Software Update: Wireshark 2.6.6

Version 2.6.6 of the open source protocol analyzer and packet niffer Wireshark has been released. With this program, various data packets and network protocols on the network can be analyzed. The program can also use previously saved data traffic as input. Wireshark runs on Windows, Linux, and macOS, with separate downloads for 32bit and 64bit versions of the operating systems. The following changes and improvements have been made in this release:

What’s New

• The Windows installers now ship with Qt 5.9.7. Previously they shipped with Qt 5.9.5.

The following vulnerabilities have been fixed:

• wnpa-sec-2019-01 The 6LoWPAN dissector could crash. Bug 15217. CVE-2019-5716.
• wnpa-sec-2019-02 The P_MUL dissector could crash. Bug 15337. CVE-2019-5717.
• wnpa-sec-2019-03 The RTSE dissector and other dissectors could crash. Bug 15373. CVE-2019-5718.
• wnpa-sec-2019-04 The ISAKMP dissector could crash. Bug 15374. CVE-2019-5719.

The following bugs have been fixed:

• console.lua not found in a folder with non-ASCII characters in its name. Bug 15118.
• Disabling Update list of packets in real time. will generally trigger crash after three start capture, stop capture cycles. Bug 15263.
• UDP Multicast Stream double counts. Bug 15271.
• text2pcap et al. set snaplength to 64kiB-1, while processing frames of 256kiB. Bug 15292.
• Builds without libpcap fail if the libpcap headers aren’t installed. Bug 15317.
• TCAP AnalogRedirectRecord parameter incorrectly coded as mandatory in QualReq_rr message. Bug 15350.
• macOS DMG appears to have duplicate files. Bug 15361.
• Wireshark jumps behind other windows when opening UAT dialogs. Bug 15366.
• Pathnames containing non-ASCII characters are mangled in error dialogs on Windows. Bug 15367.
• Executing -z http,stat -r file.pcapng throws a segmentation fault. Bug 15369.
• IS-41 TCAP RegistrationNotification Invoke has borderCellAccess parameter coded as tag 50 (as denyAccess) but should be 58. Bug 15372.
• In DNS statistics, response times > 1 sec not included. Bug 15382.
• GTPv2 APN dissect problem. Bug 15383.

Updated Protocol Support

• 6LoWPAN
• ANSI MAP
• DNP3
• DNS
• GSM A
• GTP
• GTPv2
• IMF
• ISAKMP
• ISO bus VT
• Kerberos
• P_MUL
• RTSE
• S7COMM
• TCAP

Major API Changes

• Lua: on Windows, file-related functions such as dofile now assume UTF-8 paths instead of the local code page. This is consistent with Linux and macOS and improves compatibility on non-English systems. (Bug 15118)

The following downloads are available:
Wireshark 2.6.6 for Windows (32bit)
Wireshark 2.6.6 for Windows (64 bit)
Wireshark 2.6.6 for PortableApps
Wireshark 2.6.6 for macOS 10.6 and above (64bit)
Wireshark 2.6.6 source code for Linux, Solaris and *BSD among others