTS RLC

  New and Updated Capture File Support

   There is no new or updated capture file support in this release.

  Updated File Format Decoding Support

   There is no updated file format support in this release.

 Prior Versions

  This document only describes the changes introduced in Wireshark
  4.2.9. You can find release notes for prior versions at the following
  locations:

    • Wireshark 4.2.8[18]

    • Wireshark 4.2.7[19]

    • Wireshark 4.2.6[20]

    • Wireshark 4.2.5[21]

    • Wireshark 4.2.4[22]

    • Wireshark 4.2.3[23]

    • Wireshark 4.2.2[24]

    • Wireshark 4.2.1[25]

    • Wireshark 4.2.0[26]

 Getting Wireshark

  Wireshark source code and installation packages are available from
  https://www.wireshark.org/download.html.

  Vendor-supplied Packages

   Most Linux and Unix vendors supply their own Wireshark packages. You
   can usually install or upgrade Wireshark using the package management
   system specific to that platform. A list of third-party packages can
   be found on the download page[27] on the Wireshark web site.

 File Locations

  Wireshark and TShark look in several different locations for
  preference files, plugins, SNMP MIBS, and RADIUS dictionaries. These
  locations vary from platform to platform. You can use "Help › About
  Wireshark › Folders" or `tshark -G folders` to find the default
  locations on your system.

 Getting Help

  The User’s Guide, manual pages and various other documentation can be
  found at https://www.wireshark.org/docs/

  Community support is available on Wireshark’s Q&A site[28] and on the
  wireshark-users mailing list. Subscription information and archives
  for all of Wireshark’s mailing lists can be found on the web site[29].

  Bugs and feature requests can be reported on the issue tracker[30].

  You can learn protocol analysis and meet Wireshark’s developers at
  SharkFest[31].

 How You Can Help

  The Wireshark Foundation helps as many people as possible understand
  their networks as much as possible. You can find out more and donate
  at wiresharkfoundation.org[32].

 Frequently Asked Questions

  A complete FAQ is available on the Wireshark web site[33].

 References

   1. https://wiresharkfoundation.org
   2. https://www.wireshark.org/security/wnpa-sec-2024-14
   3. https://gitlab.com/wireshark/wireshark/-/issues/20176
   4. https://www.wireshark.org/security/wnpa-sec-2024-15
   5. https://gitlab.com/wireshark/wireshark/-/issues/20214
   6. https://gitlab.com/wireshark/wireshark/-/issues/20066
   7. https://gitlab.com/wireshark/wireshark/-/issues/20113
   8. https://gitlab.com/wireshark/wireshark/-/issues/20124
   9. https://gitlab.com/wireshark/wireshark/-/issues/20125
  10. https://gitlab.com/wireshark/wireshark/-/issues/20156
  11. https://gitlab.com/wireshark/wireshark/-/issues/20167
  12. https://gitlab.com/wireshark/wireshark/-/issues/20173
  13. https://gitlab.com/wireshark/wireshark/-/issues/20174
  14. https://gitlab.com/wireshark/wireshark/-/issues/20182
  15. https://gitlab.com/wireshark/wireshark/-/issues/20187
  16. https://gitlab.com/wireshark/wireshark/-/issues/20204
  17. https://gitlab.com/wireshark/wireshark/-/issues/20216
  18. https://www.wireshark.org/docs/relnotes/wireshark-4.2.8.html
  19. https://www.wireshark.org/docs/relnotes/wireshark-4.2.7.html
  20. https://www.wireshark.org/docs/relnotes/wireshark-4.2.6.html
  21. https://www.wireshark.org/docs/relnotes/wireshark-4.2.5.html
  22. https://www.wireshark.org/docs/relnotes/wireshark-4.2.4.html
  23. https://www.wireshark.org/docs/relnotes/wireshark-4.2.3.html
  24. https://www.wireshark.org/docs/relnotes/wireshark-4.2.2.html
  25. https://www.wireshark.org/docs/relnotes/wireshark-4.2.1.html
  26. https://www.wireshark.org/docs/relnotes/wireshark-4.2.0.html
  27. https://www.wireshark.org/download.html
  28. https://ask.wireshark.org/
  29. https://www.wireshark.org/lists/
  30. https://gitlab.com/wireshark/wireshark/-/issues
  31. https://sharkfest.wireshark.org
  32. https://wiresharkfoundation.org
  33. https://www.wireshark.org/faq.html


Digests

wireshark-4.2.9.tar.xz: 45045592 bytes
SHA256(wireshark-4.2.9.tar.xz)=62c2b6652d7f9a50668867bd57b21609c9a9b6950f26e7f30a24b2de0e72ded3
SHA1(wireshark-4.2.9.tar.xz)=d1abbe110451dab9e57c9ee1fe0892e0d6a7d515

Wireshark-4.2.9-x64.exe: 86497240 bytes
SHA256(Wireshark-4.2.9-x64.exe)=3eb1d48fb4b5db39154ad9f73778c7fce0d749393a406775cbe24cefb0476f5d
SHA1(Wireshark-4.2.9-x64.exe)=75dc0bf4f750b9e17be4a29fcebf67aba1d14e8a

Wireshark-4.2.9-arm64.exe: 68046416 bytes
SHA256(Wireshark-4.2.9-arm64.exe)=4cd708cc401e0b538a93dba725ab3e1e798350498ff1713be5907e959f7c56ee
SHA1(Wireshark-4.2.9-arm64.exe)=eb76a49b37564d0e034b7f0818c8b44a50e29327

Wireshark-4.2.9-x64.msi: 63156224 bytes
SHA256(Wireshark-4.2.9-x64.msi)=58acadf82c1f1dcb28bf0a3bab5d5a82107a80ee8eab476ab150d78abea710ed
SHA1(Wireshark-4.2.9-x64.msi)=47a33a9f9c553b364f28dc0c2e12390b599a7c4c

WiresharkPortable64_4.2.9.paf.exe: 53703032 bytes
SHA256(WiresharkPortable64_4.2.9.paf.exe)=06dc3cd2bcc2045ffebc4e4781d20702c6fa1f7ecec0da168f474e15fc901eb0
SHA1(WiresharkPortable64_4.2.9.paf.exe)=f6e9ee6de841b2dd5e3afef1f0d9d1c2368f6550

Wireshark 4.2.9 Arm 64.dmg: 65704617 bytes
SHA256(Wireshark 4.2.9 Arm 64.dmg)=9dafd0d3eb9ca5d0372eb4ef00b264dd457cce3c22bb430aadeafa054853cad6
SHA1(Wireshark 4.2.9 Arm 64.dmg)=66386fc3cbd9d3a3c7a95993f301b8f8a4410697

Wireshark 4.2.9 Intel 64.dmg: 69462238 bytes
SHA256(Wireshark 4.2.9 Intel 64.dmg)=64f5a653d812f4c248fcdb17f2dd43ab227880992ceed77994fd2b3604ff6997
SHA1(Wireshark 4.2.9 Intel 64.dmg)=106897e7269b092f2721a5da0f6655ef446abe63

You can validate these hashes using the following commands (among others):

    Windows: certutil -hashfile Wireshark-win64-x.y.z.exe SHA256
    Linux (GNU Coreutils): sha256sum wireshark-x.y.z.tar.xz
    macOS: shasum -a 256 "Wireshark x.y.z Arm 64.dmg"
    Other: openssl sha256 wireshark-x.y.z.tar.xz

Attachment: OpenPGP_signature.asc
Description: OpenPGP digital signature