diff --git a/tcpdump-4.99.4.tar.gz b/tcpdump-4.99.4.tar.gz deleted file mode 100644 index 4223abd..0000000 --- a/tcpdump-4.99.4.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:0232231bb2f29d6bf2426e70a08a7e0c63a0d59a9b44863b7f5e2357a6e49fea -size 1903612 diff --git a/tcpdump-4.99.4.tar.gz.sig b/tcpdump-4.99.4.tar.gz.sig deleted file mode 100644 index 20d556c..0000000 Binary files a/tcpdump-4.99.4.tar.gz.sig and /dev/null differ diff --git a/tcpdump-4.99.5.tar.xz b/tcpdump-4.99.5.tar.xz new file mode 100644 index 0000000..574ed10 --- /dev/null +++ b/tcpdump-4.99.5.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:d76395ab82d659d526291b013eee200201380930793531515abfc6e77b4f2ee5 +size 1418476 diff --git a/tcpdump-4.99.5.tar.xz.sig b/tcpdump-4.99.5.tar.xz.sig new file mode 100644 index 0000000..a68c3e4 Binary files /dev/null and b/tcpdump-4.99.5.tar.xz.sig differ diff --git a/tcpdump.changes b/tcpdump.changes index 671571d..9d74f08 100644 --- a/tcpdump.changes +++ b/tcpdump.changes @@ -1,3 +1,64 @@ +------------------------------------------------------------------- +Mon Sep 2 09:29:52 UTC 2024 - Pedro Monreal + +- Update to 4.99.5: + * Refine protocol decoding for: + - BGP: Fix an undefined behavior when it tries to parse a too-short packet. + - CARP: Print the protocol name before any GET_(). + - CDP: only hex-dump unknown TLVs in verbose mode. + - DHCP: parse the SZTP redirect tag. + - DHCPv6: client-id/server-id DUID type 2 correction; parse the user class, + boot file URL, and SZTP redirect options; add DUID-UUID printing (RFC6355). + - DNS: Detect and correctly handle too-short URI RRs. + - EAP: Assign ndo_protocol in the eap_print() function. + - Frame Relay (Multilink): Fix the Timestamp Information Element printing. + - ICMPv6: Fix printing the Home Agent Address Discovery Reply Message. + - IEEE 802.11: no need for an element ID in the structures for IEs, make + the length in the IE structures a u_int, include the "TA" field while + printing Block Ack Control frame. + - IP: Enable TSO (TCP Segmentation Offload) support; fix printing invalid + cases as invalid, not truncated; use ND_ICHECKMSG_ZU() to test the + header length. + - IPv6: Fix printing invalid cases as invalid, not truncated; use + ND_ICHECKMSG_U() to print an invalid version. + - IPv6: Fix invalid 32-bit versus 64-bit printouts of fragment headers. + - ISAKMP: Fix printing Delete payload SPI when size is zero. + - Kerberos: Print the protocol name, remove a redundant bounds check. + - lwres: Fix an undefined behavior in pointer arithmetic. + - OpenFlow 1.0: Fix indentation of PORT_MOD, improve handling of + some lengths, and fix handling of snapend. + - TCP: Test ports < 1024 in port order to select the printer. + - UDP: Move source port equal BCM_LI_PORT to bottom of long if else chain. + - UDP: Test ports < 1024 in port order to select the printer. + - LDP: Add missing fields of the Common Session Parameters TLV and fix the + offset for the A&D bits. + - NFLOG: Use correct AF code points on all OSes. + - OSPF: Pad TLVs in LS_OPAQUE_TYPE_RI to multiples of 4 bytes. + - OSPF: Update LS-Ack printing not to run off the end of the packet. + - OSPF6: Fix an undefined behavior. + - PPP: Check if there is some data to hexdump. + - PPP: Remove an extra colon before LCP Callback Operation. + - Use the buffer stack for de-escaping PPP; fixes CVE-2024-2397; + Note: This problem does not affect any tcpdump release. + - PTP: Fix spelling of type SIGNALING, Parse major and minor version + correctly, Print majorSdoId field instead of just the first bit. + - RPKI-Router: Refine length and bounds checks. + - RX, SNMP, ZEP, smbutil.c: Use the "%Y-%m-%d" date format. + * User interface: + - Print the supported time stamp types (-J) to stdout instead of stderr. + - Print the list of data link types (-L) to stdout instead of stderr. + - Update --version option to print 32/64-bit build and time_t size. + - Support "3des" as an alias for "des_ede3_cbc" even if the crypto + library doesn't support adding aliases. + * Source code: + - tcpdump: Fix a memory leak. + - child_cleanup: reap as many child processes as possible. + - Ignore failures when setting the default "any" device DLL to LINUX_SLL2. + - Fix for backends which doesn't support capsicum. + - Introduce new ND_ICHECK*() macros to deduplicate more code. + - Skip privilege dropping when using -Z root on --with-user builds. + - Free interface list just before exiting where it wasn't being freed. + ------------------------------------------------------------------- Mon Feb 19 13:13:20 UTC 2024 - Frederic Crozat diff --git a/tcpdump.spec b/tcpdump.spec index 22f477b..5dee740 100644 --- a/tcpdump.spec +++ b/tcpdump.spec @@ -18,14 +18,14 @@ %define min_libpcap_version 1.10.0 Name: tcpdump -Version: 4.99.4 +Version: 4.99.5 Release: 0 Summary: A Packet Sniffer License: BSD-3-Clause URL: https://www.tcpdump.org/ -Source: https://www.tcpdump.org/release/%{name}-%{version}.tar.gz +Source: https://www.tcpdump.org/release/%{name}-%{version}.tar.xz Source1: tcpdump-qeth -Source2: https://www.tcpdump.org/release/%{name}-%{version}.tar.gz.sig +Source2: https://www.tcpdump.org/release/%{name}-%{version}.tar.xz.sig Source3: https://www.tcpdump.org/release/signing-key-RSA-E089DEF1D9C15D0D.asc#/%{name}.keyring BuildRequires: libpcap-devel >= %{min_libpcap_version} BuildRequires: libsmi-devel