From mboxrd@z Thu Jan 1 00:00:00 1970 From: Peter Korsgaard Date: Tue, 08 Jan 2019 21:07:01 +0100 Subject: [Buildroot] [PATCH] tcpreplay: security bump to version 4.3.1 In-Reply-To: (Baruch Siach's message of "Tue, 8 Jan 2019 18:13:58 +0200") References: Message-ID: <87d0p6ud5m.fsf@dell.be.48ers.dk> List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: buildroot@busybox.net >>>>> "Baruch" == Baruch Siach writes: > Upstream CHANGELOG entry for 4.3.0 lists these fixes: > - CVE-2018-18408 use-after-free in post_args (#489) > - CVE-2018-18407 heap-buffer-overflow csum_replace4 (#488) > - CVE-2018-17974 heap-buffer-overflow dlt_en10mb_encode (#486) > - CVE-2018-17580 heap-buffer-overflow fast_edit_packet (#485) > - CVE-2018-17582 heap-buffer-overflow in get_next_packet (#484) > - CVE-2018-13112 heap-buffer-overflow in get_l2len (#477 dup #408) > Drop tr_cv_libpcap_version and ac_cv_have_bpf; unused in current > configure script. > Make configure script use pcap-config to list library dependencies. > Unfortunately, pcap-config is not entirely correct, so we still need to > set the LIBS variable for static linking. > Use the smaller tar.xz archive. > Add license file hash. > Signed-off-by: Baruch Siach Committed, thanks. -- Bye, Peter Korsgaard