wireshark (4.6.6-1) unstable; urgency=medium

  * New upstream release
  - security fixes:
    * ROHC protocol dissector crash

 -- Balint Reczey <balint@balintreczey.hu>  Wed, 20 May 2026 18:44:25 +0200

wireshark (4.6.5-1) unstable; urgency=medium

  * New upstream release
  - security fixes (Closes: #1135323):
    * Monero dissector crash (CVE-2026-5409)
    * BT-DHT dissector crash (CVE-2026-5408)
    * FC-SWILS dissector crash (CVE-2026-5406)
    * SMB2 dissector infinite loop (CVE-2026-5407)
    * ICMPv6 dissector crash (CVE-2026-5299)
    * AFP dissector crash (CVE-2026-5401)
    * TLS dissector crash and possible code execution (CVE-2026-5402)
    * K12 RF5 file parser crash (CVE-2026-5404)
    * SBC codec crash and possible code execution (CVE-2026-5403)
    * RDP dissector crash and possible code execution (CVE-2026-5405)
    * AMR-NB codec crash (CVE-2026-5654)
    * SDP dissector crash (CVE-2026-5655)
    * iLBC audio codec crash (CVE-2026-5657)
    * Profile import crash and possible code execution (CVE-2026-5656)
    * DCP-ETSI protocol dissector crash (CVE-2026-5653)
    * BEEP protocol dissector crash (CVE-2026-6538)
    * ZigBee protocol dissector crash (CVE-2026-6537)
    * DLMS/COSEM protocol dissector infinite loop (CVE-2026-6536)
    * Dissection engine zlib decompression crash (CVE-2026-6535)
    * USB HID protocol dissector infinite loop (CVE-2026-6534)
    * Dissection engine LZ77 decompression crash (CVE-2026-6533)
    * Kismet protocol dissector crash (CVE-2026-6532)
    * SANE protocol dissector infinite loop (CVE-2026-6531)
    * DCP-ETSI protocol dissector crash (CVE-2026-6530)
    * iLBC audio codec crash (CVE-2026-6529)
    * TLS dissector infinite loop (CVE-2026-6528)
    * ASN.1 PER protocol dissector crash (CVE-2026-6527)
    * RTSP protocol dissector crash (CVE-2026-6526)
    * IEEE 802.11 protocol dissector crash (CVE-2026-6525)
    * MySQL protocol dissector crash (CVE-2026-6524)
    * GNW protocol dissector infinite loop (CVE-2026-6523)
    * OpenFlow v5 protocol dissector infinite loops (CVE-2026-6521)
    * OpenFlow v6 protocol dissector infinite loop (CVE-2026-6520)
    * MBIM dissector infinite loop (CVE-2026-6519)
    * RPKI-Router protocol dissector infinite loop (CVE-2026-6522)
    * GSM RP protocol dissector crash (CVE-2026-6870)
    * WebSocket protocol dissector crash (CVE-2026-6869)
    * SMB2 protocol dissector crash
    * HTTP protocol dissector crash (CVE-2026-6868)
    * Sharkd utility memory leak
    * Sharkd utility crash
    * Sharkd utility crash
    * UDS protocol dissector infinite loop
  * Update symbols

 -- Balint Reczey <balint@balintreczey.hu>  Sat, 02 May 2026 11:19:48 +0200

wireshark (4.6.4-1) unstable; urgency=medium

  * New upstream release
  - security fixes:
    * USB HID dissector memory exhaustion (CVE-2026-3201)
    * NTS-KE dissector crash (CVE-2026-3202)
    * RF4CE Profile dissector crash (CVE-2026-3203)
  * stratoshark: Don't recommend libqt6multimedia6.
    Wireshark needs it for the RTP player which is not present in Stratoshark.
  * debian/rules: Sync Stratoshark's versioning with upstream
  * wireshark-common: Ship the sshdig manpage

 -- Balint Reczey <balint@balintreczey.hu>  Sat, 28 Feb 2026 10:18:35 +0100

wireshark (4.6.3-1) unstable; urgency=medium

  [ Jonathan Bustillos ]
  * Update Spanish translation of the debconf template (Closes: #1092296)

  [ Jenny ]
  * Update Italian debconf template translation (Closes: #1108500)

  [ Balint Reczey ]
  * Move maintenance under the Debian Security Tools Team
  * stratoshark: Append .0.unofficial to upstream version, because
    upstream did not bump it
  * New upstream release
    - security fixes (Closes: #1125690):
      * BLF file parser crash (CVE-2026-0961)
      * IEEE 802.11 dissector crash (CVE-2026-0959)
      * SOME/IP-SD dissector crash (CVE-2026-0962)
      * HTTP3 dissector infinite loop (CVE-2026-0960)
  * Drop ABI fixing patch integrated upstream
  * Stop overriding obsolete library-not-linked-against-libc Lintian error

 -- Balint Reczey <balint@balintreczey.hu>  Thu, 15 Jan 2026 20:48:43 +0100

wireshark (4.6.2-3) unstable; urgency=medium

  [ Balint Reczey ]
  * Bump version because upstream did not bump stratoshark's version again
  * stratoshark: Suggest falcosecurity-scap-dkms
    falcosecurity-scap-dkms provides /dev/scap0 for capturing local system
    calls. (Closes: #1118073)

  [ Gunnar Wolf ]
  * Ship man page of stratoshark (Closes: #1118071)

 -- Balint Reczey <balint@balintreczey.hu>  Fri, 05 Dec 2025 19:56:57 +0100

wireshark (4.6.2-1) unstable; urgency=medium

  * New upstream release
    - security fixes:
      * HTTP3 dissector crash
      * MEGACO dissector infinite loop
    - This release fixes an API/ABI change that was introduced in
      Wireshark 4.6.1, which caused a compatibility issue with plugins built
      for Wireshark 4.6.0
  * Cherry-pick upstream commit to revert ABI breakage
    ws_base32_decode() is turned to a stub always returning error (-1).

 -- Balint Reczey <balint@balintreczey.hu>  Thu, 04 Dec 2025 09:38:01 +0100

wireshark (4.6.1-2) unstable; urgency=medium

  * Bump Debian version to solve the problem of generating an already used
    version for the stratoshark package because the upstream version did
    not change (Closes: #1121150)

 -- Balint Reczey <balint@balintreczey.hu>  Sat, 22 Nov 2025 13:16:26 +0100

wireshark (4.6.1-1) unstable; urgency=medium

  * New upstream release
    - security fixes:
      * BPv7 dissector crash
      * The Kafka dissector could crash.

 -- Balint Reczey <balint@balintreczey.hu>  Thu, 20 Nov 2025 13:27:42 +0100

wireshark (4.6.0-1) unstable; urgency=medium

  * Upload to unstable

 -- Balint Reczey <balint@balintreczey.hu>  Sun, 12 Oct 2025 18:34:33 +0200

wireshark (4.6.0-0exp1) experimental; urgency=medium

  * New upstream release (Closes: #1117852)
    - security fixes:
      * MONGO dissector infinite loop (CVE-2025-11626)
  * Drop patches integrated upstream
  * Update symbols files

 -- Balint Reczey <balint@balintreczey.hu>  Thu, 09 Oct 2025 16:33:36 +0200

wireshark (4.6.0~rc1-0exp2) experimental; urgency=medium

  * Fix FTBFS on i386 by cherry-picking upstream patch
  * Cherry-pick upstream patch to fix building external C plugins
  * Install extcap binaries under /usr/libexec
  * Ship stratoshark and strato, the console version.
    Based on upstream's packaging changes

 -- Balint Reczey <balint@balintreczey.hu>  Thu, 25 Sep 2025 15:22:51 +0200

wireshark (4.6.0~rc1-0exp1) experimental; urgency=medium

  * New upstream release candidate
  * Bump SO versions
  * Update symbols files
  * wireshark-dev: Stop shipping README.plugins.
    It is now part of the Developer Guide.
  * debian/control: Sort build dependencies

 -- Balint Reczey <balint@balintreczey.hu>  Thu, 18 Sep 2025 20:58:25 +0200

wireshark (4.4.9-1) unstable; urgency=medium

  * New upstream version
  * Drop snacc -> esnacc patch integrated upstream
  * Update symbols

 -- Balint Reczey <balint@balintreczey.hu>  Sat, 30 Aug 2025 22:30:02 +0200

wireshark (4.4.8-0exp1) experimental; urgency=medium

  * New upstream version
  * Target experimental due to the freeze

 -- Balint Reczey <balint@balintreczey.hu>  Thu, 17 Jul 2025 18:41:37 +0200

wireshark (4.4.7-1) unstable; urgency=medium

  * Upload to unstable (Closes: #1107515)

 -- Balint Reczey <balint@balintreczey.hu>  Tue, 10 Jun 2025 16:45:06 +0200

wireshark (4.4.7-0exp1) experimental; urgency=medium

  * New upstream version
    - security fixes:
      * Dissection engine crash (CVE-2025-5601)
  * Target experimental due to the freeze

 -- Balint Reczey <balint@balintreczey.hu>  Thu, 05 Jun 2025 12:47:45 +0200

wireshark (4.4.6-2) unstable; urgency=medium

  * debian/control.in: Make libwireshark-dev depend on libgio-2.0-dev
    (Closes: #1082040)
  * debian/control: Fix indentation of qt6-qpa-plugins dependency

 -- Balint Reczey <balint@balintreczey.hu>  Thu, 17 Apr 2025 22:48:31 +0200

wireshark (4.4.6-1) unstable; urgency=medium

  [ Pedro Ribeiro ]
  * Update Portuguese debconf translation (Closes: #1100069)

  [ Balint Reczey ]
  * libwireshark-dev: Depend on libgio-2.0-dev (Closes: #1082040)
  * Always build-depend on libssh-dev, even in backports (Closes: #1102441)
  * New upstream version
  * Update symbols

 -- Balint Reczey <balint@balintreczey.hu>  Thu, 17 Apr 2025 09:49:50 +0200

wireshark (4.4.5-1) unstable; urgency=medium

  * New upstream version
  * Update symbols

 -- Balint Reczey <balint@balintreczey.hu>  Tue, 25 Feb 2025 19:50:16 +0100

wireshark (4.4.4-1) unstable; urgency=medium

  [ Carles Pina i Estany ]
  * Added po-debconf Catalan translation

  [ Balint Reczey ]
  * Ship Appstream metadata in wireshark instead of libwireshark-data.
    This couples the metadata with the desktop file that makes sense
    and also makes the AppStream generator happy. (Closes: #1094397)
  * New upstream version:
    - security fixes:
      - Bundle Protocol and CBOR dissector crash (CVE-2025-1492)

 -- Balint Reczey <balint@balintreczey.hu>  Thu, 20 Feb 2025 13:08:13 +0100

wireshark (4.4.3-1) unstable; urgency=medium

  * debian/rules: Make wireshark depend on qt6-qpa-plugins, too.
    Those plugins were part of qt5-base and the VNC plugin is needed to run
    Wireshark in VNC.
  * New upstream version

 -- Balint Reczey <balint@balintreczey.hu>  Thu, 09 Jan 2025 12:33:19 +0100

wireshark (4.4.2-1) unstable; urgency=medium

  * Use esnacc instead of snacc in asn2deb (Closes: #1085567)
  * New upstream version:
    - security fixes:
      - FiveCo RAP dissector infinite loop
      - ECMP dissector crash
  * Update symbols files

 -- Balint Reczey <balint@balintreczey.hu>  Thu, 21 Nov 2024 15:43:30 +0100

wireshark (4.4.1-1) unstable; urgency=medium

  [ Balint Reczey ]
  * New upstream version:
    - security fixes:
      - AppleTalk and RELOAD Framing dissector crashes (CVE-2024-9781)
      - ITS dissector crash (CVE-2024-9780)
  * Drop mismatched and obsolete Lintian override for ipaddr.so
  * Drop obsolete unused Lintian overrides left from the t64 transition

  [ Andika Triwidada ]
  * Indonesian debconf translation update (Closes: #1084491)

 -- Balint Reczey <balint@balintreczey.hu>  Thu, 10 Oct 2024 15:35:16 +0200

wireshark (4.4.0-1) unstable; urgency=medium

  * Upload to unstable (Closes :#1080298)

 -- Balint Reczey <balint@balintreczey.hu>  Fri, 06 Sep 2024 10:59:54 +0200

wireshark (4.4.0-0exp2) experimental; urgency=medium

  * Cherry-pick upstream commit to fix prefix in wireshark.pc

 -- Balint Reczey <balint@balintreczey.hu>  Thu, 05 Sep 2024 00:06:58 +0200

wireshark (4.4.0-0exp1) experimental; urgency=medium

  * debian/rules: Ignore test results only on big endian architectures.
    Wireshark's Lua integration is fixed upstream to work correctly on ARM,
    thus tests are passing there.
    A few crypto related tests are still failing on big endian architectures.
    (Closes: #1076536)
  * New major upstream release
  * Update symbols files
  * debian/rules: Use Lua 5.4 and fall back to building with Lua 5.3 when 5.4
    is not available
  * debian/rules: Fix fixing links in documentation
  * Ignore Lintian warning library-not-linked-against-libc for ipaddr.so plugin
  * debian/rules: Run tests with LC_ALL=C.UTF-8.
    This lets tests pass with some interesting locales.

 -- Balint Reczey <balint@balintreczey.hu>  Sat, 31 Aug 2024 13:19:16 +0200

wireshark (4.2.6-1) unstable; urgency=medium

  * Build depend on libssh-dev instead of libssh-gcrypt-dev on latest
    distribution releases. This is made possible by OpenSSL switching
    its license to Apache 2.0.
    (Closes: #1074268)
  * New upstream version:
    - security fixes:
      - The SPRT dissector could crash

 -- Balint Reczey <balint@balintreczey.hu>  Thu, 11 Jul 2024 23:26:26 +0200

wireshark (4.2.5-2) sid; urgency=medium

  * debian/rules: Keep the t64 transition when targeting sid or oracular
    (Closes: #1072821)

 -- Balint Reczey <balint@balintreczey.hu>  Sun, 09 Jun 2024 11:49:52 +0200

wireshark (4.2.5-1) unstable; urgency=medium

  * New upstream version:
    - security fixes:
      - MONGO and ZigBee TLV dissector infinite loops (CVE-2024-4854)
      - The editcap command line utility could crash when chopping bytes
        from the beginning of a packet. (CVE-2024-4853)
      - The editcap command line utility could crash when injecting secrets
        while writing multiple files (CVE-2024-4855)
  * debian/patches: Drop cherry picked patch already integrated upstream
  * Update symbols files

 -- Balint Reczey <balint@balintreczey.hu>  Thu, 16 May 2024 21:07:29 +0200

wireshark (4.2.4-1) unstable; urgency=medium

  [ Martin Bagge ]
  * Update Swedish debconf translation (Closes: #1060670)

  [ Balint Reczey ]
  * debian/control: Drop comment about libgnutls28-dev's version's GPL
    compatibility. All supported releases already have the GPL2+ compatible
    libgnutls28-dev version.
  * Generate debian/control from control.in based on the target release
  * ACK NMU
  * Drop t64-related changes for backports
  * debian/watch: Update handling GitLab's page to make uscan work again
  * New upstream version 4.2.4:
    - security fixes (Closes: #1068111):
      - T.38 dissector crash (CVE-2024-2955)
  * Update symbols for libwireshark18
  * libwireshark-dev: Ship missing dfilter-loc.h.
    Also check if dfilter.h is usable, too, in debian/headers-check.c.
    (Closes: #1068410)
  * Cherry-pick upstream patch to fix Lua 5.2 integration on 32 bit systems

 -- Balint Reczey <balint@balintreczey.hu>  Fri, 26 Apr 2024 11:30:27 +0200

wireshark (4.2.2-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Rename libraries for 64-bit time_t transition.  Closes: #1063071

 -- Steve Langasek <vorlon@debian.org>  Thu, 29 Feb 2024 02:04:43 +0000

wireshark (4.2.2-1) unstable; urgency=medium

  * New upstream version 4.2.1:
    - security fixes (Closes: #1059925):
      - GVCP dissector crash (CVE-2024-0208)
      - IEEE 1609.2 dissector crash (CVE-2024-0209)
      - HTTP3 dissector crash (CVE-2024-0207)
      - Zigbee TLV dissector crash (CVE-2024-0210)
      - DOCSIS dissector crash (CVE-2024-0211)
  * debian/control: Replace all Qt5 dependencies with Qt6 equivalents
    (Closes: #1056642)
  * debian/control: Use versioned Conflicts+Replaces to migrate wireshark-qt
    files to wireshark (Closes: #1056985)
  * Suggest installing the missing packages on ipmap.html
    when the JavaScript files are missing.
    Thanks to Uli Heilmeier for the improved patch.
  * debian/control: Skip pytest build dependencies in the nocheck profile
  * debian/copyright: Don't exclude debian/
    Upstream moved the dir to packaging/debian thus there can't be any
    file collision between upsteam's and Debian's packaing
  * New upstream version 4.2.2

 -- Balint Reczey <balint@balintreczey.hu>  Fri, 05 Jan 2024 23:25:07 +0100

wireshark (4.2.0-1) unstable; urgency=medium

  * Merge wireshark-qt to the wireshark package

 -- Balint Reczey <balint@balintreczey.hu>  Thu, 23 Nov 2023 18:33:15 +0100

wireshark (4.2.0-1~exp0) experimental; urgency=medium

  * Ship /usr/include/wireshark/config.h in wireshark-dev.
    This fixes building external plugins generated by make-plugin-reg.py.
    (LP: #2033979)
  * debian/libwireshark-data.install: Ship files moved to
    usr/share/doc/wireshark in upstream's 4.2.0 release.
  * Build and ship falcodump
  * Switch to shippin
  * debian/control: Make wireshark-dev depend on ${shlibs:Depends}
    because the shipped idl2wrs became an ELF binary with potential
    shared library dependencies.
  * debian/control: Build depend on libopencore-amrnb-dev, libopus-dev and
    libxkbcommon-dev
  * debian/control: Extend description of libwsutil to keep Lintian happy
  * debian/*.symbols: Add Build-Depends-Package tag
  * New major upstream release
  * debian/copyright: Cover copyright of metainfo.xml files

 -- Balint Reczey <balint@balintreczey.hu>  Fri, 17 Nov 2023 23:47:27 +0100

wireshark (4.2.0~rc3-1~exp1) experimental; urgency=medium

  * Relax embedded-library Lintian override to please FTP Master

 -- Balint Reczey <balint@balintreczey.hu>  Sat, 04 Nov 2023 20:00:35 +0100

wireshark (4.2.0~rc3-1~exp0) experimental; urgency=medium

  [ Atila KOÇ ]
  * Turkish debconf translation update (Closes: #1032116)

  [ Balint Reczey ]
  * New major upstream release candidate
  * Update SO versions
  * debian/*.symbols: Update symbols
  * debian/control: Build-depend on libnghttp3-dev
  * debian/control: Build-depend on Qt6 development packages
  * debian/control: Build-depend on python3-pytest and python3-pytest-xdist
  * debian/rules: Install headers using upstream's install-headers target
  * debian/wireshark-dev.install: Update path of cmake files
  * debian/wireshark-common.manpages: Don't ship dftest.1.
    Upstream does not ship this file anymore.
  * debian/copyright: Update license of ws_strptime.c
  * Don't ship /etc/init.lua. Also remove the conffile from the system and
    add a NEWS entry about the change.
  * Update lintian overrides

 -- Balint Reczey <balint@balintreczey.hu>  Thu, 02 Nov 2023 07:27:47 +0100

wireshark (4.0.11-1) unstable; urgency=medium

  * New upstream version
    - security fixes:
      - SSH dissector crash
      - NetScreen file parser crash

 -- Balint Reczey <balint@balintreczey.hu>  Fri, 17 Nov 2023 08:40:50 +0100

wireshark (4.0.10-1) unstable; urgency=medium

  * New upstream version
    - security fixes:
      - RTPS dissector memory leak (CVE-2023-5371)

 -- Balint Reczey <balint@balintreczey.hu>  Thu, 05 Oct 2023 15:51:56 +0200

wireshark (4.0.8-1) unstable; urgency=medium

  * New upstream version
    - security fixes:
      - CBOR dissector crash (CVE-2023-4512)
      - BT SDP dissector infinite loop (CVE-2023-4511)
      - BT SDP dissector memory leak (CVE-2023-4513)
      - CP2179 dissector crash

 -- Balint Reczey <balint@balintreczey.hu>  Thu, 24 Aug 2023 15:44:26 +0200

wireshark (4.0.7-1) unstable; urgency=medium

  * New upstream version
    - security fixes:
      - Kafka dissector crash (CVE-2023-3648)
      - iSCSI dissector crash (CVE-2023-3649)
  * Drop wireshark-gtk transitional package (Closes: #1038267)
  * Ignore test failure on hppa, like on many other exotic architectures
    (Closes: #1025875)

 -- Balint Reczey <balint@balintreczey.hu>  Fri, 14 Jul 2023 23:03:18 +0200

wireshark (4.0.6-1) unstable; urgency=medium

  * Upload to unstable

 -- Balint Reczey <balint@balintreczey.hu>  Wed, 14 Jun 2023 12:39:46 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libwsutil17`.
