From 70ffb7933902a7af3bdc06c2ea84d03e80e31c057753d02caf797ce2536622a7 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Michal=20Kube=C4=8Dek?= Date: Fri, 14 May 2021 09:09:51 +0000 Subject: [PATCH] Accepting request 891541 from home:susnux:branches:network:utilities Update to version 4.3.4 CVE-2020-24266 and CVE-2020-24265 OBS-URL: https://build.opensuse.org/request/show/891541 OBS-URL: https://build.opensuse.org/package/show/network:utilities/tcpreplay?expand=0&rev=26 --- tcpreplay-4.3.3.tar.gz | 3 --- tcpreplay-4.3.3.tar.gz.asc | 11 ----------- tcpreplay-4.3.4.tar.xz | 3 +++ tcpreplay-4.3.4.tar.xz.asc | 11 +++++++++++ tcpreplay.changes | 21 +++++++++++++++++++++ tcpreplay.spec | 14 ++++++++------ 6 files changed, 43 insertions(+), 20 deletions(-) delete mode 100644 tcpreplay-4.3.3.tar.gz delete mode 100644 tcpreplay-4.3.3.tar.gz.asc create mode 100644 tcpreplay-4.3.4.tar.xz create mode 100644 tcpreplay-4.3.4.tar.xz.asc diff --git a/tcpreplay-4.3.3.tar.gz b/tcpreplay-4.3.3.tar.gz deleted file mode 100644 index f0c0420..0000000 --- a/tcpreplay-4.3.3.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:ed2402caa9434ff5c74b2e7b31178c73e7c7c5c4ea1e1d0e2e39a7dc46958fde -size 3727820 diff --git a/tcpreplay-4.3.3.tar.gz.asc b/tcpreplay-4.3.3.tar.gz.asc deleted file mode 100644 index a92eae9..0000000 --- a/tcpreplay-4.3.3.tar.gz.asc +++ /dev/null @@ -1,11 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQFKBAABCAA0FiEEhOT6IVyTSn2X3HbV6eIUl5O94X4FAl7mpS0WHHRjcHJlcGxh -eUBhcHBuZXRhLmNvbQAKCRDp4hSXk73hfvavB/9zzwt2kOLpZCP86gWdlFpl5g9r -5xR/nyNfHJ6yK57K5HXJ8LdFAh3/qdWVbxR2Yed4GnSbD1vXm73hbIK3FuSiWVHB -7NfXY1R2Mj6uAqNPDauVn889O2XPg1gc30inb5kwMh6hszY9ecDv+zy3FIEPio4F -QAVNsajv1dkv5UspfeR81HyuK3kYeHqsyN4hjM15qTWO35aIOuMcFBZlALsGS/W0 -NrzekbadZ1FkB5CL/oNXIwXvtAixNyUro5Kmfp24IoVtB4YilBmj2tbBCeuoFLmf -hl5b73bHKR4uG5Y4cjSygM97bjKqm9tkZU+g73idVThHpHQc3Lpt0UzBZnhG -=OY1R ------END PGP SIGNATURE----- diff --git a/tcpreplay-4.3.4.tar.xz b/tcpreplay-4.3.4.tar.xz new file mode 100644 index 0000000..130888a --- /dev/null +++ b/tcpreplay-4.3.4.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:42c055106e55852c29d94bb6e1b9e001a0723349f2985eb893a47d384c85002b +size 739280 diff --git a/tcpreplay-4.3.4.tar.xz.asc b/tcpreplay-4.3.4.tar.xz.asc new file mode 100644 index 0000000..bac50f3 --- /dev/null +++ b/tcpreplay-4.3.4.tar.xz.asc @@ -0,0 +1,11 @@ +-----BEGIN PGP SIGNATURE----- + +iQFKBAABCgA0FiEEhOT6IVyTSn2X3HbV6eIUl5O94X4FAmCN8a4WHHRjcHJlcGxh +eUBhcHBuZXRhLmNvbQAKCRDp4hSXk73hft1hCACM+8lML5P85gT0FqW3vBRSdJje +fbT6X6B6s3PK3hMswPZBxCSACAuLqohUfehBLHLdrZvLkACAT0FXXFTeBTU7lBLv +zQMlStTcF7WEJum6O2Bfunpug9C5FAwdqwxlSd52lBLM5xTXNKs1xO47VuKcOjko +Dr6elr+Lz9aJPKFv8pXuU5XF0Emav18/VZZV5vts/3dqAd9t+wp8IajdiKu3xekC +KvSqQBelcDzG9HqU5dMqSojpxVwQ3ANyJpW+7GH1u4f50cAGOMdZGa3t6pq77jEd +n329vGdi+lArgNSsC8LM67K+jPHbIPVB+cu7hF/MbWw79cgMXdZvK068aHSj +=b/r1 +-----END PGP SIGNATURE----- diff --git a/tcpreplay.changes b/tcpreplay.changes index 3d301dc..f59124c 100644 --- a/tcpreplay.changes +++ b/tcpreplay.changes @@ -1,3 +1,24 @@ +------------------------------------------------------------------- +Sat May 8 14:22:53 UTC 2021 - Ferdinand Thiessen + +- Update to version 4.3.4 + * Fixes ASAN reports memory leaks while running tests + * clean up new_cidr_map() string manipulation on error exit + * Fixed invalid --pps value protection + * Fixed packets slowly drift further and further behind when they + should be sent + * Fixed 64 bit rollover can cause pps replay issues after several + hours + * DLT_NULL/DLT_LOOP support for cross-platform PF_INET6 + * Fixed heap buffer overflow in tcpreplay fast_edit_packet + * Fixed heap buffer overflow in tcpreplay get_next_packet + * Fixed CVE-2020-24266 heap buffer overflow in tcpprep get_l2len + * Fixed CVE-2020-24265 heap buffer overflow in tcpprep + * handle malformed and unsupported packets as soft errors + * Fixed tcprewrite --fixlen not working on DLT conversion + * Fixed with multiplier option only first file can be sent and hang + * do not create tap0 if device already exists + ------------------------------------------------------------------- Mon Jun 15 10:28:57 UTC 2020 - Martin Pluskal diff --git a/tcpreplay.spec b/tcpreplay.spec index ddf0302..28ba9bb 100644 --- a/tcpreplay.spec +++ b/tcpreplay.spec @@ -1,7 +1,7 @@ # # spec file for package tcpreplay # -# Copyright (c) 2020 SUSE LLC +# Copyright (c) 2021 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,25 +17,27 @@ Name: tcpreplay -Version: 4.3.3 +Version: 4.3.4 Release: 0 Summary: Network analysis and testing tools License: GPL-3.0-only Group: Productivity/Networking/Diagnostic URL: http://tcpreplay.appneta.com/ -Source0: https://github.com/appneta/tcpreplay/releases/download/v%{version}/%{name}-%{version}.tar.gz -Source1: https://github.com/appneta/tcpreplay/releases/download/v%{version}/%{name}-%{version}.tar.gz.asc +Source0: https://github.com/appneta/tcpreplay/releases/download/v%{version}/%{name}-%{version}.tar.xz +Source1: https://github.com/appneta/tcpreplay/releases/download/v%{version}/%{name}-%{version}.tar.xz.asc Source2: %{name}.keyring BuildRequires: dbus-1-devel BuildRequires: libdnet-devel BuildRequires: libpcap-devel BuildRequires: tcpdump Requires: tcpdump -%if 0%{?suse_version} > 1110 +%if 0%{?suse_version} >= 1130 BuildRequires: libnl3-devel -%endif +%else # only needed for suse_version < 1130 (i.e. SLE11) +BuildRequires: xz BuildRoot: %{_tmppath}/%{name}-%{version}-build +%endif %description Tcpreplay is a suite of utilities for editing and replaying