You are here
Home > Preporuke > Sigurnosni nedostatak programskog paketa tcpreplay

Sigurnosni nedostatak programskog paketa tcpreplay

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

——————————————————————————–
Fedora Update Notification
FEDORA-2017-7980b5e846
2017-04-01 16:41:40.017209
——————————————————————————–

Name : tcpreplay
Product : Fedora 24
Version : 4.2.1
Release : 1.fc24
URL : http://tcpreplay.appneta.com/
Summary : Replay captured network traffic
Description :
Tcpreplay is a tool to replay captured network traffic. Currently, tcpreplay
supports pcap (tcpdump) and snoop capture formats. Also included, is tcpprep
a tool to pre-process capture files to allow increased performance under
certain conditions as well as capinfo which provides basic information about
capture files.

——————————————————————————–
Update Information:

Here is what is fixed in this release: – Fix reporting of rates < 1Mbps (#348)
– Option –unique-ip not working properly (#346) —- Features and fixes
include: – MAC rewriting capabilities by Pedro Arthur (#313) – Fix several
issues identified by Coverity (#305) – Packet distortion –fuzz-seed option by
Gabriel Ganne (#302) – Add –unique-ip-loops option to modify IPs every few
loops (#296) – Netmap startup delay increase (#290) – tcpcapinfo buffer overflow
vulnerablily (#278) – Update git-clone instructions by Kyle McDonald (#277) –
Allow fractions for –pps option (#270) – Print per-loop stats with –stats=0
(#269) – Add protection against packet drift by Guillaume Scott (#268) – Print
flow stats periodically with –stats output (#262) – Include Travis-CI build
support by Ilya Shipitsin (#264) (#285) – tcpreplay won’t replay all packets in
a pcap file with –netmap (#255) – First and last packet times in –stats
output (#239) – Switch to wire speed after 30 minutes at 6 Gbps (#210) –
tcprewrite fix checksum properly for fragmented packets (#190)
——————————————————————————–
References:

[ 1 ] Bug #1429521 – CVE-2017-6429 tcpreplay: Buffer overflow in Tcpcapinfo utility [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1429521
[ 2 ] Bug #1429522 – CVE-2017-6429 tcpreplay: Buffer overflow in Tcpcapinfo utility [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1429522
——————————————————————————–

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade tcpreplay’ at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list — package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

——————————————————————————–
Fedora Update Notification
FEDORA-2017-5e945de883
2017-04-01 16:41:45.539711
——————————————————————————–

Name : tcpreplay
Product : Fedora 25
Version : 4.2.1
Release : 1.fc25
URL : http://tcpreplay.appneta.com/
Summary : Replay captured network traffic
Description :
Tcpreplay is a tool to replay captured network traffic. Currently, tcpreplay
supports pcap (tcpdump) and snoop capture formats. Also included, is tcpprep
a tool to pre-process capture files to allow increased performance under
certain conditions as well as capinfo which provides basic information about
capture files.

——————————————————————————–
Update Information:

Here is what is fixed in this release: – Fix reporting of rates < 1Mbps (#348)
– Option –unique-ip not working properly (#346) —- Features and fixes
include: – MAC rewriting capabilities by Pedro Arthur (#313) – Fix several
issues identified by Coverity (#305) – Packet distortion –fuzz-seed option by
Gabriel Ganne (#302) – Add –unique-ip-loops option to modify IPs every few
loops (#296) – Netmap startup delay increase (#290) – tcpcapinfo buffer overflow
vulnerablily (#278) – Update git-clone instructions by Kyle McDonald (#277) –
Allow fractions for –pps option (#270) – Print per-loop stats with –stats=0
(#269) – Add protection against packet drift by Guillaume Scott (#268) – Print
flow stats periodically with –stats output (#262) – Include Travis-CI build
support by Ilya Shipitsin (#264) (#285) – tcpreplay won’t replay all packets in
a pcap file with –netmap (#255) – First and last packet times in –stats
output (#239) – Switch to wire speed after 30 minutes at 6 Gbps (#210) –
tcprewrite fix checksum properly for fragmented packets (#190)
——————————————————————————–
References:

[ 1 ] Bug #1429521 – CVE-2017-6429 tcpreplay: Buffer overflow in Tcpcapinfo utility [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1429521
[ 2 ] Bug #1429522 – CVE-2017-6429 tcpreplay: Buffer overflow in Tcpcapinfo utility [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1429522
——————————————————————————–

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade tcpreplay’ at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list — package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

AutorTomislav Protega
Cert idNCERT-REF-2017-04-0008-ADV
CveCERT-CVE-DUMMY
ID izvornikaCERT-ORIGID-DUMMY
ProizvodCERT-DUMMY-PRODUCT
Izvorhttp://www.adobe.com/
Top
More in Preporuke
Sigurnosni nedostaci programskog paketa moodle

Otkriveni su sigurnosni nedostaci u programskom paketu moodle za Fedoru. Otkriveni nedostaci potencijalnim napadačima omogućuju provođenje napada umetanjem proizvoljnog SQL...

Close