aboutsummaryrefslogtreecommitdiffstats
path: root/NEWS
diff options
context:
space:
mode:
authorGerald Combs <gerald@wireshark.org>2016-02-25 15:13:46 -0800
committerGerald Combs <gerald@wireshark.org>2016-02-26 19:52:25 +0000
commit7f56a20e1e701216b3c31c3540022f604978b1e3 (patch)
treea5c3b96919eb78631be2e2b242d7179bd32fc7f0 /NEWS
parentf30a29e53e931563c7ca871297a5acbdc109770b (diff)
downloadwireshark-7f56a20e1e701216b3c31c3540022f604978b1e3.tar.gz
wireshark-7f56a20e1e701216b3c31c3540022f604978b1e3.tar.bz2
wireshark-7f56a20e1e701216b3c31c3540022f604978b1e3.zip
Change-Id: I9ac125306dc973dfcab9b2aaf064568d92e42e24 Reviewed-on: https://code.wireshark.org/review/14176 Reviewed-by: Gerald Combs <gerald@wireshark.org>
Diffstat (limited to 'NEWS')
-rw-r--r--NEWS272
1 files changed, 98 insertions, 174 deletions
diff --git a/NEWS b/NEWS
index 48a64a419f..63c1cee1ee 100644
--- a/NEWS
+++ b/NEWS
@@ -1,4 +1,4 @@
- Wireshark 1.12.9 Release Notes
+ Wireshark 1.12.10 Release Notes
__________________________________________________________________
What is Wireshark?
@@ -12,79 +12,40 @@ What's New
Bug Fixes
The following vulnerabilities have been fixed:
- * [1]wnpa-sec-2015-31
- NBAP dissector crashes. ([2]Bug 11602, [3]Bug 11835, [4]Bug 11841)
- * [5]wnpa-sec-2015-32
- UMTS FP dissector crashes. ([6]Bug 11602, [7]Bug 11606)
- * [8]wnpa-sec-2015-33
- DCOM dissector crash. ([9]Bug 11610)
- * [10]wnpa-sec-2015-34
- AllJoyn dissector infinite loop. ([11]Bug 11607)
- * [12]wnpa-sec-2015-35
- T.38 dissector crash. ([13]Bug 9887)
- * [14]wnpa-sec-2015-36
- SDP dissector crash. ([15]Bug 9887)
- * [16]wnpa-sec-2015-37
- NLM dissector crash.
- * [17]wnpa-sec-2015-38
- DNS dissector crash. ([18]Bug 10988)
- * [19]wnpa-sec-2015-39
- BER dissector crash.
- * [20]wnpa-sec-2015-40
- Zlib decompression crash. ([21]Bug 11548)
- * [22]wnpa-sec-2015-41
- SCTP dissector crash. ([23]Bug 11767)
- * [24]wnpa-sec-2015-42
- 802.11 decryption crash. ([25]Bug 11790, [26]Bug 11826)
- * [27]wnpa-sec-2015-43
- DIAMETER dissector crash. ([28]Bug 11792)
- * [29]wnpa-sec-2015-44
- VeriWave file parser crashes. ([30]Bug 11789, [31]Bug 11791)
- * [32]wnpa-sec-2015-45
- RSVP dissector crash. ([33]Bug 11793)
- * [34]wnpa-sec-2015-46
- ANSI A & GSM A dissector crashes. ([35]Bug 11797)
- * [36]wnpa-sec-2015-47
- Ascend file parser crash. ([37]Bug 11794)
- * [38]wnpa-sec-2015-48
- NBAP dissector crash. ([39]Bug 11815)
- * [40]wnpa-sec-2015-49
- RSL dissector crash. ([41]Bug 11829)
- * [42]wnpa-sec-2015-50
- ZigBee ZCL dissector crash. ([43]Bug 11830)
- * [44]wnpa-sec-2015-51
- Sniffer file parser crash. ([45]Bug 11827)
-
- The Windows installers are now built using NSIS 2.50 in order to avoid
- [46]DLL hijacking flaws.
+ * [1]wnpa-sec-2016-01
+ DLL hijacking vulnerability. [2]CVE-2016-2521
+ * [3]wnpa-sec-2016-03
+ DNP dissector infinite loop. ([4]Bug 11938) [5]CVE-2016-2523
+ * [6]wnpa-sec-2016-10
+ RSL dissector crash. ([7]Bug 11829) [8]CVE-2016-2530
+ [9]CVE-2016-2531
+ * [10]wnpa-sec-2016-11
+ LLRP dissector crash. ([11]Bug 12048) [12]CVE-2016-2532
+ * [13]wnpa-sec-2016-14
+ GSM A-bis OML dissector crash. ([14]Bug 11825)
+ * [15]wnpa-sec-2016-15
+ ASN.1 BER dissector crash. ([16]Bug 12106)
+ * [17]wnpa-sec-2016-18
+ ASN.1 BER dissector crash. ([18]Bug 11822)
The following bugs have been fixed:
- * Zooming out (Ctrl+-) too far crashes Wireshark. ([47]Bug 8854)
- * IPv6 Next Header is Unknown yet Wireshark tries parsing an IPv6
- Extension Header. ([48]Bug 9996)
- * IPv6 Mobility Header Link-Layer Address Mobility Option is parsed
- incorrectly. ([49]Bug 10627)
- * Windows Wireshark Installer does not detect WinPcap which is
- already installed. ([50]Bug 10867)
- * SSL Decrypted Packet Not Decoded As HTTP. ([51]Bug 10984)
- * Wireshark crashes when using the VoIP player. ([52]Bug 11596)
- * [GSMTAP] Incorrect decoding of MS Radio Access Capability using
- alternative coding. ([53]Bug 11599)
- * TCP sequence analysis (expert info) does not work in 802.1ah
- frames. ([54]Bug 11629)
- * No correct GVCP info message for READREG_ACK command. ([55]Bug
- 11639)
- * Bug in EtherCAT dissector with mailbox response. ([56]Bug 11652)
- * NLM v4 statistics crash. ([57]Bug 11654)
- * Malformed packet with IPv6 mobility header. ([58]Bug 11728)
- * LDAP decode shows invalid number of results for searchResEntry
- packets. ([59]Bug 11761)
- * IPv6 RPL Routing Header with length of 8 bytes still reads an
- address. ([60]Bug 11803)
- * g_utf8_validate assertion when reassembling GSM SMS messages
- encoded in UCS2. ([61]Bug 11809)
- * MPEG2TS NULL pkt: AFC: "Should be 0 for NULL packets" wrong.
- ([62]Bug 11921)
+ * Questionable calling of ethernet dissector by encapsulating
+ protocol dissectors. ([19]Bug 9933)
+ * Improper RPC reassembly ([20]Bug 11913)
+ * GTPv1 Dual Stack with one static and one Dynamic IP. ([21]Bug
+ 11945)
+ * Failed to parse M3AP IE (TNL information). ([22]Bug 12070)
+ * Wrong interpretation of Instance ID value in OSPFv3 packet.
+ ([23]Bug 12072)
+ * MP2T Dissector does parse RTP properly in 2.0.1. ([24]Bug 12099)
+ * editcap does not adjust time for frames with absolute timestamp 0 <
+ t < 1 secs. ([25]Bug 12116)
+
+ Windows installers and PortableApps® packages are now dual signed using
+ SHA-1 and SHA-256 in order to comply with [26]Microsoft Authenticode
+ policy. Windows 7 and Windows Server 2008 R2 users should ensure that
+ [27]update 3123479 is installed. Windows Vista and Windows Server 2008
+ users should ensure that [28]hotfix 2763674 is installed.
New and Updated Features
@@ -96,27 +57,24 @@ What's New
Updated Protocol Support
- 6LoWPAN, 802.1ah, AllJoyn, ANSI A, ASN.1 BER, CLNP, CMS, DCOM,
- DIAMETER, DNS, ERF, GSM A, GSM SMS, GTP, GVCP, HiSLIP, IEEE 802.11,
- IPv4, IPv6, L2TP, LDAP, MIP6, MP2T, NBAP, NLM, ONC RPC, PCP, RSL, RSVP,
- SCTP, SDP, SIGCOMP, SNMP, SPDY, T.38, UMTS FP, and ZigBee ZCL
+ ASN.1 BER, BATADV, DNP3, E100, EIGRP, GSM A DTAP, GSM SMS, GTP, HiQnet,
+ InfiniBand, LLRP, M3AP, MP2T, NFS, OSPF, RoHC, RPC, RSL, TRILL, VXLAN,
+ and X.509AF
New and Updated Capture File Support
-
- Ascend, ERF, Sniffer, and VeriWave
__________________________________________________________________
Getting Wireshark
Wireshark source code and installation packages are available from
- [63]https://www.wireshark.org/download.html.
+ [29]https://www.wireshark.org/download.html.
Vendor-supplied Packages
Most Linux and Unix vendors supply their own Wireshark packages. You
can usually install or upgrade Wireshark using the package management
system specific to that platform. A list of third-party packages can be
- found on the [64]download page on the Wireshark web site.
+ found on the [30]download page on the Wireshark web site.
__________________________________________________________________
File Locations
@@ -129,127 +87,93 @@ File Locations
Known Problems
- Dumpcap might not quit if Wireshark or TShark crashes. ([65]Bug 1419)
+ Dumpcap might not quit if Wireshark or TShark crashes. ([31]Bug 1419)
- The BER dissector might infinitely loop. ([66]Bug 1516)
+ The BER dissector might infinitely loop. ([32]Bug 1516)
Capture filters aren't applied when capturing from named pipes.
- ([67]Bug 1814)
+ ([33]Bug 1814)
Filtering tshark captures with read filters (-R) no longer works.
- ([68]Bug 2234)
+ ([34]Bug 2234)
The 64-bit Windows installer does not support Kerberos decryption.
- ([69]Win64 development page)
+ ([35]Win64 development page)
- Resolving ([70]Bug 9044) reopens ([71]Bug 3528) so that Wireshark no
+ Resolving ([36]Bug 9044) reopens ([37]Bug 3528) so that Wireshark no
longer automatically decodes gzip data when following a TCP stream.
- Application crash when changing real-time option. ([72]Bug 4035)
+ Application crash when changing real-time option. ([38]Bug 4035)
- Hex pane display issue after startup. ([73]Bug 4056)
+ Hex pane display issue after startup. ([39]Bug 4056)
- Packet list rows are oversized. ([74]Bug 4357)
+ Packet list rows are oversized. ([40]Bug 4357)
Wireshark and TShark will display incorrect delta times in some cases.
- ([75]Bug 4985)
+ ([41]Bug 4985)
__________________________________________________________________
Getting Help
- Community support is available on [76]Wireshark's Q&A site and on the
+ Community support is available on [42]Wireshark's Q&A site and on the
wireshark-users mailing list. Subscription information and archives for
- all of Wireshark's mailing lists can be found on [77]the web site.
+ all of Wireshark's mailing lists can be found on [43]the web site.
Official Wireshark training and certification are available from
- [78]Wireshark University.
+ [44]Wireshark University.
__________________________________________________________________
Frequently Asked Questions
- A complete FAQ is available on the [79]Wireshark web site.
+ A complete FAQ is available on the [45]Wireshark web site.
__________________________________________________________________
- Last updated 2015-12-29 08:48:09 PST
+ Last updated 2016-02-26 09:32:05 PST
References
- 1. https://www.wireshark.org/security/wnpa-sec-2015-31.html
- 2. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11602
- 3. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11835
- 4. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11841
- 5. https://www.wireshark.org/security/wnpa-sec-2015-32.html
- 6. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11602
- 7. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11606
- 8. https://www.wireshark.org/security/wnpa-sec-2015-33.html
- 9. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11610
- 10. https://www.wireshark.org/security/wnpa-sec-2015-34.html
- 11. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11607
- 12. https://www.wireshark.org/security/wnpa-sec-2015-35.html
- 13. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9887
- 14. https://www.wireshark.org/security/wnpa-sec-2015-36.html
- 15. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9887
- 16. https://www.wireshark.org/security/wnpa-sec-2015-37.html
- 17. https://www.wireshark.org/security/wnpa-sec-2015-38.html
- 18. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10988
- 19. https://www.wireshark.org/security/wnpa-sec-2015-39.html
- 20. https://www.wireshark.org/security/wnpa-sec-2015-40.html
- 21. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11548
- 22. https://www.wireshark.org/security/wnpa-sec-2015-41.html
- 23. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11767
- 24. https://www.wireshark.org/security/wnpa-sec-2015-42.html
- 25. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11790
- 26. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11826
- 27. https://www.wireshark.org/security/wnpa-sec-2015-43.html
- 28. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11792
- 29. https://www.wireshark.org/security/wnpa-sec-2015-44.html
- 30. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11789
- 31. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11791
- 32. https://www.wireshark.org/security/wnpa-sec-2015-45.html
- 33. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11793
- 34. https://www.wireshark.org/security/wnpa-sec-2015-46.html
- 35. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11797
- 36. https://www.wireshark.org/security/wnpa-sec-2015-47.html
- 37. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11794
- 38. https://www.wireshark.org/security/wnpa-sec-2015-48.html
- 39. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11815
- 40. https://www.wireshark.org/security/wnpa-sec-2015-49.html
- 41. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11829
- 42. https://www.wireshark.org/security/wnpa-sec-2015-50.html
- 43. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11830
- 44. https://www.wireshark.org/security/wnpa-sec-2015-51.html
- 45. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11827
- 46. http://nsis.sourceforge.net/Docs/AppendixF.html
- 47. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8854
- 48. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9996
- 49. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10627
- 50. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10867
- 51. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10984
- 52. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11596
- 53. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11599
- 54. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11629
- 55. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11639
- 56. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11652
- 57. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11654
- 58. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11728
- 59. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11761
- 60. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11803
- 61. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11809
- 62. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11921
- 63. https://www.wireshark.org/download.html
- 64. https://www.wireshark.org/download.html#thirdparty
- 65. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1419
- 66. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1516
- 67. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1814
- 68. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2234
- 69. https://wiki.wireshark.org/Development/Win64
- 70. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9044
- 71. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3528
- 72. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4035
- 73. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4056
- 74. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4357
- 75. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4985
- 76. https://ask.wireshark.org/
- 77. https://www.wireshark.org/lists/
- 78. http://www.wiresharktraining.com/
- 79. https://www.wireshark.org/faq.html
+ 1. https://www.wireshark.org/security/wnpa-sec-2016-01.html
+ 2. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2521
+ 3. https://www.wireshark.org/security/wnpa-sec-2016-03.html
+ 4. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11938
+ 5. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2523
+ 6. https://www.wireshark.org/security/wnpa-sec-2016-10.html
+ 7. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11829
+ 8. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2530
+ 9. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2531
+ 10. https://www.wireshark.org/security/wnpa-sec-2016-11.html
+ 11. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12048
+ 12. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2532
+ 13. https://www.wireshark.org/security/wnpa-sec-2016-14.html
+ 14. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11825
+ 15. https://www.wireshark.org/security/wnpa-sec-2016-15.html
+ 16. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12106
+ 17. https://www.wireshark.org/security/wnpa-sec-2016-18.html
+ 18. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11822
+ 19. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9933
+ 20. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11913
+ 21. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11945
+ 22. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12070
+ 23. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12072
+ 24. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12099
+ 25. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12116
+ 26. http://social.technet.microsoft.com/wiki/contents/articles/32288.windows-enforcement-of-authenticode-code-signing-and-timestamping.aspx
+ 27. https://support.microsoft.com/en-us/kb/3123479
+ 28. https://support.microsoft.com/en-us/kb/2763674
+ 29. https://www.wireshark.org/download.html
+ 30. https://www.wireshark.org/download.html#thirdparty
+ 31. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1419
+ 32. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1516
+ 33. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1814
+ 34. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2234
+ 35. https://wiki.wireshark.org/Development/Win64
+ 36. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9044
+ 37. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3528
+ 38. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4035
+ 39. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4056
+ 40. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4357
+ 41. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4985
+ 42. https://ask.wireshark.org/
+ 43. https://www.wireshark.org/lists/
+ 44. http://www.wiresharktraining.com/
+ 45. https://www.wireshark.org/faq.html