wireshark: updated to 4.2.1

Wireshark 4.2.1 Release Notes

What’s New

 Bug Fixes

  The following vulnerabilities have been fixed:

    • wnpa-sec-2024-01[2] GVCP dissector crash. Issue 19496[3].
      CVE-2024-0208[4].

    • wnpa-sec-2024-02[5] IEEE 1609.2 dissector crash. Issue 19501[6].
      CVE-2024-0209[7].

    • wnpa-sec-2024-03[8] HTTP3 dissector crash. Issue 19502[9].
      CVE-2024-0207[10].

    • wnpa-sec-2024-04[11] Zigbee TLV dissector crash. Issue 19504[12].
      CVE-2024-0210[13].

    • wnpa-sec-2024-05[14] DOCSIS dissector crash. Issue 19557[15].
      CVE-2024-0211[16].

  The following bugs have been fixed:

    • Capture filters not saved to recently used list. Issue 12918[17].

    • CFM dissector does not handle Sender ID TLV correctly when
      Chassis ID Length is zero. Issue 13720[18].

    • OSS-Fuzz 64290: wireshark:fuzzshark_ip: Global-buffer-overflow in
      dissect_zcl_read_attr_struct. Issue 19490[19].

    • Overriding capture options set by preference by command line
      arguments (like -S) doesn’t work. Issue 14549[20].

    • Segfault when enabling monitor mode on wireless card that falsely
      claims to support it. Issue 16693[21].

    • Documented format of temporary file name is out of date in the
      Wireshark User’s Guide. Issue 18464[22].

    • Selection highlight lost when interface list is sorted. Issue
      19133[23].

    • HTTP3 malformed packets. Issue 19475[24].

    • Capture filter compilation fails with obscure error message.
      Issue 19480[25].

    • XML: Parsing encoding attribute failed when standalone attribute
      exists. Issue 19485[26].

    • Display filter expressions where the protocol name starts with
      digit and contains a hyphen are rejected. Issue 19489[27].

    • diameter.3GPP-* display filters not working after upgrade to
      version 4.2.0. Issue 19493[28].

    • GigE-vision: Control Protocol shows \"unknown\" as value for
      ASCII character set. Issue 19494[29].

    • The HTTP/3 Request Header URI is not correct. Issue 19497[30].

    • QUIC/TLS not extracting \"h3\" from ALPN in a capture. Issue
      19503[31].

    • Documentation on system requirements should be updated. Issue
      19512[32].

    • 4.2.0: init.lua in subdirectories not loaded anymore. Issue
      19516[33].

    • Malformed SIP/SDP messages: components are not decoded properly.
      Issue 19518[34].

    • heuristic_protos do not reset on profile swap. Issue 19520[35].

    • Wireshark 4.2 crashes on Apply As Column. Issue 19521[36].

    • NFLOG timestamp is incorrect. Issue 19525[37].

    • Qt6 Crash (Double Free) When Attempting to Save TCP Stream Graph.
      Issue 19529[38].

    • Fixed parsing display filter expressions containing literal OID
      values, e.g. `snmp.name == 1.3.6.1.2.1.1.3.0`.


(adam)