tag:github.com,2008:https://github.com/SRouting/SR-tcpdump/releasesTags from SR-tcpdump2017-09-03T23:08:58Ztag:github.com,2008:Repository/115796346/tcpdump-4.9.22017-09-03T23:08:58Ztcpdump-4.9.2infrastationtag:github.com,2008:Repository/115796346/tcpdump-4.9.12017-07-22T23:24:21Ztcpdump-4.9.1infrastationtag:github.com,2008:Repository/115796346/tcpdump-4.9.02017-01-18T18:38:20Ztcpdump-4.9.0infrastationtag:github.com,2008:Repository/115796346/tcpdump-4.9.0-bp2017-01-18T18:24:53Ztcpdump-4.9.0-bp: CVE-2016-7985,7986/fixup medsa_print()<p><a title="CVE-2016-7985" href="https://github.com/advisories/GHSA-7r6q-cmgh-7mwq">CVE-2016-7985</a>,7986/fixup medsa_print()</p>
<p>The code in medsa_print() assumed that the MEDSA packet always follows
<br />an Ethernet header that is inside the allocated memory buffer. But
<br />this is not always the case, see commit <a class="commit-link" href="https://github.com/SRouting/SR-tcpdump/commit/6bc44295cfbe1f7b6633c755841518f4b159aa8a"><tt>6bc4429</tt></a> for rationale.</p>
<p>Eliminate the Ethernet header pointer and just pass on the struct
<br />lladdr_info arguments provided.</p>infrastationtag:github.com,2008:Repository/115796346/tcpdump-4.8.12016-10-26T01:43:15Ztcpdump-4.8.1: Tuesday October 25, 2016 mcr@sandelman.ca<p>Tuesday October 25, 2016 mcr@sandelman.ca</p>
<p> Summary for 4.8.1 tcpdump release
<br /> Fix "-x" for Apple PKTAP and PPI packets
<br /> Use PRIx64 to print a 64-bit number in hex.
<br /> Printer for HNCP (RFCs 7787 and 7788).
<br /> dagid is always an IPv6 address, not an opaque 128-bit string, and other fixes to RPL printer.
<br /> RSVP: Add bounds and length checks
<br /> OSPF: Do more bounds checking
<br /> Handle OpenSSL 1.1.x.
<br /> Initial support for the REdis Serialization Protocol known as RESP.
<br /> Add printing function for Generic Protocol Extension for VXLAN
<br /> draft-ietf-nvo3-vxlan-gpe-01
<br /> Network Service Header: draft-ietf-sfc-nsh-01
<br /> Don't recompile the filter if the new file has the same DLT.
<br /> Pass an adjusted struct pcap_pkthdr to the sub-printer.
<br /> Add three test cases for already fixed CVEs
<br /> <a title="CVE-2014-8767" href="https://github.com/advisories/GHSA-wcfm-6f8f-6jv8">CVE-2014-8767</a>: OLSR
<br /> <a title="CVE-2014-8768" href="https://github.com/advisories/GHSA-vfhx-w4xw-3mwg">CVE-2014-8768</a>: Geonet
<br /> <a title="CVE-2014-8769" href="https://github.com/advisories/GHSA-rfvv-px5p-7fmg">CVE-2014-8769</a>: AODV
<br /> Don't do the DDP-over-UDP heuristic first: GitHub issue <a class="issue-link js-issue-link" href="https://github.com/the-tcpdump-group/tcpdump/issues/499">the-tcpdump-group#499</a>.
<br /> Use the new debugging routines in libpcap.
<br /> Harmonize TCP source or destination ports tests with UDP ones
<br /> Introduce data types to use for integral values in packet structures.
<br /> RSVP: Fix an infinite loop
<br /> Support of Type 3 and Type 4 LISP packets.
<br /> Don't require IPv6 library support in order to support IPv6 addresses.
<br /> Many many changes to support libnetdissect usage.
<br /> Add a test that makes unaligned accesses: GitHub issue <a class="issue-link js-issue-link" href="https://github.com/the-tcpdump-group/tcpdump/issues/478">the-tcpdump-group#478</a>.
<br /> add a DNSSEC test case: GH <a class="issue-link js-issue-link" href="https://github.com/the-tcpdump-group/tcpdump/issues/445">the-tcpdump-group#445</a> and GH <a class="issue-link js-issue-link" href="https://github.com/the-tcpdump-group/tcpdump/pull/467">the-tcpdump-group#467</a>.
<br /> BGP: add decoding of ADD-PATH capability
<br /> fixes to LLC header printing, and RFC948-style IP packets</p>mcrtag:github.com,2008:Repository/115796346/tcpdump-4.8.0-bp2016-10-26T00:36:09Ztcpdump-4.8.0-bpmcrtag:github.com,2008:Repository/115796346/tcpdump-4.8.02016-07-21T12:38:50Ztcpdump-4.8.0mcrtag:github.com,2008:Repository/115796346/tcpdump-4.7.42015-05-27T15:24:52Ztcpdump-4.7.4: Friday April 10, 2015 guy@alum.mit.edu<p>Friday April 10, 2015 guy@alum.mit.edu</p>
<p> Summary for 4.7.4 tcpdump release
<br /> RPKI to Router Protocol: Fix Segmentation Faults and other problems
<br /> RPKI to Router Protocol: print strings with fn_printn()
<br /> wb: fix some bounds checks</p>
<p>(replaces errant tcpdump-1.7.4 tag)</p>mcrtag:github.com,2008:Repository/115796346/tcpdump-4.7.32015-03-11T00:47:51Ztcpdump-4.7.3mcrtag:github.com,2008:Repository/115796346/tcpdump-4.7.22015-03-09T19:27:14Ztcpdump-4.7.2: Monday March 9, 2015 mcr@sandelman.ca<p>Monday March 9, 2015 mcr@sandelman.ca</p>
<p> Summary for 4.7.2 tcpdump release
<br /> DCCP: update Packet Types with RFC4340/IANA names
<br /> fixes for <a title="CVE-2015-0261" href="https://github.com/advisories/GHSA-58ww-chv2-94cr">CVE-2015-0261</a>: IPv6 mobility header check issue
<br /> fixes for <a title="CVE-2015-2153" href="https://github.com/advisories/GHSA-55mr-3h98-7hm7">CVE-2015-2153</a>: kday packets -- TCP printer issues
<br /> fixes for <a title="CVE-2015-2154" href="https://github.com/advisories/GHSA-78vx-8c5h-72jr">CVE-2015-2154</a>: kday packets -- ethernet printer issues
<br /> fixes for <a title="CVE-2015-2155" href="https://github.com/advisories/GHSA-r2jh-fv4f-q2ch">CVE-2015-2155</a>: kday packets -- FORCES printer issues</p>
<p>Friday Nov. 12, 2014 guy@alum.mit.edu
<br /> Summary for 4.7.0 tcpdump release
<br /> changes to hex printing of CDP packets
<br /> Fix PPI printing
<br /> Radius: update Packet Type Codes and Attribute Types with RFC/IANA names
<br /> Add a routine to print "text protocols", and add FTP/HTTP/SMTP/RTSP support.
<br /> improvements to telnet printer, even if not -v
<br /> omit length for bcp, print-tcp uses it
<br /> formatting fixes for a bunch of protocols
<br /> new bounds checks for a number of protocols
<br /> split netflow 1,6, and 6 dissector up.
<br /> added geneve dissector
<br /> <a title="CVE-2014-9140" href="https://github.com/advisories/GHSA-v564-r5jq-5c36">CVE-2014-9140</a> PPP dissector fixed.</p>mcr