include::attributes.adoc[]
:stylesheet: ws.css
:linkcss:
:copycss: {stylesheet}

== Wireshark {wireshark-version} Release Notes
// Asciidoctor Syntax Quick Reference:
// https://asciidoctor.org/docs/asciidoc-syntax-quick-reference/

== What is Wireshark?

Wireshark is the world’s most popular network protocol analyzer.
It is used for troubleshooting, analysis, development and education.

== What’s New

__This is the last release branch with support for 32-bit Windows.__
Updates will no longer be available after May 22, 2024 for that platform.
wsbuglink:17779[]

// The Windows installers now ship with Npcap 1.60.
// They previously shipped with Npcap 1.55.

// The Windows installers now ship with USBPcap 1.5.X.0.
// They previously shipped with USBPcap 1.5.4.0.

// The Windows installers now ship with Qt 5.15.2.
// They previously shipped with Qt 5.12.1.

=== Bug Fixes

The following vulnerabilities have been fixed:

* wssalink:2023-02[]
NFS dissector memory leak.
wsbuglink:18628[].
// cveidlink:2023-xxxx[].
// Fixed in master: ae0c38a07a
// Fixed in release-4.0: e405371a55
// Fixed in release-3.6: 3e73371a27
// CVSS AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
// CWE-789
// * Fuzz job crash output: fuzz-2022-11-12-7114.pcap. wsbuglink:18628[].

* wssalink:2023-03[]
Dissection engine crash.
wsbuglink:18766[].
// cveidlink:2023-xxxx[].
// Fixed in master: 55ffdb08bb
// Fixed in release-4.0: 51f52a76b4
// Fixed in release-3.6: c9433c341b
// CVSS AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
// CWE-476
// * Fuzz job crash output: fuzz-2022-12-27-10777.pcap. wsbuglink:18766[].

* wssalink:2023-04[]
GNW dissector crash.
wsbuglink:18779[].
// cveidlink:2023-xxxx[].
// Fixed in master: 693dc40936
// Fixed in release-4.0: e3cfec7313
// Fixed in release-3.6: 086700bcc0
// CVSS AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
// CWE-825
// * Fuzz job crash output: fuzz-2023-01-03-10777.pcap. wsbuglink:18779[].

* wssalink:2023-05[]
iSCSI dissector crash.
wsbuglink:18796[].
// cveidlink:2023-xxxx[].
// Fixed in master: 1e1e733d8c
// Fixed in release-4.0: efddc13620
// Fixed in release-3.6: fa82aec631
// CVSS AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
// CWE-476
// * Fuzz job crash output: fuzz-2023-01-11-10954.pcap. wsbuglink:18796[].

* wssalink:2023-06[]
Multiple dissector excessive loops.
wsbuglink:18711[]. wsbuglink:18720[], wsbuglink:18737[].
// cveidlink:2023-xxxx[].
// Fixed in master: 2fd04b6ba9, dcf00fc3bd, b0cf030b30
// Fixed in release-4.0: ebdaeafba6, 69d3ad621e, f8f9b557f6
// Fixed in release-3.6: 2517e806ab, d1f5073d2e, 2aa7856bf7
// CVSS AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
// CWE-834
// * Fuzz job crash output: fuzz-2022-12-07-11016.pcap. wsbuglink:18711[].
// * Fuzz job crash output: fuzz-2022-12-10-10621.pcap. wsbuglink:18720[].
//* Private. wsbuglink:18737[].

* wssalink:2023-07[]
TIPC dissector crash.
wsbuglink:18770[].
// cveidlink:2023-xxxx[].
// Fixed in master: 659b830aef
// Fixed in release-4.0: e487a599b0
// Fixed in release-3.6: 78a8875f24
// CVSS AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
// CWE-674
// * Fuzz job crash output: fuzz-2022-12-30-11007.pcap wsbuglink:18770[].

The following bugs have been fixed:

//* wsbuglink:5000[]
//* wsbuglink:6000[Wireshark bug]
//* cveidlink:2014-2486[]
//* Wireshark keeps banging out random chords on your piano and yelling “LIPS LIKE SUGUAR, SUGAR KISSES” because it was funny that one time at a party.

* Qt: After modifying coloring rules, the coloring rule applied to the first packet reflects the coloring rules previously in effect. wsbuglink:12475[].

* Help file doesn't display for extcap interfaces wsbuglink:15592[].

* Dissector bug, protocol DRBD wsbuglink:16689[].

* For USB traffic on XHC20 interface destination is always given as Host wsbuglink:16768[].

* Wrong pointer conversion in get_data_source_tvb_by_name() wsbuglink:18517[].

* Wrong number of bits skipped while decoding an empty UTF8String on UPER packet wsbuglink:18702[].

* Uninitialized values in various dissectors wsbuglink:18742[].

// * null wsbuglink:18774[].

* Q.850 - error in label for cause 0x7F wsbuglink:18780[].

* Uninitialized values in CoAP and RTPS dissectors wsbuglink:18785[].

* Screenshots in AppStream metainfo.xml file not available wsbuglink:18801[].


=== New and Updated Features

// === Removed Features and Support

// === Removed Dissectors

=== New Protocol Support

There are no new protocols in this release.

=== Updated Protocol Support

// Add one protocol per line between the -- delimiters.
// ag -A1 '(define PSNAME|proto_register_protocol[^_])' $(git diff --name-only v3.6.9.. | ag packet- | sort -u)
[commaize]
--
BEEP
BGP
BPv6
BSSGP
CoAP
GNW
GSM BSSMAP
GSM A-bis P-GSL
iSCSI
ISUP
Kafka
LwM2M-TLV
NAS-5GS
NFS
OPUS
ROHC
RTPS
TCP
Telnet
RLC
USB
--

=== New and Updated Capture File Support

There is no new or updated capture file support in this release.
// Add one file type per line between the -- delimiters.
// [commaize]
// --
// --

=== New File Format Decoding Support

There is no new or updated file format support in this release.
// Add one file type per line between the -- delimiters.
// [commaize]
// --
// --


// === New and Updated Capture Interfaces support

//_Non-empty section placeholder._

// === Major API Changes

== Getting Wireshark

Wireshark source code and installation packages are available from
https://www.wireshark.org/download.html.

=== Vendor-supplied Packages

Most Linux and Unix vendors supply their own Wireshark packages.
You can usually install or upgrade Wireshark using the package management system specific to that platform.
A list of third-party packages can be found on the
https://www.wireshark.org/download.html[download page]
on the Wireshark web site.

== File Locations

Wireshark and TShark look in several different locations for preference files, plugins, SNMP MIBS, and RADIUS dictionaries.
These locations vary from platform to platform.
You can use menu:Help[About Wireshark,Folders] or `tshark -G folders` to find the default locations on your system.

== Getting Help

The User’s Guide, manual pages and various other documentation can be found at
https://www.wireshark.org/docs/

Community support is available on
https://ask.wireshark.org/[Wireshark’s Q&A site]
and on the wireshark-users mailing list.
Subscription information and archives for all of Wireshark’s mailing lists can be found on
https://www.wireshark.org/lists/[the web site].

Bugs and feature requests can be reported on
https://gitlab.com/wireshark/wireshark/-/issues[the issue tracker].

// Official Wireshark training and certification are available from
// https://www.wiresharktraining.com/[Wireshark University].

== How You Can Help

The Wireshark Foundation helps as many people as possible understand their networks as much as possible.
You can find out more and donate at https://wiresharkfoundation.org[wiresharkfoundation.org].

== Frequently Asked Questions

A complete FAQ is available on the
https://www.wireshark.org/faq.html[Wireshark web site].
