Critical Fedora 40 Security Advisory for Tcpreplay v4.5.1: Important Fixes Inside
Summary
Tcpreplay is a tool to replay captured network traffic. Currently, tcpreplay
supports pcap (tcpdump) and snoop capture formats. Also included, is tcpprep
a tool to pre-process capture files to allow increased performance under
certain conditions as well as capinfo which provides basic information about
capture files.
Update Information:
Announcing v4.5.1 This release contains contributions from a record number of new contributors. This is greatly appreciated since I am a team of one, and do Tcpreplay maintenance in my spare time. There are many bug fixes and new features. Most notable features: AF_XDP socket support - if you have a newer Linux kernel, you will be able to transmit at line rates without having to install 3rd party kernel modules (e.g. netmap, PF_RING) -w tcpreplay option - this overrides the -i option, and allows you to write to a PCAP file rather than an interface --include and --exclude tcpreplay options - allows replay of a list of specific packet numbers to replay. This may slow things down, so consider using in combination with -w. --fixhdrlen tcpreplay option - added to control action on packet length changes -W tcpreplay option - suppress warnings when replaying SLL2( Linux "cooked" capture encapsulation v2) Haiku support What's Changed Add support for LINUX_SLL2 by @btriller...
Change Log
* Sat Jul 13 2024 Bojan Smojver
References
[ 1 ] Bug #2271992 - CVE-2024-3024 tcpreplay: heap-based buffer overflow [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2271992
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-ecd4cc8435' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label