Accepting request 1206311 from security

OBS-URL: https://build.opensuse.org/request/show/1206311
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/scapy?expand=0&rev=5

scapy-2.5.0.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:97c3f6c9258eeaa609e3ccab62531670b425713dd17c0415f512201c2b8cc82e
-size 6082895

scapy-2.6.0.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:cfd1babc5c0008bc021eede72149922c24dfc4a511ced7cc3a8665193b6be5c5
+size 7039399

scapy.changes

@@ -1,3 +1,52 @@
+-------------------------------------------------------------------
+Mon Oct  7 14:01:07 UTC 2024 - Robert Frohl <rfrohl@suse.com>
+
+- Fix load of embedded manufdb, by explicitly targeting non-executable-scripts
+- Fix /etc paths to point to /usr/etc in published rpm.
+- Enable unit tests to find issues earlier.
+
+-------------------------------------------------------------------
+Wed Oct  2 14:11:00 UTC 2024 - Bernhard Wiedemann <bwiedemann@suse.com>
+
+- Move sed call to fix reproducible builds (boo#1231253)
+
+-------------------------------------------------------------------
+Mon Sep 30 12:31:33 UTC 2024 - Robert Frohl <rfrohl@suse.com>
+
+- Update to 2.6.0
+  * support for RFC6874-like scope identifiers. This is very useful for 
+    multicast IPs as one can now do the following on L3: 
+    sr(IP(dst="224.0.0.1%eth0")/..., multi=True)
+  * using the iface= argument is deprecated on level3 functions (send, sr, sr1),
+    as its behavior was undefined. It remains in use for level2 
+    functions (sendp, srp, srp1). RFC6874-like scope identifiers should be used.
+  * the internals that read the routes and interfaces configuration have been
+    rewritten on Linux and BSD:
+    - on linux, to use RTNETLINK. (this should help on machines that have huge BPG tables)
+    - on *BSDs, to use PF_ROUTE.
+    - on Linux, NetBSD and FreeBSD, link-local and multicast routes should now properly be loaded
+  * new Windows protocols:
+    - DCE/RPC: DCERPC_Client and DCERPC_Server with support for NCACN_IP_TCP and NCACN_NP
+    - SMB2/3:
+      * Protocol refactor, many more SMB2/3 structures supported
+      * Server (class + 'simple' util smbserver()) (2.0.2 to 3.1.1)
+      * Client (class + interactive CLI smbclient()) (2.0.2 to 3.1.1)
+      * SMB socket, RPC over SMB socket, etc.
+    - Kerberos:
+      * KerberosSSP to use in SMB/RPC clients/servers, [MS-KILE] variants, SFU and more
+      * Crypto: use cryptography, latest RFC8009, GSS_WrapEx support, typing, etc.
+      * Util functions krb_as_req, krb_tgt_req, kpasswd (both modes), etc.
+      * Ticketer++: ccache support, ask/renew/resign/edit tickets, etc
+    - NTLM:
+      * refactor, clean SSP
+    - Extensive GSSAPI / SPNEGO support
+    - LDAP 
+      * Fixes, ASN.1 Windows variation support
+      * dclocator, answering machine for "LDAP PING", etc.
+      * add a (very) basic LDAP_client (support for various binding mechanisms, encryption, etc.)
+- More features, bug fixes and updated protocol support as listed in:
+  https://github.com/secdev/scapy/releases/tag/v2.6.0
+
 -------------------------------------------------------------------
 Thu Dec 14 11:13:45 UTC 2023 - Martin Hauke <mardnh@gmx.de>
 

scapy.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package scapy
 #
-# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2024 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
 
 
 Name:           scapy
-Version:        2.5.0
+Version:        2.6.0
 Release:        0
 Summary:        Interactive Packet Manipulation Tool
 License:        GPL-2.0-only
@@ -25,10 +25,9 @@ Group:          Productivity/Networking/Security
 URL:            https://scapy.net
 Source:         https://github.com/secdev/scapy/archive/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
 BuildRequires:  fdupes
-BuildRequires:  python3-devel
+BuildRequires:  python-rpm-macros
+BuildRequires:  python3-base >= 3.7
 BuildRequires:  python3-setuptools
-# Testing requirements: (require root permission and a fully functional network stack)
-#BuildRequires:  tcpdump
 Requires:       python3-cryptography
 Recommends:     python3-PyX
 Recommends:     python3-ipython
@@ -49,8 +48,11 @@ arpspoof, firewalk, irpas, tethereal, tcpdump, etc.
 
 %prep
 %setup -q -n scapy-%{version}
-# Fix non-executable-script rpmlint issue:
-find scapy -name "*.py" -exec sed -i "/#!/d" {} \;
+
+# In (open)SUSE /etc/protocols and /etc/services
+# moved to /usr/etc/
+sed 's|%{_sysconfdir}/protocols|%{_prefix}%{_sysconfdir}/protocols|g' -i scapy/data.py
+sed 's|%{_sysconfdir}/services|%{_prefix}%{_sysconfdir}/services|g' -i scapy/data.py
 
 %build
 %python3_build
@@ -58,24 +60,21 @@ find scapy -name "*.py" -exec sed -i "/#!/d" {} \;
 # redistribute it (sr#172834):
 rm -r doc/scapy
 
-# In (open)SUSE /etc/protocols and /etc/services
-# moved to /usr/etc/
-sed 's|%{_sysconfdir}/protocols|%{_prefix}%{_sysconfdir}/protocols|g' -i scapy/data.py
-sed 's|%{_sysconfdir}/services|%{_prefix}%{_sysconfdir}/services|g' -i scapy/data.py
-
 %install
 %python3_install
+# Fix non-executable-script rpmlint issue:
+# WARN: Using simple globbing (*.py) will break manufdb loading
+find %{buildroot}%{python3_sitelib} -name "pdu.py" -exec sed -i "/#!/d" {} \;
+find %{buildroot}%{python3_sitelib} -name "doip.py" -exec sed -i "/#!/d" {} \;
 %fdupes %{buildroot}%{python3_sitelib}
-rm -Rv %{buildroot}%{python3_sitelib}/test/
 
-#%%check
-#cd test && ./run_tests
+%check
+cd test && ./run_tests -c configs/linux.utsc -K ci_only -K scanner -K netaccess
 
 %files
 %license LICENSE
 %doc README.md
 %{_bindir}/scapy
-%{_mandir}/man1/scapy.1%{?ext_man}
 %{python3_sitelib}/scapy*
 
 %changelog