[Buildroot] [PATCH 1/1] package/tcpreplay: security bump to version 4.3.3

Thomas Petazzoni thomas.petazzoni at bootlin.com
Wed Jun 17 20:00:54 UTC 2020


On Wed, 17 Jun 2020 21:56:54 +0200
Fabrice Fontaine <fontaine.fabrice at gmail.com> wrote:

> - Fix CVE-2020-12740: tcprewrite in Tcpreplay through 4.3.2 has a
>   heap-based buffer over-read during a get_c operation. The issue is
>   being triggered in the function get_ipv6_next() at common/get.c.
> - Update indentation in hash file (two spaces)
> 
> Signed-off-by: Fabrice Fontaine <fontaine.fabrice at gmail.com>
> ---
>  package/tcpreplay/tcpreplay.hash | 6 +++---
>  package/tcpreplay/tcpreplay.mk   | 2 +-
>  2 files changed, 4 insertions(+), 4 deletions(-)

Applied to master, thanks.

Thomas
-- 
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com


More information about the buildroot mailing list