Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package tcpreplay for openSUSE:Factory checked in at 2026-08-18 16:37:30 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/tcpreplay (Old) and /work/SRC/openSUSE:Factory/.tcpreplay.new.1258 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "tcpreplay" Tue Aug 18 16:37:30 2026 rev:21 rq:1371672 version:4.6.1 Changes: -------- --- /work/SRC/openSUSE:Factory/tcpreplay/tcpreplay.changes 2026-08-01 18:37:38.112984385 +0200 +++ /work/SRC/openSUSE:Factory/.tcpreplay.new.1258/tcpreplay.changes 2026-08-18 16:38:15.284734651 +0200 @@ -1,0 +2,36 @@ +Sat Aug 15 18:25:33 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to 4.6.1: + * Three new security advisories, none with a CVE assigned yet: + heap out-of-bounds reads in tcpliveplay's pcap parsing, one + of which could leak adjacent heap memory onto the live + network (GHSA-4hqm-8v2c-9pwj); an inverted bounds check in + the dlt_radiotap plugin, reachable only by third-party code + linking libtcpedit directly (GHSA-pmmx-m8p5-969j); and a + heap out-of-bounds read in tcpprep cache-file parsing + (GHSA-p3f2-88rg-9mch) + * Nine defects found by a new OSS-Fuzz pipeline, mostly in + fragroute: a heap overflow write and a pointer corruption in + ip_chaff_apply(), unbounded packet growth from stacked + duplicating rules, a leaked rule chain and leaked rand_t + handles, null dereferences in delay_apply() and + raw_ip_opt_parse(), and exit() calls on two error paths + * Fix an out-of-bounds write from an undersized struct + bpf_program stub on libbpf builds, reached through tcpprep's + and tcpbridge's -f option + * Fix a use-after-free in fragroute's pkt_close() and an + uninitialised-stack read in its --dbug logging + * Fix TX_RING failing outright on interfaces with an MTU of + about 1365 or less, such as the IPv6 minimum of 1280 + * Mark the wire-format header structs packed, fixing systemic + misaligned access found by UBSan + * Remove --xdp-batch-size: raising it above the default of 1 + showed no benefit on 100GigE + * Ship a dependency-free unit test suite and a fuzz corpus + replay, both wired into make check +- Run the new test suite in %check +- Drop the -std=gnu11 pin on the bundled libopts: it compiles + clean under gcc 16's C23 default, and the build still detects + Linux TX_RING support + +------------------------------------------------------------------- Old: ---- tcpreplay-4.6.0.tar.xz tcpreplay-4.6.0.tar.xz.asc New: ---- tcpreplay-4.6.1.tar.xz tcpreplay-4.6.1.tar.xz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ tcpreplay.spec ++++++ --- /var/tmp/diff_new_pack.biNMNm/_old 2026-08-18 16:38:16.139765247 +0200 +++ /var/tmp/diff_new_pack.biNMNm/_new 2026-08-18 16:38:16.140765283 +0200 @@ -17,7 +17,7 @@ Name: tcpreplay -Version: 4.6.0 +Version: 4.6.1 Release: 0 Summary: Network analysis and testing tools License: GPL-3.0-only @@ -47,13 +47,6 @@ %build %configure \ --enable-dynamic-link -# The bundled libopts (autoopts) is not C23-clean, so it needs an older -# language level than gcc >= 15's -std=gnu23 default. Pin it for that -# directory only: pinning the whole tree also drags configure's TX_RING -# probe below C23, where <netpacket/packet.h> and <linux/if_packet.h> -# cannot be included together, which silently disabled HAVE_TX_RING and -# left tcpreplay on the slower PF_PACKET send() path. -%make_build -C libopts CFLAGS="%{optflags} -std=gnu11" %make_build %install @@ -68,6 +61,13 @@ rm %{buildroot}%{_libdir}/lib%{name}.a rm %{buildroot}%{_libdir}/pkgconfig/lib%{name}.pc +%check +# 4.6.1 added a dependency-free unit suite plus a fuzz-corpus replay, both +# wired into "make check". The integration suite under test/ is deliberately +# not part of it -- that one needs root and a live NIC -- so this stays +# runnable in the build root. +%make_build check + %files %license docs/LICENSE %doc docs/CHANGELOG ++++++ tcpreplay-4.6.0.tar.xz -> tcpreplay-4.6.1.tar.xz ++++++ ++++ 8786 lines of diff (skipped)
