Subject: CVS commit: pkgsrc/net/wireshark
From: Adam Ciarcinski
Date: 2023-05-26 06:27:56
Message id: 20230526042756.C1AB7FA87@cvs.NetBSD.org

Log Message:
wireshark: updated to 4.0.6

Wireshark 4.0.6 Release Notes

What’s New

 We do not ship official 32-bit Windows packages for Wireshark 4.0 and
 later. If you need to use Wireshark on that platform, we recommend
 using the latest 3.6 release. Issue 17779[1]

 If you’re running Wireshark on macOS and upgraded to macOS 13 from an
 earlier version, you will likely have to open and run the “Uninstall
 ChmodBPF” package, then open and run “Install ChmodBPF” in order to
 reset the ChmodBPF Launch Daemon. Issue 18734[2].

 Bug Fixes

  The following vulnerabilities have been fixed:

    • wnpa-sec-2023-12[3] Candump log file parser crash. Issue
      19062[4]. CVE-2023-2855[5].

    • wnpa-sec-2023-13[6] BLF file parser crash. Issue 19063[7].
      CVE-2023-2857[8].

    • wnpa-sec-2023-14[9] GDSDB dissector infinite loop. Issue
      19068[10].

    • wnpa-sec-2023-15[11] NetScaler file parser crash. Issue
      19081[12]. CVE-2023-2858[13].

    • wnpa-sec-2023-16[14] VMS TCPIPtrace file parser crash. Issue
      19083[15]. CVE-2023-2856[16].

    • wnpa-sec-2023-17[17] BLF file parser crash. Issue 19084[18].
      CVE-2023-2854[19].

    • wnpa-sec-2023-18[20] RTPS dissector crash. Issue 19085[21].
      CVE-2023-0666[22].

    • wnpa-sec-2023-19[23] IEEE C37.118 Synchrophasor dissector crash.
      Issue 19087[24]. CVE-2023-0668[25].

    • wnpa-sec-2023-20[26] XRA dissector infinite loop. Issue
      19100[27].

  The following bugs have been fixed:

    • Conversations list has incorrect unit (bytes) in bit speed
      columns in the 3.7 development versions. Issue 18211[28].

    • The media_type table should treat media types, e.g.
      application/3gppHal+json, as case-insensitive. Issue 18611[29].

    • NNTP dissector bug. Issue 18981[30].

    • Incorrect padding in BFCP decoder. Issue 18890[31].

    • SPNEGO dissector bug. Issue 18991[32].

    • SRT values are incorrect when applying a time shift. Issue
      18999[33].

    • Add warning that capturing is not supported in Wireshark
      installed from flatpak. Issue 19008[34].

    • Opening Wireshark with -z io,stat option. Issue 19042[35].

    • batadv dissector bug. Issue 19047[36].

    • radiotap-gen build fails if pcap is not found. Issue 19059[37].

    • [UDS] When filtering the uds.wdbi.data_identifier or
      uds.iocbi.data_identifier field is interpreted as 1 byte whereas
      it consists of 2 bytes. Issue 19078[38].

    • Wireshark can’t save this capture in that format. Issue
      19080[39].

    • MSMMS parsing buffer overflow. Issue 19086[40].

    • USB HID parser shows wrong label for usages Rx/Vx/Vbrx of usage
      page Generic Desktop Control. Issue 19095[41].

    • "Follow → QUIC Stream" mixes data between streams. Issue
      19102[42].

 New and Updated Features

  The media type dissector table now properly treats media types and
  subtypes as case-insensitive automatically, per RFC 6838. Media types
  no longer need to be lower cased before registering or looking up in
  the table.

 Removed Features and Support

 New Protocol Support

  There are no new protocols in this release.

 Updated Protocol Support

  batadv, BFCP, CommunityID, COSE, GDSDB, H.265, HTTP, ILP, ISAKMP,
  MSMMS, NNTP, NR RRC, NTLMSSP, QUIC, RTPS, SPNEGO, Synphasor, TCP,
  UDS, ULP, USB HID, and XRA

Files:
RevisionActionfile
1.297modifypkgsrc/net/wireshark/Makefile
1.81modifypkgsrc/net/wireshark/PLIST
1.165modifypkgsrc/net/wireshark/distinfo