Accepting request 1317016 from network:utilities

- update to version 4.5.2
- drop build workarounds for SLE11

OBS-URL: https://build.opensuse.org/request/show/1317016
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tcpreplay?expand=0&rev=16

tcpreplay-4.4.4.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:3ff9753cc43bb15e77832cee657e3030dbcdd957fa247e6abacc605689e24051
-size 748344

tcpreplay-4.4.4.tar.xz.asc

@@ -1,11 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQFKBAABCgA0FiEEhOT6IVyTSn2X3HbV6eIUl5O94X4FAmSGDcIWHHRjcHJlcGxh
-eUBhcHBuZXRhLmNvbQAKCRDp4hSXk73hfkScB/kBMmRAe/4PSAzX6olgFxcG2A2q
-zqVi3UZrpdHROZ80Bar9ZFOYTSovJihW8VuH4+TyF/wUJjC0Lj/6tcULeRTL2eU6
-Qpkez+EpdSi/pa+p+gkix8YdMEqhI5Vydejf5wuA1GGwnnBwxAHKl9ctUeKRId4M
-3XtYA3P9kuu/cohSmj9G5eu8RT2gxVpihOPrWQQAKhzLOSH9fy8ypnKbaXNbyEdE
-zc0l2RKdFRn1FKMdCnYDZzTH93XSKdI6mIGijd4/KWdVk19RW8nwG9k3uHWzCjsg
-exsXHTa8JyOInug8w8uFAm2A5V0sRGLJ5zS2rn9a68EBcBotIQ/tygsbJyTz
-=MGgL
------END PGP SIGNATURE-----

tcpreplay-4.5.2.tar.xz.asc

@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQFKBAABCgA0FiEEhOT6IVyTSn2X3HbV6eIUl5O94X4FAmiucVgWHHRjcHJlcGxh
+eUBhcHBuZXRhLmNvbQAKCRDp4hSXk73hfmrCB/44WWbB9m0lG/QvVqGcfxG5f/kW
+RsLrEyKwpesQXHQHOgQFJWUxhkx9BEWwxGpWRlw0yJtSZ3+MueGncxPgWJ4zw+TP
+Pr+gByphN3Nz3ul+WFFg03AX8Mvx5uPpTgdCVZIOuAvE68a0QfGjAedFCrLVhoj8
+AZ3KtWkbkD+JT1M2kwq1/jF5FCa6PFidUQRhC6HsuxcnuRaa1mRQSDsMjNxeJPVS
+oU0tDSjdLQeNgCXEZqn13txdl+cO54KEnZ0ekuKCPQrIbblHE3VKhZcM9FIHYg4b
+LKcO70sDcv9A2uOCBosY6RN7QPF97QngtwfU9qweFtSyMFUDj3H7Dxgsf5FJ
+=tn7q
+-----END PGP SIGNATURE-----

tcpreplay-CVE-2025-8746.patch

@@ -0,0 +1,14 @@
+Index: tcpreplay-4.5.1/libopts/save.c
+===================================================================
+--- tcpreplay-4.5.1.orig/libopts/save.c
++++ tcpreplay-4.5.1/libopts/save.c
+@@ -495,6 +495,9 @@ remove_settings(tOptions * opts, char co
+     char *       text = text_mmap(fname, PROT_READ|PROT_WRITE, MAP_PRIVATE, &map_info);
+     char *       scan = text;
+ 
++    if (TEXT_MMAP_FAILED_ADDR(text))
++      goto leave;
++
+     for (;;) {
+         char * next = scan = strstr(scan, zCfgProg);
+         if (scan == NULL)

tcpreplay.changes

@@ -1,3 +1,42 @@
+-------------------------------------------------------------------
+Thu Nov  6 07:06:09 UTC 2025 - Michal Kubecek <mkubecek@suse.cz>
+
+- update to version 4.5.2:
+  - bugfix release
+  - see https://github.com/appneta/tcpreplay/compare/v4.5.1...v4.5.2
+    for full list of changes since v4.5.1
+  - includes fixes for
+    - CVE-2025-9157 / bsc#1248322
+    - CVE-2025-51006 / bsc#1250356
+- drop build workarounds for SLE11; since %autosetup and %license
+  were introduced into the specfile recently, the package would not
+  build on SLE11 or older anyway
+
+-------------------------------------------------------------------
+Tue Aug 19 10:55:23 UTC 2025 - pgajdos@suse.com
+
+- security update
+- added patches
+  CVE-2025-8746 [bsc#1247917], improper input validation and memory bounds checking when processing certain malformed configuration files
+  + tcpreplay-CVE-2025-8746.patch
+
+-------------------------------------------------------------------
+Mon Aug 18 12:27:11 UTC 2025 - pgajdos@suse.com
+
+- build with gcc15
+
+-------------------------------------------------------------------
+Tue Dec 10 14:26:51 UTC 2024 - Martin Pluskal <mpluskal@suse.com>
+
+- Update to version 4.5.1:
+  * AF_XDP socket support - if you have a newer Linux kernel, you will be able to transmit at line rates without having to install 3rd party kernel modules (e.g. netmap, PF_RING)
+  * -w tcpreplay option - this overrides the -i option, and allows you to write to a PCAP file rather than an interface
+  * --include and --exclude tcpreplay options - allows replay of a list of specific packet numbers to replay. This may slow things down, so consider using in combination with -w.
+  * --fixhdrlen tcpreplay option - added to control action on packet length changes
+  * -W tcpreplay option - suppress warnings when replaying
+  * SLL2( Linux "cooked" capture encapsulation v2)
+  * Haiku support
+
 -------------------------------------------------------------------
 Tue Jul 11 16:31:05 UTC 2023 - Martin Hauke <mardnh@gmx.de>
 

tcpreplay.spec

@@ -1,7 +1,8 @@
 #
 # spec file for package tcpreplay
 #
-# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2025 SUSE LLC
+# Copyright (c) 2025 SUSE LLC and contributors
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +18,7 @@
 
 
 Name:           tcpreplay
-Version:        4.4.4
+Version:        4.5.2
 Release:        0
 Summary:        Network analysis and testing tools
 License:        GPL-3.0-only
@@ -26,17 +27,14 @@ URL:            https://tcpreplay.appneta.com/
 Source0:        https://github.com/appneta/tcpreplay/releases/download/v%{version}/%{name}-%{version}.tar.xz
 Source1:        https://github.com/appneta/tcpreplay/releases/download/v%{version}/%{name}-%{version}.tar.xz.asc
 Source2:        %{name}.keyring
+# CVE-2025-8746 [bsc#1247917], improper input validation and memory bounds checking when processing certain malformed configuration files
+Patch0:         tcpreplay-CVE-2025-8746.patch
 BuildRequires:  dbus-1-devel
 BuildRequires:  libdnet-devel
 BuildRequires:  libpcap-devel
 BuildRequires:  tcpdump
 Requires:       tcpdump
-%if 0%{?suse_version} >= 1130
 BuildRequires:  libnl3-devel
-%else
-# only needed for suse_version < 1130 (i.e. SLE11)
-BuildRequires:  xz
-%endif
 
 %description
 Tcpreplay is a suite of utilities for editing and replaying
@@ -46,9 +44,10 @@ Systems, and is meanwhile capable of replaying to web servers. It
 supports switches, routers and IP Flow/NetFlow appliances.
 
 %prep
-%setup -q
+%autosetup -p1
 
 %build
+export CFLAGS="%{optflags} -std=gnu11"
 %configure \
   --enable-dynamic-link
 %make_build