Software Update: Wireshark 3.4.1

Version 3.4.1 of the open source protocol analyzer and packet niffer Wireshark has been released, a development version. With this program, various data packets and network protocols on the network can be analyzed. The program can also use previously saved data traffic as input. Wireshark runs on Windows, Linux, and macOS, with separate downloads for 32bit and 64bit versions of the operating systems. The changelog for this release shows the following changes and improvements:

Bug Fixes

• wnpa-sec-2020-16 Kafka dissector memory leak. Bug 16739. CVE-2020-26418.
• wnpa-sec-2020-17 USB HID dissector crash. Bug 16958. CVE-2020-26421.
• wnpa-sec-2020-18 RTPS dissector memory leak. Bug 16994. CVE-2020-26420.
• wnpa-sec-2020-19 Multiple dissector memory leak. Bug 17032. CVE-2020-26419.

New and Updated Features

• IETF QUIC TLS decryption errors when a NAT rebinding happens for a connection Bug 16915.
• IETF QUIC TLS decryption error with key update Bug 16916.
• IETF QUIC TLS decryption error after the second key update Bug 16920.
• SOME/IP: Wrong dissection of parameters after Array Bug 16951.
• Can editcap properly corrupt pcapng file with systemd journal export block? Bug 16965.
• Crash when a GIOP ior.txt file is present Bug 16984.
• Protobuf: failed to parse .proto file contains negative enum values ​​or option values ​​of number type Bug 16988.
• MMRP dissector bug Bug 17005.
• QUIC: “Loss bits” capability Bug 17010.
• Stdin capture fails on Windows Bug 17018.
• SSTP no longer recognized Bug 17024.
• RFC2190 encapsulated H.263 bitfields masked wrong in Mode A Bug 17025.
• editcap fails when splitting into multiple pcapng files Bug 17060.

Updated Protocol Support

• ACDR
• DOCSIS
• Ericsson HDLC
• F5 Ethernet Trailer
• GIOP
• GSM A
• GSM RLC MAC
• HTTP
• IEEE 802.11
• kafka
• LLC
• MBIM
• MMRP
• NAS 5GS
• NAS EPS
• Nordic BLE
• ProtoBuf
• QUIC
• radio tap
• RFC 2190
• RTCP
• RTPS
• S1AP
• SOME/IP
• STUN
• USB Video

New and Updated Capture File Support

• pcapng

The following downloads are available:
Wireshark 3.4.1 for Windows (32bit)
Wireshark 3.4.1 for Windows (64bit)
Wireshark 3.4.1 for PortableApps
Wireshark 3.4.1 for macOS 10.12 and above (64bit)
Wireshark 3.4.1 source code for Linux, Solaris and *BSD among others