Stay Secure with the Latest Linux Advisories

security advisorysecurity updateFedora

Fedora 39: tcpreplay Patch for CVE-2023-4256 and CVE-2023-43279

Patch CVE-2023-4256 and CVE-2023-43279. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-ec1fba69c2 2024-03-24 01:05:50.706342 -------------------------------------------------------------------------------- Name : tcpreplay Product : Fedora 39 Version : 4.4.4 Release : 5.fc39 URL : http://tcpreplay.appneta.com/ Summary : Replay captured network traffic Description : Tcpreplay is a tool to replay captured network traffic. Currently, tcpreplay supports pcap (tcpdump) and snoop capture formats. Also included, is tcpprep a tool to pre-process capture files to allow increased performance under certain conditions as well as capinfo which provides basic information about capture files. -------------------------------------------------------------------------------- Update Information: Patch CVE-2023-4256 and CVE-2023-43279 -------------------------------------------------------------------------------- ChangeLog: * Sat Mar 16 2024 Bojan Smojver - 4.4.1-5 - Patch CVE-2023-4256 * Sat Mar 16 2024 Bojan Smojver - 4.4.1-4 - Patch CVE-2023-43279 * Sat Jan 27 2024 Fedora Release Engineering - 4.4.4-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2255213 - CVE-2023-4256 tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2255213 [ 2 ] Bug #2255214 - CVE-2023-4256 tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2255214 [ 3 ] Bug #2269309 - CVE-2023-43279 tcpreplay: null pointer dereference in mask_cidr6 component at cidr.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2269309 [ 4 ] Bug #2269310 - CVE-2023-43279 tcpreplay: nullpointer dereference in mask_cidr6 component at cidr.c [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2269310 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-ec1fba69c2' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . The update addressing CVE-2023-4256 and CVE-2023-43279 enhances the tcpreplay utility in Fedora, bolstering its capabilities in replaying network traffic.. tcpreplay Patch,Fedora 39,network tools. . Severity: Important. LinuxSecurity.com Team

Mar 24, 2024 •Important Fedora