From 183644caab8493322199331e71c559b1c04915fa49168948ca63e0c51f4b4731 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Michal=20Kube=C4=8Dek?= Date: Wed, 2 Jan 2019 07:35:40 +0000 Subject: [PATCH 1/2] Accepting request 662365 from home:seanlew:branches:network:utilities Update tcpreplay OBS-URL: https://build.opensuse.org/request/show/662365 OBS-URL: https://build.opensuse.org/package/show/network:utilities/tcpreplay?expand=0&rev=16 --- tcpreplay-4.2.6.tar.gz | 3 --- tcpreplay-4.2.6.tar.gz.asc | 11 --------- tcpreplay-4.3.1.tar.gz | 3 +++ tcpreplay-4.3.1.tar.gz.asc | 11 +++++++++ tcpreplay.changes | 46 ++++++++++++++++++++++++++++++++++++++ tcpreplay.spec | 8 +++---- 6 files changed, 64 insertions(+), 18 deletions(-) delete mode 100644 tcpreplay-4.2.6.tar.gz delete mode 100644 tcpreplay-4.2.6.tar.gz.asc create mode 100644 tcpreplay-4.3.1.tar.gz create mode 100644 tcpreplay-4.3.1.tar.gz.asc diff --git a/tcpreplay-4.2.6.tar.gz b/tcpreplay-4.2.6.tar.gz deleted file mode 100644 index 54ca3f2..0000000 --- a/tcpreplay-4.2.6.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:043756c532dab93e2be33a517ef46b1341f7239278a1045ae670041dd8a4531d -size 3494827 diff --git a/tcpreplay-4.2.6.tar.gz.asc b/tcpreplay-4.2.6.tar.gz.asc deleted file mode 100644 index 658dae2..0000000 --- a/tcpreplay-4.2.6.tar.gz.asc +++ /dev/null @@ -1,11 +0,0 @@ ------BEGIN PGP SIGNATURE----- -Version: GnuPG v1 - -iQEcBAABAgAGBQJZGxhxAAoJEOniFJeTveF+YEsIAI1WOWtXuMhZsLmV016VyZg8 -DZWQ/wNj92sjyaENyt7Dubxf3pLwDA4SXRkOrtmaJjwukTwh0erqalbVWCdsDo0V -1ZFH4ixHghMQft4O4Y6tb1H2U34b2mc47kX9aFCPX8IFm7Co+dUwCXFCZVqWoam/ -Cl9qpQz7dBrgNWixeG75+1u7XB3Q+LfxyhKUvGkXl8nkB87fW4nhm20+Xnu7Ci9L -R0Wn4hMVBknhD6AR4OqDn5ZhwGTB7XjEn9w6vzjtTqXgSdaOBL9imEbIzIy9hpds -i87CZvyfzNPyZQgF1lwU9oUgTqDHEQ6K9HX9ISSBpoC89J5CrIuhD5qRIevaoGI= -=YQvF ------END PGP SIGNATURE----- diff --git a/tcpreplay-4.3.1.tar.gz b/tcpreplay-4.3.1.tar.gz new file mode 100644 index 0000000..07635cd --- /dev/null +++ b/tcpreplay-4.3.1.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:95ba661011689a4a6c03896ba7fa549470c2c2d4d0e907dd0c4a4580bbe25e34 +size 3725070 diff --git a/tcpreplay-4.3.1.tar.gz.asc b/tcpreplay-4.3.1.tar.gz.asc new file mode 100644 index 0000000..8a4422a --- /dev/null +++ b/tcpreplay-4.3.1.tar.gz.asc @@ -0,0 +1,11 @@ +-----BEGIN PGP SIGNATURE----- + +iQFKBAABCAA0FiEEhOT6IVyTSn2X3HbV6eIUl5O94X4FAlwlIeoWHHRjcHJlcGxh +eUBhcHBuZXRhLmNvbQAKCRDp4hSXk73hfmx2CAChQifx5dtG5VABFGWytHcp3Wi1 +hKY3QvnGGu4SCsnMSHtR6b7aaXyiOeaas+vxPV0YB4/4eWqK1VwkM96GCNGq4AXM +xx8dOsr2hOKax3AWLx2nGcbF0FkoS6ZJ4lQdFP19dEqc/AqIzcpq+ZjixXGRA0uW +eBT5S7Fa2eC7Y++Sns4EyUBBlrnzwfLq/LV7QxMR7COkkDyosimMP90dX3oex11e +M6mIWtIKx3aFd7z8Yn8dIkZgtP2CvLLspHevS4rqymZqgYqSCa3MZaaMmiY/XE2B +5D5+cOU6js1O7sT/VxQBC4s4HCXsxqdFTg0IxFHZCYl29n3zPPuvE80qC4va +=Phln +-----END PGP SIGNATURE----- diff --git a/tcpreplay.changes b/tcpreplay.changes index 391ba02..ed738a7 100644 --- a/tcpreplay.changes +++ b/tcpreplay.changes @@ -1,3 +1,49 @@ +------------------------------------------------------------------- +Mon Dec 31 01:29:38 UTC 2018 - sean@suspend.net + +- Update to version 4.3.1: + * Fix checkspell detected typos (#531) + * Heap overflow packet2tree and get_l2len (#530) + +- Update to version 4.3.0: + + + Fix TCP sequence edit seeding (#514) + + Fix issues identified by Codacy (#493) + + CVE-2018-18408 use-after-free in post_args (#489) + + CVE-2018-18407 heap-buffer-overflow csum_replace4 (#488) + + CVE-2018-17974 heap-buffer-overflow dlt_en10mb_encode (#486) + + CVE-2018-17580 heap-buffer-overflow fast_edit_packet (#485) + + CVE-2018-17582 heap-buffer-overflow in get_next_acket (#484) + + Out-of-tree build (#483) + + CVE-20180-13112 heap-buffer-overflow in get_l2len (#477) + + Closing stdin on pipe (#479) + + Second pcap file hangs on multiplier option (#466) + + TCP sequence edit ACK corruption (#451) + + TCP sequence number edit initial SYN packet should have 0 ACK (#450) + + Travis CI build fails due to new build images (#432) + + Upgrade libopts to 5.18.12 to address version build issues (#430) + + Add ability to chane tcp SEQ/ACK numbers (#425) + + Hang using loop and netmap options (#424) + + tcpprep -S not working for large cache files (#423) + + Unable to tcprewrite range of ports with --portmap (#422) + + --maxsleep broken for values less than 1000 (#421) + + -T flag breaks traffic replay timing (#421) + + Respect 2nd packet timing (#418) + + Avoid non-blocking behaviour when using STDIN (#416) + + pcap containing >1020 packets produces invalid cache file (#415) + + manpage typos (#413) + + Fails to open tap0 on Zephyr (#411) + + Heap-buffer-overflow in get_l2protocol (#410) + + Heap-buffer-overflow in packet2tree (#409) + + Heap-buffer-overflow in getl2len (#408) + + Heap-buffer-overflow in flow_decode (#407) + + Rewrite zero IP total length field to match packet length (#406) + + Stack-buffer-overflow in tcapinfo (#405) + + tcpprep --include option does not exclude (#404) + + Negative-size-param memset in dlt_radiotap_get_80211 (#402) + + tcpreplay --verbose option not working (#398) + + Fix replay when using --with-testnic (#178) + ------------------------------------------------------------------- Mon Sep 11 19:09:33 UTC 2017 - jengelh@inai.de diff --git a/tcpreplay.spec b/tcpreplay.spec index 41a4ac8..0af9242 100644 --- a/tcpreplay.spec +++ b/tcpreplay.spec @@ -1,7 +1,7 @@ # # spec file for package tcpreplay # -# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -12,15 +12,15 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via http://bugs.opensuse.org/ +# Please submit bugfixes or comments via https://bugs.opensuse.org/ # Name: tcpreplay -Version: 4.2.6 +Version: 4.3.1 Release: 0 Summary: Network analysis and testing tools -License: GPL-3.0 +License: GPL-3.0-only Group: Productivity/Networking/Diagnostic Url: http://tcpreplay.appneta.com/ Source0: https://github.com/appneta/tcpreplay/releases/download/v%{version}/%{name}-%{version}.tar.gz From 5b49cc0722592f8536f68d3806fd655c583c1f15a967b288a4d6b25398c59853 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Michal=20Kube=C4=8Dek?= Date: Wed, 2 Jan 2019 07:42:34 +0000 Subject: [PATCH 2/2] - add bugzilla references for security bugs fixed in 4.3.0 OBS-URL: https://build.opensuse.org/package/show/network:utilities/tcpreplay?expand=0&rev=17 --- tcpreplay.changes | 73 +++++++++++++++++++++++------------------------ tcpreplay.spec | 2 +- 2 files changed, 37 insertions(+), 38 deletions(-) diff --git a/tcpreplay.changes b/tcpreplay.changes index ed738a7..867a4f8 100644 --- a/tcpreplay.changes +++ b/tcpreplay.changes @@ -6,43 +6,42 @@ Mon Dec 31 01:29:38 UTC 2018 - sean@suspend.net * Heap overflow packet2tree and get_l2len (#530) - Update to version 4.3.0: - - + Fix TCP sequence edit seeding (#514) - + Fix issues identified by Codacy (#493) - + CVE-2018-18408 use-after-free in post_args (#489) - + CVE-2018-18407 heap-buffer-overflow csum_replace4 (#488) - + CVE-2018-17974 heap-buffer-overflow dlt_en10mb_encode (#486) - + CVE-2018-17580 heap-buffer-overflow fast_edit_packet (#485) - + CVE-2018-17582 heap-buffer-overflow in get_next_acket (#484) - + Out-of-tree build (#483) - + CVE-20180-13112 heap-buffer-overflow in get_l2len (#477) - + Closing stdin on pipe (#479) - + Second pcap file hangs on multiplier option (#466) - + TCP sequence edit ACK corruption (#451) - + TCP sequence number edit initial SYN packet should have 0 ACK (#450) - + Travis CI build fails due to new build images (#432) - + Upgrade libopts to 5.18.12 to address version build issues (#430) - + Add ability to chane tcp SEQ/ACK numbers (#425) - + Hang using loop and netmap options (#424) - + tcpprep -S not working for large cache files (#423) - + Unable to tcprewrite range of ports with --portmap (#422) - + --maxsleep broken for values less than 1000 (#421) - + -T flag breaks traffic replay timing (#421) - + Respect 2nd packet timing (#418) - + Avoid non-blocking behaviour when using STDIN (#416) - + pcap containing >1020 packets produces invalid cache file (#415) - + manpage typos (#413) - + Fails to open tap0 on Zephyr (#411) - + Heap-buffer-overflow in get_l2protocol (#410) - + Heap-buffer-overflow in packet2tree (#409) - + Heap-buffer-overflow in getl2len (#408) - + Heap-buffer-overflow in flow_decode (#407) - + Rewrite zero IP total length field to match packet length (#406) - + Stack-buffer-overflow in tcapinfo (#405) - + tcpprep --include option does not exclude (#404) - + Negative-size-param memset in dlt_radiotap_get_80211 (#402) - + tcpreplay --verbose option not working (#398) - + Fix replay when using --with-testnic (#178) + * Fix TCP sequence edit seeding (#514) + * Fix issues identified by Codacy (#493) + * CVE-2018-18408 use-after-free in post_args (#489 bsc#1112354) + * CVE-2018-18407 heap-buffer-overflow csum_replace4 (#488 bsc#1112355) + * CVE-2018-17974 heap-buffer-overflow dlt_en10mb_encode (#486 bsc#1110786) + * CVE-2018-17580 heap-buffer-overflow fast_edit_packet (#485 bsc#1110333) + * CVE-2018-17582 heap-buffer-overflow in get_next_acket (#484 bsc#1110285) + * Out-of-tree build (#483) + * CVE-20180-13112 heap-buffer-overflow in get_l2len (#477) + * Closing stdin on pipe (#479) + * Second pcap file hangs on multiplier option (#466) + * TCP sequence edit ACK corruption (#451) + * TCP sequence number edit initial SYN packet should have 0 ACK (#450) + * Travis CI build fails due to new build images (#432) + * Upgrade libopts to 5.18.12 to address version build issues (#430) + * Add ability to change tcp SEQ/ACK numbers (#425) + * Hang using loop and netmap options (#424) + * tcpprep -S not working for large cache files (#423) + * Unable to tcprewrite range of ports with --portmap (#422) + * --maxsleep broken for values less than 1000 (#421) + * -T flag breaks traffic replay timing (#421) + * Respect 2nd packet timing (#418) + * Avoid non-blocking behaviour when using STDIN (#416) + * pcap containing >1020 packets produces invalid cache file (#415) + * manpage typos (#413) + * Fails to open tap0 on Zephyr (#411) + * Heap-buffer-overflow in get_l2protocol (#410) + * Heap-buffer-overflow in packet2tree (#409) + * Heap-buffer-overflow in getl2len (#408) + * Heap-buffer-overflow in flow_decode (#407) + * Rewrite zero IP total length field to match packet length (#406) + * Stack-buffer-overflow in tcapinfo (#405) + * tcpprep --include option does not exclude (#404) + * Negative-size-param memset in dlt_radiotap_get_80211 (#402) + * tcpreplay --verbose option not working (#398) + * Fix replay when using --with-testnic (#178) ------------------------------------------------------------------- Mon Sep 11 19:09:33 UTC 2017 - jengelh@inai.de diff --git a/tcpreplay.spec b/tcpreplay.spec index 0af9242..6fd1503 100644 --- a/tcpreplay.spec +++ b/tcpreplay.spec @@ -12,7 +12,7 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# Please submit bugfixes or comments via http://bugs.opensuse.org/ #