diff --git a/patchinfo.20251126115242783292.93181000773252/_patchinfo b/patchinfo.20251126115242783292.93181000773252/_patchinfo new file mode 100644 index 0000000..b55a534 --- /dev/null +++ b/patchinfo.20251126115242783292.93181000773252/_patchinfo @@ -0,0 +1,54 @@ + + cve#2023-43279 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2023-43279 + VUL-0: CVE-2025-9649: tcpreplay: division-by-zero in the `calc_sleep_time` function of file send_packets.c when processing malformed PPS parameters + VUL-0: CVE-2024-22654: tcpreplay: Infinite loop in tcpreplay with malformed ipv6 headers + cve#2025-9649 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2025-9649 + cve#2025-8746 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2025-8746 + VUL-0: CVE-2025-9385: A flaw has been found in appneta tcpreplay up to 4.5.1. The affected element is the function fix_ipv6_checksums of the file edit_packet.c of the component tcprewrite. This manipulation causes use after free. The attack is restri ... + cve#2023-4256 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2023-4256 + VUL-0: CVE-2025-8746: tcpreplay: autogen: improper input validation and memory bounds checking when processing certain malformed configuration files + cve#2025-9385 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2025-9385 + VUL-0: CVE-2024-3024: tcpreplay: heap-based buffer overflow + cve#2025-9157 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2025-9157 + VUL-0: CVE-2023-4256: tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c + cve#2025-9386 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2025-9386 + VUL-0: CVE-2025-9384: A vulnerability was detected in appneta tcpreplay up to 4.5.1. Impacted is the function tcpedit_post_args of the file /src/tcpedit/parse_args.c. The manipulation results in null pointer dereference. The attack is only possible w ... + cve#2025-9384 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2025-9384 + cve#2025-51006 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2025-51006 + VUL-0: CVE-2025-9386: A vulnerability has been found in appneta tcpreplay up to 4.5.1. The impacted element is the function get_l2len_protocol of the file get.c of the component tcprewrite. Such manipulation leads to use after free. The attack must b ... + cve#2024-22654 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2024-22654 + VUL-0: CVE-2023-43279: tcpreplay: null pointer dereference in mask_cidr6 component at cidr.c + VUL-0: CVE-2025-9157: tcpreplay: The impacted element is the function untrunc_packet of the file src/tcpedit/edit_packet.c of the component tcprewrite. + VUL-0: CVE-2025-51006: tcpreplay: double free in tcprewrite via a crafted pcap file + cve#2024-3024 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2024-3024 + mkubecek + important + security + Security update for tcpreplay + This update for tcpreplay fixes the following issues: + +- update to 4.5.2: + * features added since 4.4.4 + - fix/recalculate header checksum for ipv6-frag + - IPv6 frag checksum support + - AF_XDP socket support + - tcpreplay -w (write into a pcap file) + - tcpreplay --fixhdrlen + - --include and --exclude options + - SLL2 support + - Haiku support + * security fixes reported for 4.4.4 fixed in 4.5.2 + - CVE-2023-4256 / bsc#1218249 + - CVE-2023-43279 / bsc#1221324 + - CVE-2024-3024 / bsc#1222131 (likely) + - CVE-2024-22654 / bsc#1243845 + - CVE-2025-9157 / bsc#1248322 + - CVE-2025-9384 / bsc#1248595 + - CVE-2025-9385 / bsc#1248596 + - CVE-2025-9386 / bsc#1248597 + - CVE-2025-9649 / bsc#1248964 + - CVE-2025-51006 / bsc#1250356 + + tcpreplay + + diff --git a/tcpreplay b/tcpreplay index d3bd5f0..195618c 160000 --- a/tcpreplay +++ b/tcpreplay @@ -1 +1 @@ -Subproject commit d3bd5f0505f566358181b8997d8db2a00f458129e04e96a3a96ddee833415a4c +Subproject commit 195618c8aa768078359e8a2374120050c4cb2d40f2c882d3a838d0dc9d04931f