wireshark: updated to 4.0.4

Wireshark 4.0.4 Release Notes

What’s New

We do not ship official 32-bit Windows packages for Wireshark 4.0 and
later. If you need to use Wireshark on that platform, we recommend
using the latest 3.6 release. Issue 17779[1]

If you’re running Wireshark on macOS and upgraded to macOS 13 from an
earlier version, you will likely have to open and run the “Uninstall
ChmodBPF” package, then open and run “Install ChmodBPF” in order to
reset the ChmodBPF Launch Daemon. Issue 18734[2].

Bug Fixes

The following vulnerabilities have been fixed:

  • wnpa-sec-2023-08[3] ISO 15765 and ISO 10681 dissector crash.
    Issue 18839[4].

The following bugs have been fixed:

  • UTF-8 characters end up escaped in PSML output. Issue 10445[5].

  • Export filtered displayed packets won’t save IP fragments of SCTP
    fragments needed to reassemble a displayed frame. Issue 12597[6].

  • DICOM dissection in reassembled PDV goes wrong. Issue 13388[7].

  • "Export Objects - IMF" produces incorrect file, TCP reassembly
    fails with retransmissions that have additional data. Issue
    13523[8].

  • The intelligent scroll bar or minimap is not predictable on
    locating and scrolling. Issue 13989[9].

  • If you mark (or unmark) the currently-selected frame, the packet
    details still say it’s not marked (or it is marked) Issue
    14330[10].

  • An out-of-order packet incorrectly detected as retransmission
    breaks desegmentation of TCP stream. Issue 15993[11].

  • Sorting Packet Loss Column is not sorting correct. Issue
    16785[12].

  • Some HTTPS packets cannot be decrypted. Issue 17406[13].

  • SIP TCP decoding regression from Wireshark 1.99.0 to 3.6.8. Issue
    18411[14].

  • Frame comments not preserved when using filter to write new pcap
    from tshark. Issue 18693[15].

  • ChmodBPF not working on macOS Ventura 13.1. Issue 18734[16].

  • Wireshark GUI and window manager stuck after setting display
    filter. Issue 18809[17].

  • Dissector bug, protocol H.261. Issue 18812[18].

  • File extension heuristics are case-sensitive. Issue 18821[19].

  • Symbolic links to packages in macOS dmg can’t be double-clicked
    to install on macOS 13.2. Issue 18830[20].

  • Potential memory leak in tshark.c. Issue 18837[21].

  • Fuzz job crash output: fuzz-2023-02-05-7303.pcap. Issue
    18842[22].

  • f5fileinfo: Hardware platforms missing descriptions. Issue
    18848[23].

  • The lines in the intelligent scrollbar are off by one. Issue
    18850[24].

  • Wireshark crashes on invalid UDS packet in Lua context. Issue
    18865[25].

  • TECMP dissector shows the wrong Voltage in Vendor Data. Issue
    18871[26].

  • UDS: Names of RDTCI subfunctions 0x0b …​ 0x0e are not correct.
    Issue 18873[27].

New and Updated Features

There are no new or updated features in this release.

Removed Features and Support

New Protocol Support

There are no new protocols in this release.

Updated Protocol Support

ASTERIX, BGP, DHCP, ERF, F5 Ethernet trailer, GMR-1 RR, Gryphon, GSM
SMS, H.261, H.450, ISO 10681, ISO 15765, MIPv6, NAS-5gs, NR RRC, NS
Trace, OptoMMP, PDCP-LTE, PDCP-NR, QSIG, ROHC, RSVP, RTCP, SCTP, SIP,
TCP, TECMP, TWAMP, UDS, and UMTS RLC

(adam)